Which of the following is a common protocol used to implement Single Sign-On (SSO)?

Internet Control Message Protocol (ICMP)

Dynamic Host Configuration Protocol (DHCP)

A company has a complex RBAC system with over 100 roles. They are experiencing 'role explosion' where roles are too granular and difficult to manage. They want to simplify the system while maintaining least privilege. What is the best approach?

Switch to a mandatory access control (MAC) model.

Create more roles to cover all possible permission combinations.

Grant users direct permissions instead of roles.

Consolidate roles by grouping similar permissions and using policies to add fine-grained conditions.

A multinational company has offices in multiple countries. They want to implement SSO for all employees, but some countries have strict data residency laws that require personal data to remain within the country. The company uses a cloud-based identity provider. What is the most important consideration when implementing SSO?

Implement SSO only for employees in countries without data residency laws.

Use a single global identity provider for all employees to simplify management.

Ensure the identity provider has data centers in each country where employees are located.

Store all identity data on-premises and use a federation gateway.

What is the primary purpose of user authentication in a cloud environment?

To track user activity for auditing purposes

To determine what resources a user can access

To encrypt user data in transit

To verify the identity of a user before granting access

CompTIACloud+

Domain 4Objective 2

Identity and Access Management (IAM) CV0-004 Practice Questions (Page 5)

Part of the Security domain, which accounts for 19% of the CV0-004 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~7–11 in this domain), expect 1–2 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

9concepts

19%of the exam

Questions 21–25

21foundation · easy
Which of the following is a common protocol used to implement Single Sign-On (SSO)?
Select an answer first
22foundation · easy
Which of the following is an example of a condition that a policy-based access control system might evaluate?
Select an answer first
23expert · hard
A company has a complex RBAC system with over 100 roles. They are experiencing 'role explosion' where roles are too granular and difficult to manage. They want to simplify the system while maintaining least privilege. What is the best approach?
Select an answer first
24expert · hard
A multinational company has offices in multiple countries. They want to implement SSO for all employees, but some countries have strict data residency laws that require personal data to remain within the country. The company uses a cloud-based identity provider. What is the most important consideration when implementing SSO?
Select an answer first
25foundation · easy
What is the primary purpose of user authentication in a cloud environment?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CV0-004

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CV0-004” is a trademark of its owner, used for identification only.

Identity and Access Management (IAM) CV0-004 Practice Questions (Page 5)

Questions 21–25

Which of the following is a common protocol used to implement Single Sign-On (SSO)?

Which of the following is an example of a condition that a policy-based access control system might evaluate?

A company has a complex RBAC system with over 100 roles. They are experiencing 'role explosion' where roles are too granular and difficult to manage. They want to simplify the system while maintaining least privilege. What is the best approach?

What is the primary purpose of user authentication in a cloud environment?

Keep studying — Security