What is the PRIMARY goal of an access control policy in a cloud environment?

To provide all users with equal access to all resources.

To track user activity for billing purposes.

To simplify the user login process by reducing authentication requirements.

To ensure that only authorized users can access specific resources.

A security analyst discovers a set of user credentials posted on a public code repository. Which action is the FIRST step in assessing the impact of this leak?

Notify all users in the organization to change their passwords immediately.

Immediately disable the user account associated with the credentials.

Determine which cloud resources and permissions are associated with the leaked credentials.

Review the cloud provider's security logs for the past 30 days to find any unauthorized access.

A company has a policy that requires all credentials to be rotated every 30 days. However, a critical application uses a service account that cannot be rotated without downtime. The application is scheduled for a major upgrade in six months. What is the BEST way to manage the risk of credential leakage for this service account in the meantime?

Disable the service account and use a user account with MFA

Ignore the rotation policy for this account until the upgrade is complete

Implement compensating controls such as network restrictions, conditional access, and monitoring for anomalous use of the service account

Store the service account password in a secure vault and share it with the operations team

Which strategy is a proactive measure to reduce the risk of leaked credentials in a cloud environment?

Sharing credentials among team members to reduce the number of accounts.

Disabling multi-factor authentication to simplify the login process.

Using short-lived credentials that automatically expire.

Storing credentials in plain text in a shared network drive for easy access.

Which phase of the incident response lifecycle involves identifying whether a security breach has occurred?

Containment, Eradication, and Recovery

CompTIACloud+

Domain 6Objective 3

Security Incidents CV0-004 Practice Questions (Page 4)

Part of the Troubleshooting domain, which accounts for 12% of the CV0-004 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~4–7 in this domain), expect 1–1 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

6concepts

12%of the exam

Questions 16–20

16foundation · easy
What is the PRIMARY goal of an access control policy in a cloud environment?
Select an answer first
17foundation · easy
A security analyst discovers a set of user credentials posted on a public code repository. Which action is the FIRST step in assessing the impact of this leak?
Select an answer first
18expert · hard
A company has a policy that requires all credentials to be rotated every 30 days. However, a critical application uses a service account that cannot be rotated without downtime. The application is scheduled for a major upgrade in six months. What is the BEST way to manage the risk of credential leakage for this service account in the meantime?
Select an answer first
19foundation · easy
Which strategy is a proactive measure to reduce the risk of leaked credentials in a cloud environment?
Select an answer first
20foundation · easy
Which phase of the incident response lifecycle involves identifying whether a security breach has occurred?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CV0-004

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CV0-004” is a trademark of its owner, used for identification only.