Which of the following is an example of risk mitigation in a cloud environment?

Implementing multi-factor authentication to reduce the risk of unauthorized access

Deciding not to use cloud services for any critical workloads

Purchasing cyber insurance to cover potential losses

Documenting the risk in a risk register without taking action

Which of the following is an example of risk avoidance in a cloud context?

Purchasing insurance to cover potential data loss

Implementing a backup strategy for cloud data

Encrypting data before storing it in the cloud

Deciding not to migrate a legacy application to the cloud because of compliance concerns

Which of the following is an example of risk transfer?

Deciding not to use cloud services for sensitive data

Documenting a risk in the risk register

Purchasing cyber insurance to cover losses from a data breach

Implementing firewalls to prevent unauthorized access

What is the purpose of documenting risk findings from a cloud risk assessment?

To provide a record of identified risks and support decision-making

To eliminate the need for future risk assessments

To transfer risks to the cloud provider

To automatically mitigate all identified risks

CompTIACloud Essentials+

Domain 4Objective 1

Recognize Risk Management Concepts Related to Cloud Services. CLO-002 Practice Questions (Page 5)

Part of the Governance, Risk, Compliance, and Security for the Cloud domain, which accounts for 22% of the CLO-002 exam. CompTIA does not publish an official question count, but from its 60-minute exam (~25–40 total, ~6–9 in this domain), expect 2–2 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

11concepts

22%of the exam

Questions 21–25

21foundation · easy
Which of the following is an example of risk mitigation in a cloud environment?
Select an answer first
22foundation · easy
Which of the following is an example of risk avoidance in a cloud context?
Select an answer first
23foundation · easy
Which of the following is an example of risk transfer?
Select an answer first
24foundation · easy
What is the purpose of documenting risk findings from a cloud risk assessment?
Select an answer first
25application · medium
A company is planning to migrate a legacy application to the cloud. The application has a known critical vulnerability that cannot be patched, and the vendor no longer supports it. The company decides not to migrate the application to the cloud and instead keeps it on-premises. Which risk management strategy is the company applying?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CLO-002

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CLO-002” is a trademark of its owner, used for identification only.