What is a key element of ongoing compliance monitoring for ISO 27001?

Updating the ISMS policy only when required by law.

Performing a single annual risk assessment.

Conducting regular internal audits.

Reviewing access logs only after a security incident.

A company is moving its payment processing to a cloud provider that offers a shared responsibility model. The company's compliance team is assessing PCI DSS compliance. Which aspect of the assessment is the company's responsibility?

Certification of the cloud provider's data centers

Physical security of the data center hosting the payment systems

Patching of the hypervisor that runs the virtual machines

Configuration of the virtual network and firewall rules

A company is required to maintain PCI DSS compliance for its cloud-based payment system. The company has implemented all required controls, but the compliance team is concerned about ongoing compliance due to frequent changes in the environment. Which strategy is most effective for maintaining compliance?

Use a configuration management database (CMDB) to track assets

Conduct annual compliance audits

Implement a change management process that includes a compliance impact assessment

Deploy a web application firewall (WAF) in front of the payment application

CompTIACloud+

Domain 4Objective 4

Compliance Standards CV0-004 Practice Questions (Page 3)

Part of the Security domain, which accounts for 19% of the CV0-004 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~7–11 in this domain), expect 1–2 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

9concepts

19%of the exam

Questions 11–15

11foundation · easy
What is a key element of ongoing compliance monitoring for ISO 27001?
Select an answer first
12expert · hard
A company is moving its payment processing to a cloud provider that offers a shared responsibility model. The company's compliance team is assessing PCI DSS compliance. Which aspect of the assessment is the company's responsibility?
Select an answer first
13foundation · easy
Which of the following is a key control area in ISO 27001?
Select an answer first
14foundation · easy
Which Trust Service Criterion in SOC 2 focuses on the system being available for operation and use as committed or agreed?
Select an answer first
15expert · hard
A company is required to maintain PCI DSS compliance for its cloud-based payment system. The company has implemented all required controls, but the compliance team is concerned about ongoing compliance due to frequent changes in the environment. Which strategy is most effective for maintaining compliance?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CV0-004

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CV0-004” is a trademark of its owner, used for identification only.

Compliance Standards CV0-004 Practice Questions (Page 3)

Questions 11–15

What is a key element of ongoing compliance monitoring for ISO 27001?

A company is moving its payment processing to a cloud provider that offers a shared responsibility model. The company's compliance team is assessing PCI DSS compliance. Which aspect of the assessment is the company's responsibility?

Which of the following is a key control area in ISO 27001?

Which Trust Service Criterion in SOC 2 focuses on the system being available for operation and use as committed or agreed?

Keep studying — Security