A company has a cloud environment with a large number of users and many applications. They want to implement a least-privilege access model, but they also need to minimize the administrative overhead of managing permissions. Which approach is MOST effective?

Use attribute-based access control (ABAC) with complex policies, but do not review them.

Assign permissions individually to each user for each application.

Grant all users the same high-level permissions to simplify management.

Use role-based access control (RBAC) with predefined roles that align with job functions, and periodically review role assignments.

Which of the following is an example of a regulatory compliance standard that may apply to cloud environments?

General Data Protection Regulation (GDPR)

Hypertext Transfer Protocol (HTTP)

Which access control model assigns permissions based on the roles that users hold within an organization, rather than on individual user identities?

Attribute-based access control (ABAC)

Discretionary access control (DAC)

Role-based access control (RBAC)

A company has a hybrid cloud environment with on-premises and cloud resources. They want to monitor network traffic between the two environments for suspicious activity. They also need to ensure that the monitoring solution does not become a bottleneck. Which approach is BEST?

Use a single on-premises IDS to monitor both environments without sending data to the cloud.

Deploy a network tap or packet broker on the on-premises side and forward copies of traffic to a cloud-based IDS/IPS.

Route all traffic through a cloud-based firewall that inspects and logs every packet.

Enable flow logs on the cloud gateway and review them manually.

What is the purpose of patch management in a cloud environment?

To monitor network traffic for intrusions

To apply updates that fix security vulnerabilities and improve system stability

To replace all cloud services with newer versions

To manage user access permissions

CompTIACloud+

Domain 4Objective 5

Security Controls CV0-004 Practice Questions (Page 4)

Part of the Security domain, which accounts for 19% of the CV0-004 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~7–11 in this domain), expect 1–2 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

8concepts

19%of the exam

Questions 16–20

16expert · hard
A company has a cloud environment with a large number of users and many applications. They want to implement a least-privilege access model, but they also need to minimize the administrative overhead of managing permissions. Which approach is MOST effective?
Select an answer first
17foundation · easy
Which of the following is an example of a regulatory compliance standard that may apply to cloud environments?
Select an answer first
18foundation · easy
Which access control model assigns permissions based on the roles that users hold within an organization, rather than on individual user identities?
Select an answer first
19expert · hard
A company has a hybrid cloud environment with on-premises and cloud resources. They want to monitor network traffic between the two environments for suspicious activity. They also need to ensure that the monitoring solution does not become a bottleneck. Which approach is BEST?
Select an answer first
20foundation · easy
What is the purpose of patch management in a cloud environment?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CV0-004

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CV0-004” is a trademark of its owner, used for identification only.