What is the primary purpose of a vulnerability assessment in a cloud environment?

To monitor user activity for suspicious behavior

To ensure that all cloud resources are encrypted

To configure firewalls to block malicious traffic

To identify weaknesses in systems and applications that could be exploited

What is the primary function of an intrusion detection system (IDS) in a cloud environment?

To monitor network traffic for suspicious activity and generate alerts

To authenticate users accessing the cloud network

To encrypt data transmitted between cloud resources

To block malicious traffic in real time

A company in the financial sector must comply with regulations that require data to be encrypted and access to be logged. They are using a public cloud. Which of the following is the MOST important consideration to ensure compliance?

Rely on the cloud provider's compliance certifications without verifying the company's own controls.

Choose a cloud provider that is the cheapest, regardless of security features.

Ensure that the cloud provider offers encryption at rest and in transit, and that access logs are retained for the required period.

Use a private cloud because public clouds cannot meet financial regulations.

A company has an incident response plan that includes a runbook. During a security incident, the team discovers that the runbook is outdated and does not include the current cloud architecture. The team is under pressure to respond quickly. What should they do?

Delete the runbook and rely on the cloud provider's incident response team.

Wait until the runbook is updated before taking any action.

Follow the runbook as closely as possible and note any deviations for later update.

Abandon the runbook and improvise based on the current situation.

Which logging practice is essential for security monitoring in the cloud?

Centralized logging of security events

Encrypting logs with a key stored in the same log file

Storing logs only on local servers

CompTIACloud+

Domain 4Objective 5

Security Controls CV0-004 Practice Questions (Page 3)

Part of the Security domain, which accounts for 19% of the CV0-004 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~7–11 in this domain), expect 1–2 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

8concepts

19%of the exam

Questions 11–15

11foundation · easy
What is the primary purpose of a vulnerability assessment in a cloud environment?
Select an answer first
12foundation · easy
What is the primary function of an intrusion detection system (IDS) in a cloud environment?
Select an answer first
13application · medium
A company in the financial sector must comply with regulations that require data to be encrypted and access to be logged. They are using a public cloud. Which of the following is the MOST important consideration to ensure compliance?
Select an answer first
14expert · hard
A company has an incident response plan that includes a runbook. During a security incident, the team discovers that the runbook is outdated and does not include the current cloud architecture. The team is under pressure to respond quickly. What should they do?
Select an answer first
15foundation · easy
Which logging practice is essential for security monitoring in the cloud?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CV0-004

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CV0-004” is a trademark of its owner, used for identification only.