A company wants to detect anomalous behavior in their cloud environment, such as unusual login times or data exfiltration. They have a SIEM system but need to ensure it receives the right data. What should they configure?

Rely on the cloud provider's default monitoring, which includes anomaly detection.

Enable logging for all critical services and forward the logs to the SIEM, and set up alerts for predefined anomaly patterns.

Enable logging only for the storage service and review logs manually.

Disable logging to reduce costs, and use periodic penetration tests instead.

A company's cloud environment is being probed by external scanners. The security team wants to detect these probes and alert on suspicious patterns. They also want to block the source IP addresses automatically. Which solution should they implement?

Manually review firewall logs once a month.

Use a network firewall with static rules that allow all traffic.

Enable only the cloud provider's basic monitoring, which does not include alerting.

Deploy an intrusion prevention system (IPS) with automated blocking rules and integrate it with a security information and event management (SIEM) system.

What is the primary purpose of compliance requirements in cloud security?

To reduce the cost of cloud services

To simplify the user interface of cloud management consoles

To ensure that cloud services meet legal, regulatory, and industry standards

To improve the performance of cloud applications

What is the primary purpose of single sign-on (SSO) in an identity and access management solution?

To allow users to authenticate once and access multiple applications without re-entering credentials

To provide a backup authentication method in case of password loss

To enforce strong password policies across all applications

To encrypt all data transmitted between applications

CompTIACloud+

Domain 4Objective 5

Security Controls CV0-004 Practice Questions (Page 7)

Part of the Security domain, which accounts for 19% of the CV0-004 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~7–11 in this domain), expect 1–2 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

8concepts

19%of the exam

Questions 31–34

31application · medium
A company wants to detect anomalous behavior in their cloud environment, such as unusual login times or data exfiltration. They have a SIEM system but need to ensure it receives the right data. What should they configure?
Select an answer first
32application · medium
A company's cloud environment is being probed by external scanners. The security team wants to detect these probes and alert on suspicious patterns. They also want to block the source IP addresses automatically. Which solution should they implement?
Select an answer first
33foundation · easy
What is the primary purpose of compliance requirements in cloud security?
Select an answer first
34foundation · easy
What is the primary purpose of single sign-on (SSO) in an identity and access management solution?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CV0-004

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CV0-004” is a trademark of its owner, used for identification only.