A company has multiple cloud applications (CRM, email, project management) that each require separate logins. Employees are frustrated with managing multiple passwords. The company wants to allow users to authenticate once and then access all applications without re-entering credentials. What should they implement?

A password manager that stores all application passwords.

Multi-Factor Authentication (MFA) for each application.

Single Sign-On (SSO) using a federated identity provider.

A virtual desktop infrastructure (VDI) that hosts all applications.

Which authentication mechanism uses a physical device that generates a time-based code to verify a user's identity?

Certificate-based authentication

A cloud administrator is reviewing IAM policies. They notice that a user has been a member of the 'Server Administrators' role for two years, but the user's job responsibilities changed six months ago to a non-administrative role. What is the best practice to apply?

Keep the user in the 'Server Administrators' role in case they need to perform administrative tasks in the future.

Remove the user from the 'Server Administrators' role and assign a role that matches their current responsibilities.

Create a new role that includes both the old and new responsibilities.

Change the user's password and require MFA to compensate for the excessive permissions.

Which technology is commonly used to implement identity federation?

Simple Mail Transfer Protocol (SMTP)

Lightweight Directory Access Protocol (LDAP)

Security Assertion Markup Language (SAML)

CompTIACloud+

Domain 4Objective 2

Identity and Access Management (IAM) CV0-004 Practice Questions (Page 2)

Part of the Security domain, which accounts for 19% of the CV0-004 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~7–11 in this domain), expect 1–2 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

9concepts

19%of the exam

Questions 6–10

6foundation · easy
Which IAM best practice helps prevent conflicts of interest by requiring more than one person to complete a critical task?
Select an answer first
7application · medium
A company has multiple cloud applications (CRM, email, project management) that each require separate logins. Employees are frustrated with managing multiple passwords. The company wants to allow users to authenticate once and then access all applications without re-entering credentials. What should they implement?
Select an answer first
8foundation · easy
Which authentication mechanism uses a physical device that generates a time-based code to verify a user's identity?
Select an answer first
9application · medium
A cloud administrator is reviewing IAM policies. They notice that a user has been a member of the 'Server Administrators' role for two years, but the user's job responsibilities changed six months ago to a non-administrative role. What is the best practice to apply?
Select an answer first
10foundation · easy
Which technology is commonly used to implement identity federation?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CV0-004

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CV0-004” is a trademark of its owner, used for identification only.

Identity and Access Management (IAM) CV0-004 Practice Questions (Page 2)

Questions 6–10

Which IAM best practice helps prevent conflicts of interest by requiring more than one person to complete a critical task?

Which authentication mechanism uses a physical device that generates a time-based code to verify a user's identity?

A cloud administrator is reviewing IAM policies. They notice that a user has been a member of the 'Server Administrators' role for two years, but the user's job responsibilities changed six months ago to a non-administrative role. What is the best practice to apply?

Which technology is commonly used to implement identity federation?

Keep studying — Security