A company wants to protect its cloud network by allowing only specific internal IP addresses to access an administrative web portal. The portal is accessed over HTTPS. Which cloud networking component should be configured to enforce this access control?

A VPN that encrypts all traffic to the portal.

A DNS service that resolves the portal's domain name to a private IP address.

A load balancer that distributes traffic to the portal servers.

A network firewall with rules that allow traffic from the specified IP addresses on port 443.

A company wants to allow remote employees to securely access internal cloud resources. The employees will use laptops that connect from various locations. Which solution provides secure access while also allowing the company to enforce access policies?

Direct Connect for each remote employee.

A firewall that allows all traffic from any IP address.

HTTPS for all internal applications.

A VPN with multi-factor authentication (MFA).

A retail company hosts a public e-commerce website on a cloud VM. Customers enter personal data during checkout. The security team requires that all data transmitted between the customer's browser and the website be encrypted. Which configuration should be implemented?

Use SSH tunneling to encrypt the connection between the customer and the website.

Set up a VPN for all customers to use before accessing the website.

Install an SSL/TLS certificate on the web server and enforce HTTPS for all traffic.

Configure a firewall to block all incoming traffic except port 80.

A media company transfers large video files daily from its on-premises data center to a cloud storage service. The transfer window is short, and the company requires consistent, high-bandwidth connectivity. The budget is flexible but the company wants to avoid paying for unused capacity. Which solution best meets these requirements?

Use a site-to-site VPN over the internet.

Use multiple VPN tunnels to aggregate bandwidth.

Provision a Direct Connect connection with a bandwidth that matches the peak transfer requirement.

Upload files through a web browser using HTTPS.

CompTIACloud Essentials+

Domain 1Objective 2

Identify Cloud Networking Concepts. CLO-002 Practice Questions (Page 4)

Part of the Cloud Concepts domain, which accounts for 24% of the CLO-002 exam. CompTIA does not publish an official question count, but from its 60-minute exam (~25–40 total, ~6–10 in this domain), expect 2–3 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

9concepts

24%of the exam

Questions 16–20

16application · medium
A company wants to protect its cloud network by allowing only specific internal IP addresses to access an administrative web portal. The portal is accessed over HTTPS. Which cloud networking component should be configured to enforce this access control?
Select an answer first
17application · medium
A company wants to allow remote employees to securely access internal cloud resources. The employees will use laptops that connect from various locations. Which solution provides secure access while also allowing the company to enforce access policies?
Select an answer first
18foundation · easy
A user accesses a cloud-based web application through a browser. Which protocol ensures that the data transmitted between the browser and the application is encrypted?
Select an answer first
19application · medium
A retail company hosts a public e-commerce website on a cloud VM. Customers enter personal data during checkout. The security team requires that all data transmitted between the customer's browser and the website be encrypted. Which configuration should be implemented?
Select an answer first
20expert · hard
A media company transfers large video files daily from its on-premises data center to a cloud storage service. The transfer window is short, and the company requires consistent, high-bandwidth connectivity. The budget is flexible but the company wants to avoid paying for unused capacity. Which solution best meets these requirements?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CLO-002

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CLO-002” is a trademark of its owner, used for identification only.

Identify Cloud Networking Concepts. CLO-002 Practice Questions (Page 4)

Questions 16–20

A company wants to protect its cloud network by allowing only specific internal IP addresses to access an administrative web portal. The portal is accessed over HTTPS. Which cloud networking component should be configured to enforce this access control?

A company wants to allow remote employees to securely access internal cloud resources. The employees will use laptops that connect from various locations. Which solution provides secure access while also allowing the company to enforce access policies?

A user accesses a cloud-based web application through a browser. Which protocol ensures that the data transmitted between the browser and the application is encrypted?

A retail company hosts a public e-commerce website on a cloud VM. Customers enter personal data during checkout. The security team requires that all data transmitted between the customer's browser and the website be encrypted. Which configuration should be implemented?

Keep studying — Cloud Concepts