Which of the following is typically found in a risk register?

The organization's financial budget

A list of all cloud users and their passwords

Risk description, likelihood, impact, and mitigation status

The cloud provider's service level agreements

What is data portability in the context of cloud services?

The ability to access data from any device

The ability to back up data to a local device

The ability to encrypt data in transit

The ability to move data between cloud providers without loss or corruption

A company has multiple cloud assets, including virtual machines, databases, and storage accounts. The security team notices that some assets are not being patched or updated because no one is responsible for them. What should the company do to address this issue?

Assign clear ownership for each cloud asset to a specific individual or team.

Create a risk register to document the unpatched assets.

Increase the frequency of security assessments.

Move all assets to a single cloud provider to simplify management.

What is the purpose of risk transfer in cloud risk management?

To document the risk in a risk register

To shift the financial impact of a risk to a third party

To reduce the likelihood of the risk occurring

What does it mean to accept a risk in cloud risk management?

To implement controls to reduce the risk

To acknowledge the risk and decide to proceed without additional mitigation

To avoid the activity that creates the risk

To transfer the risk to the cloud provider

CompTIACloud Essentials+

Domain 4Objective 1

Recognize Risk Management Concepts Related to Cloud Services. CLO-002 Practice Questions (Page 8)

Part of the Governance, Risk, Compliance, and Security for the Cloud domain, which accounts for 22% of the CLO-002 exam. CompTIA does not publish an official question count, but from its 60-minute exam (~25–40 total, ~6–9 in this domain), expect 2–2 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

11concepts

22%of the exam

Questions 36–40

36foundation · easy
Which of the following is typically found in a risk register?
Select an answer first
37foundation · easy
What is data portability in the context of cloud services?
Select an answer first
38application · medium
A company has multiple cloud assets, including virtual machines, databases, and storage accounts. The security team notices that some assets are not being patched or updated because no one is responsible for them. What should the company do to address this issue?
Select an answer first
39foundation · easy
What is the purpose of risk transfer in cloud risk management?
Select an answer first
40foundation · easy
What does it mean to accept a risk in cloud risk management?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CLO-002

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CLO-002” is a trademark of its owner, used for identification only.