A DevOps team is setting up a Kubernetes cluster for a new project. They want to store the database password and API keys used by the application in a secure way, ensuring they are not visible in plain text in the deployment manifests. What should they use?

Kubernetes Secrets, referenced by the pods as environment variables or mounted as files.

A PersistentVolume that stores the secrets and is mounted into the pods.

A ConfigMap that contains the database password and API keys.

Environment variables defined directly in the deployment YAML file.

Which approach is commonly used to collect and centralize logs from containers in an orchestration platform?

Storing logs only inside each container's filesystem

Disabling logging to improve performance

Using the container image to store logs permanently

Using a logging agent on each node to forward container logs to a central system

A company runs a Kubernetes cluster with a web application that must be accessible from the internet on port 443. The application is deployed as three replicas. The team wants to route external HTTPS traffic to the application and terminate TLS at the cluster edge. Which Kubernetes resource should they use?

A NetworkPolicy that allows inbound traffic on port 443.

A ConfigMap that stores the TLS certificate and key.

An Ingress resource with a TLS certificate.

CompTIACloud+

Domain 1Objective 5

Orchestration CV0-004 Practice Questions (Page 3)

Part of the Cloud architecture domain, which accounts for 23% of the CV0-004 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–14 in this domain), expect 1–2 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

10concepts

23%of the exam

Questions 11–15

11application · medium
A DevOps team is setting up a Kubernetes cluster for a new project. They want to store the database password and API keys used by the application in a secure way, ensuring they are not visible in plain text in the deployment manifests. What should they use?
Select an answer first
12foundation · easy
Which approach is commonly used to collect and centralize logs from containers in an orchestration platform?
Select an answer first
13foundation · easy
In Kubernetes, which object is used to expose HTTP(S) services to the outside world with features like host-based routing and TLS termination?
Select an answer first
14application · medium
A company runs a Kubernetes cluster with a web application that must be accessible from the internet on port 443. The application is deployed as three replicas. The team wants to route external HTTPS traffic to the application and terminate TLS at the cluster edge. Which Kubernetes resource should they use?
Select an answer first
15foundation · easy
In Kubernetes, which object provides a stable IP address and DNS name to load-balance traffic across a set of pods?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CV0-004

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CV0-004” is a trademark of its owner, used for identification only.

Orchestration CV0-004 Practice Questions (Page 3)

Questions 11–15

A DevOps team is setting up a Kubernetes cluster for a new project. They want to store the database password and API keys used by the application in a secure way, ensuring they are not visible in plain text in the deployment manifests. What should they use?

Which approach is commonly used to collect and centralize logs from containers in an orchestration platform?

In Kubernetes, which object is used to expose HTTP(S) services to the outside world with features like host-based routing and TLS termination?

In Kubernetes, which object provides a stable IP address and DNS name to load-balance traffic across a set of pods?

Keep studying — Cloud architecture