Which of the following is a key feature of a Cloud Security Posture Management (CSPM) solution?

Real-time packet inspection of network traffic

Data loss prevention (DLP) for sensitive data

Antivirus scanning of virtual machines

Automated remediation of misconfigurations

A company has a mix of Windows and Linux VMs in the cloud. They need to ensure that all VMs are patched in a timely manner. Which approach is most effective?

Use a vulnerability scanner to identify missing patches and then apply them manually

Manually patch each VM individually

Only patch VMs that are exposed to the internet

Use a centralized patch management solution that supports both operating systems

A security team is conducting a vulnerability assessment of a cloud environment that includes both VMs and serverless functions. They want to use a single tool to assess both. Which tool is most appropriate?

A network vulnerability scanner that scans the VMs' IP addresses

A cloud-native vulnerability management platform that supports both VMs and serverless functions

A company operates in a region with strict data residency laws. They are using a public cloud provider and need to ensure that all personal data remains within the country. Which configuration is most appropriate?

Deploy all resources in a cloud region located within the country

Use encryption for all data at rest and in transit

Use a cloud provider that offers a global network

Implement a private cloud with dedicated physical hardware

Which tool is specifically designed to scan cloud infrastructure for misconfigurations and compliance violations?

Network packet analyzer (e.g., Wireshark)

CSPM (Cloud Security Posture Management) tool

Vulnerability scanner for on-premises servers (e.g., Nessus)

CompTIACloud+

Domain 4Objective 1

Vulnerability Management CV0-004 Practice Questions (Page 6)

Part of the Security domain, which accounts for 19% of the CV0-004 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~7–11 in this domain), expect 1–2 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

9concepts

19%of the exam

Questions 26–30

26foundation · easy
Which of the following is a key feature of a Cloud Security Posture Management (CSPM) solution?
Select an answer first
27application · medium
A company has a mix of Windows and Linux VMs in the cloud. They need to ensure that all VMs are patched in a timely manner. Which approach is most effective?
Select an answer first
28expert · hard
A security team is conducting a vulnerability assessment of a cloud environment that includes both VMs and serverless functions. They want to use a single tool to assess both. Which tool is most appropriate?
Select an answer first
29expert · hard
A company operates in a region with strict data residency laws. They are using a public cloud provider and need to ensure that all personal data remains within the country. Which configuration is most appropriate?
Select an answer first
30foundation · easy
Which tool is specifically designed to scan cloud infrastructure for misconfigurations and compliance violations?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CV0-004

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CV0-004” is a trademark of its owner, used for identification only.