Which of the following practices supports data portability between cloud providers?

Using only one cloud provider for all services

Using open data formats and standard APIs

Encrypting data with provider-specific keys

Storing data in provider-specific proprietary formats

What is the primary purpose of a risk register in cloud risk management?

To document only accepted risks

To track and manage identified risks systematically

To eliminate all risks automatically

To transfer risks to the cloud provider

Why is it important to assign ownership to cloud assets?

To prevent any changes to the asset

To transfer all risk to the cloud provider

To ensure that someone is accountable for the asset's security and maintenance

To automatically reduce the cost of the asset

A company is building a cloud asset inventory. The company wants to prioritize security controls for assets that contain sensitive customer data and are critical to business operations. What should the company do to achieve this?

Only document assets that are publicly accessible.

Classify each asset based on its sensitivity and criticality to the organization.

Apply the same security controls to all assets regardless of their content.

Assign ownership for each asset to the security team.

A company is using a cloud provider that offers a proprietary database service with high performance but limited export options. The company is concerned about vendor lock-in and wants to ensure it can move to another provider if needed. However, the company also needs to maintain high performance for its application. What is the best approach to balance these concerns?

Sign a long-term contract with the provider to get better pricing and support.

Avoid using the proprietary database service and use a standard relational database instead.

Use the proprietary service and accept the risk of vendor lock-in.

Use the proprietary database service but regularly export data to a portable format as a backup.

CompTIACloud Essentials+

Domain 4Objective 1

Recognize Risk Management Concepts Related to Cloud Services. CLO-002 Practice Questions (Page 4)

Part of the Governance, Risk, Compliance, and Security for the Cloud domain, which accounts for 22% of the CLO-002 exam. CompTIA does not publish an official question count, but from its 60-minute exam (~25–40 total, ~6–9 in this domain), expect 2–2 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

11concepts

22%of the exam

Questions 16–20

16foundation · easy
Which of the following practices supports data portability between cloud providers?
Select an answer first
17foundation · easy
What is the primary purpose of a risk register in cloud risk management?
Select an answer first
18foundation · easy
Why is it important to assign ownership to cloud assets?
Select an answer first
19application · medium
A company is building a cloud asset inventory. The company wants to prioritize security controls for assets that contain sensitive customer data and are critical to business operations. What should the company do to achieve this?
Select an answer first
20expert · hard
A company is using a cloud provider that offers a proprietary database service with high performance but limited export options. The company is concerned about vendor lock-in and wants to ensure it can move to another provider if needed. However, the company also needs to maintain high performance for its application. What is the best approach to balance these concerns?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CLO-002

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CLO-002” is a trademark of its owner, used for identification only.