What is the primary purpose of policy-based access control in a cloud environment?

To encrypt all data in the cloud automatically

To provide a graphical interface for managing user accounts

To define and enforce rules that determine access based on conditions and attributes

To replace authentication with a simpler password system

A cloud administrator needs to grant a group of developers the ability to deploy virtual machines but not delete them. Which RBAC approach is most appropriate?

Assign the 'Owner' role to the developers

Assign the 'Reader' role to the developers

Give each developer individual permissions to deploy VMs

Create a custom role with only the 'deploy' permission and assign it to the developers

A company wants to allow employees to access a document repository only if they are in the 'Marketing' department and are accessing from a corporate-managed device. Which access control approach should they use?

Discretionary Access Control (DAC) where the document owner decides who can access.

Mandatory Access Control (MAC) with security labels for documents and users.

Role-Based Access Control (RBAC) with a role for each device type.

Attribute-Based Access Control (ABAC) with policies that check department and device compliance.

CompTIACloud+

Domain 4Objective 2

Identity and Access Management (IAM) CV0-004 Practice Questions (Page 1)

Part of the Security domain, which accounts for 19% of the CV0-004 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~7–11 in this domain), expect 1–2 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

9concepts

19%of the exam

Questions 1–5

1foundation · easy
What is the primary purpose of policy-based access control in a cloud environment?
Select an answer first
2foundation · easy
A cloud administrator needs to grant a group of developers the ability to deploy virtual machines but not delete them. Which RBAC approach is most appropriate?
Select an answer first
3application · medium
A company wants to allow employees to access a document repository only if they are in the 'Marketing' department and are accessing from a corporate-managed device. Which access control approach should they use?
Select an answer first
4foundation · easy
Which component of IAM is responsible for determining what an authenticated user is allowed to do with a resource?
Select an answer first
5foundation · easy
Which of the following is an example of a 'something you have' factor in Multi-Factor Authentication?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CV0-004

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CV0-004” is a trademark of its owner, used for identification only.

Identity and Access Management (IAM) CV0-004 Practice Questions (Page 1)

Questions 1–5

What is the primary purpose of policy-based access control in a cloud environment?

A cloud administrator needs to grant a group of developers the ability to deploy virtual machines but not delete them. Which RBAC approach is most appropriate?

A company wants to allow employees to access a document repository only if they are in the 'Marketing' department and are accessing from a corporate-managed device. Which access control approach should they use?

Which component of IAM is responsible for determining what an authenticated user is allowed to do with a resource?

Which of the following is an example of a 'something you have' factor in Multi-Factor Authentication?

Keep studying — Security