Which of the following is a key requirement of PCI DSS?

Encrypt cardholder data transmitted across open, public networks.

Implement multi-factor authentication for all employees.

Store cardholder data for at least one year for audit purposes.

Conduct annual penetration tests only.

A company is implementing ISO 27001 in a cloud environment that uses a multi-tenant SaaS application. The company's security team is concerned about the shared infrastructure. Which control is most important to address this concern?

Implement a process for managing third-party risks

Deploy a network access control (NAC) system

Conduct regular security awareness training

To implement ISO 27001 compliance in a cloud environment, which of the following is a key measure?

Encrypting all data in the cloud.

Implementing a firewall on all servers.

Establishing an information security management system (ISMS).

What is the primary purpose of ISO 27001?

To certify that all data is encrypted.

To provide a report on the effectiveness of internal controls.

To ensure compliance with payment card industry regulations.

To provide a framework for managing information security risks.

CompTIACloud+

Domain 4Objective 4

Compliance Standards CV0-004 Practice Questions (Page 5)

Part of the Security domain, which accounts for 19% of the CV0-004 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~7–11 in this domain), expect 1–2 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

9concepts

19%of the exam

Questions 21–25

21foundation · easy
Which of the following is a key requirement of PCI DSS?
Select an answer first
22application · medium
A company is evaluating a cloud service provider that will handle its customer relationship management (CRM) data. The company's legal team requires assurance that the provider has effective controls over data confidentiality and availability. Which type of report should the company request?
Select an answer first
23expert · hard
A company is implementing ISO 27001 in a cloud environment that uses a multi-tenant SaaS application. The company's security team is concerned about the shared infrastructure. Which control is most important to address this concern?
Select an answer first
24foundation · easy
To implement ISO 27001 compliance in a cloud environment, which of the following is a key measure?
Select an answer first
25foundation · easy
What is the primary purpose of ISO 27001?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CV0-004

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CV0-004” is a trademark of its owner, used for identification only.