Which of the following is a common output of a risk assessment process?

A complete patch management schedule

A prioritized list of risks with recommended mitigations

A detailed network diagram of the cloud environment

A list of all employees with access to cloud resources

What is a key step in developing a remediation strategy for cloud vulnerabilities?

Disabling affected services until a permanent fix is found

Ignoring low-risk vulnerabilities to save time

Prioritizing vulnerabilities based on risk and business impact

Immediately applying all available patches without testing

What is the primary goal of cloud configuration management?

To reduce the cost of cloud services by using cheaper resources

To increase the number of cloud resources to improve performance

To automate the deployment of applications without any manual intervention

To ensure that cloud resources are configured consistently and securely

A security analyst is investigating a potential vulnerability in a cloud environment. They notice that a storage bucket is configured to allow public read access, but the bucket contains sensitive data. The analyst also finds that the bucket's access logs are not enabled. What is the most significant vulnerability?

The bucket is not using versioning

The bucket's access logs are not enabled

The bucket is publicly readable, exposing sensitive data

Which of the following is a common cloud-specific vulnerability that arises from the shared responsibility model?

Physical theft of a server from a data center

Malware infection on a user's laptop

Phishing emails targeting employees

Insecure APIs used to manage cloud resources

CompTIACloud+

Domain 4Objective 1

Vulnerability Management CV0-004 Practice Questions (Page 3)

Part of the Security domain, which accounts for 19% of the CV0-004 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~7–11 in this domain), expect 1–2 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

9concepts

19%of the exam

Questions 11–15

11foundation · easy
Which of the following is a common output of a risk assessment process?
Select an answer first
12foundation · easy
What is a key step in developing a remediation strategy for cloud vulnerabilities?
Select an answer first
13foundation · easy
What is the primary goal of cloud configuration management?
Select an answer first
14expert · hard
A security analyst is investigating a potential vulnerability in a cloud environment. They notice that a storage bucket is configured to allow public read access, but the bucket contains sensitive data. The analyst also finds that the bucket's access logs are not enabled. What is the most significant vulnerability?
Select an answer first
15foundation · easy
Which of the following is a common cloud-specific vulnerability that arises from the shared responsibility model?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CV0-004

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CV0-004” is a trademark of its owner, used for identification only.