A company is implementing measures to achieve PCI DSS compliance in a cloud environment. Which of the following is a necessary implementation step?

Implementing network segmentation to isolate cardholder data.

Disabling all logging to reduce data exposure.

Storing cardholder data on a separate server without encryption.

Sharing administrator credentials among team members for efficiency.

A company has implemented ISO 27001 controls in its cloud environment. The internal audit team is planning the annual internal audit. Which activity is most important to include?

Verifying that all employees have completed security awareness training

Confirming that the ISMS policy is published

Checking that the risk assessment is up to date

Reviewing the effectiveness of the controls implemented

A company is implementing PCI DSS controls for its cloud-based payment application. The company wants to ensure that only authorized personnel can access the cardholder data environment (CDE). Which control is most directly aligned with this requirement?

Encrypt all cardholder data stored in the CDE

Restrict access to the CDE based on job responsibilities

Assign unique IDs to each person with access to the CDE

Implement multi-factor authentication for all remote access to the CDE

A cloud service provider handles credit card transactions for multiple merchants. To maintain PCI DSS compliance, the provider must ensure that all system components are continuously monitored. Which approach is most effective?

Implement a change management process that requires approval for all changes

Perform monthly manual reviews of firewall and router configurations

Conduct quarterly vulnerability scans and annual penetration tests

Deploy a security information and event management (SIEM) system that collects and analyzes logs in real time

CompTIACloud+

Domain 4Objective 4

Compliance Standards CV0-004 Practice Questions (Page 6)

Part of the Security domain, which accounts for 19% of the CV0-004 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~7–11 in this domain), expect 1–2 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

9concepts

19%of the exam

Questions 26–30

26foundation · easy
Which of the following is one of the Trust Service Criteria used in SOC 2 compliance?
Select an answer first
27foundation · easy
A company is implementing measures to achieve PCI DSS compliance in a cloud environment. Which of the following is a necessary implementation step?
Select an answer first
28expert · hard
A company has implemented ISO 27001 controls in its cloud environment. The internal audit team is planning the annual internal audit. Which activity is most important to include?
Select an answer first
29application · medium
A company is implementing PCI DSS controls for its cloud-based payment application. The company wants to ensure that only authorized personnel can access the cardholder data environment (CDE). Which control is most directly aligned with this requirement?
Select an answer first
30application · medium
A cloud service provider handles credit card transactions for multiple merchants. To maintain PCI DSS compliance, the provider must ensure that all system components are continuously monitored. Which approach is most effective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CV0-004

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CV0-004” is a trademark of its owner, used for identification only.