A company is implementing PCI DSS controls in a cloud environment that uses containers. The security team needs to ensure that container images are secure and that vulnerabilities are detected. Which approach is most effective?

Enable logging for all container activity

Scan container images for vulnerabilities before deployment and regularly after deployment

Use a container orchestration platform that provides automatic updates

Implement network policies to restrict container-to-container communication

A company is implementing ISO 27001 controls in its cloud environment. The security team needs to ensure that access to sensitive data is restricted and that all access attempts are logged. Which combination of controls should they implement?

Multi-factor authentication and data loss prevention

Network segmentation and encryption

Intrusion detection system and vulnerability scanning

Role-based access control (RBAC) and centralized logging

A company has achieved SOC 2 Type II certification for its cloud services. To maintain compliance, the company must ensure that controls continue to operate effectively. Which ongoing activity is most important?

Perform continuous monitoring of control activities and periodic internal audits

Review and update the risk assessment annually

Conduct annual penetration tests

Renew the SOC 2 report every year

A company is implementing ISO 27001 in a cloud environment that uses serverless functions. The security team needs to ensure that the serverless functions are included in the ISMS scope. Which control is most relevant?

Implement a process for secure development and code review

Conduct annual penetration tests

Implement a data loss prevention (DLP) solution

Deploy a network intrusion detection system

A company wants to provide assurance to its customers about the security and availability of its cloud-based services. Which report is specifically designed for this purpose?

PCI DSS Attestation of Compliance

CompTIACloud+

Domain 4Objective 4

Compliance Standards CV0-004 Practice Questions (Page 4)

Part of the Security domain, which accounts for 19% of the CV0-004 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~7–11 in this domain), expect 1–2 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

9concepts

19%of the exam

Questions 16–20

16expert · hard
A company is implementing PCI DSS controls in a cloud environment that uses containers. The security team needs to ensure that container images are secure and that vulnerabilities are detected. Which approach is most effective?
Select an answer first
17application · medium
A company is implementing ISO 27001 controls in its cloud environment. The security team needs to ensure that access to sensitive data is restricted and that all access attempts are logged. Which combination of controls should they implement?
Select an answer first
18application · medium
A company has achieved SOC 2 Type II certification for its cloud services. To maintain compliance, the company must ensure that controls continue to operate effectively. Which ongoing activity is most important?
Select an answer first
19expert · hard
A company is implementing ISO 27001 in a cloud environment that uses serverless functions. The security team needs to ensure that the serverless functions are included in the ISMS scope. Which control is most relevant?
Select an answer first
20foundation · easy
A company wants to provide assurance to its customers about the security and availability of its cloud-based services. Which report is specifically designed for this purpose?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CV0-004

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CV0-004” is a trademark of its owner, used for identification only.