A company is implementing an information security management system (ISMS) in its cloud environment. The goal is to achieve ISO 27001 certification. Which initial step is most critical?

Purchase and deploy a next-generation firewall

Hire an external auditor to perform a gap analysis

Train all employees on security awareness

Conduct a risk assessment to identify and evaluate information security risks

A company is implementing ISO 27001 controls in a multi-cloud environment. The security team needs to ensure that all cloud services are configured securely and that misconfigurations are detected. Which control should they prioritize?

Enable multi-factor authentication for all users

Implement a web application firewall (WAF)

Deploy a cloud security posture management (CSPM) tool

Conduct a quarterly vulnerability scan

A company is implementing PCI DSS in a cloud environment that uses a shared responsibility model. The company is responsible for the security of the applications and data, while the provider is responsible for the underlying infrastructure. Which control is the company's responsibility?

Physical access controls to the data center

Network infrastructure security

Patching the operating system of the virtual machines

A company is migrating its payment processing system to a public cloud. The compliance team must ensure that the cloud environment meets PCI DSS requirements for protecting cardholder data. Which measure is most important to implement?

Implement a firewall and network segmentation

Encrypt cardholder data at rest and in transit

Use a cloud provider that is ISO 27001 certified

Perform regular backups of cardholder data

CompTIACloud+

Domain 4Objective 4

Compliance Standards CV0-004 Practice Questions (Page 2)

Part of the Security domain, which accounts for 19% of the CV0-004 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~7–11 in this domain), expect 1–2 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

9concepts

19%of the exam

Questions 6–10

6application · medium
A company is implementing an information security management system (ISMS) in its cloud environment. The goal is to achieve ISO 27001 certification. Which initial step is most critical?
Select an answer first
7application · medium
A company is implementing ISO 27001 controls in a multi-cloud environment. The security team needs to ensure that all cloud services are configured securely and that misconfigurations are detected. Which control should they prioritize?
Select an answer first
8expert · hard
A company is implementing PCI DSS in a cloud environment that uses a shared responsibility model. The company is responsible for the security of the applications and data, while the provider is responsible for the underlying infrastructure. Which control is the company's responsibility?
Select an answer first
9application · medium
A company is migrating its payment processing system to a public cloud. The compliance team must ensure that the cloud environment meets PCI DSS requirements for protecting cardholder data. Which measure is most important to implement?
Select an answer first
10foundation · easy
A cloud provider hosts a web application that processes credit card payments. Which standard is specifically designed to protect cardholder data and is most relevant to this environment?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CV0-004

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CV0-004” is a trademark of its owner, used for identification only.