Which of the following is a common technique used in cloud configuration management to prevent vulnerabilities?

Disabling logging to reduce the attack surface

Allowing developers to change security groups as needed without oversight

Using infrastructure as code (IaC) to define and deploy resources consistently

Manually configuring each resource through the cloud console

Which of the following is an example of a regulatory standard that may apply to cloud environments?

General Data Protection Regulation (GDPR)

A company runs a fleet of Windows and Linux VMs in a public cloud. A critical vulnerability was announced for a widely used application. The security team needs to patch all affected VMs quickly, but some VMs are in production and cannot tolerate downtime. What is the best approach?

Use a patch management tool that supports rolling updates and maintenance windows

Apply the patch manually to each VM during business hours

Replace all VMs with new instances from the latest golden image

Disable the affected application until the patch is applied

A company's cloud environment has experienced multiple security incidents due to misconfigured security groups and overly permissive IAM policies. The management wants a proactive approach to continuously monitor and remediate these issues. What should the security team implement?

A network intrusion detection system (IDS) placed at the cloud perimeter

A cloud security posture management (CSPM) solution with automated remediation workflows

A vulnerability scanner that focuses on operating system patches

A quarterly manual audit of all cloud resources

Which of the following is a common vulnerability that is specific to cloud environments?

Weak passwords on user accounts

Misconfigured storage buckets that expose data publicly

SQL injection in a web application

Buffer overflow in a legacy on-premises application

CompTIACloud+

Domain 4Objective 1

Vulnerability Management CV0-004 Practice Questions (Page 7)

Part of the Security domain, which accounts for 19% of the CV0-004 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~7–11 in this domain), expect 1–2 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

9concepts

19%of the exam

Questions 31–35

31foundation · easy
Which of the following is a common technique used in cloud configuration management to prevent vulnerabilities?
Select an answer first
32foundation · easy
Which of the following is an example of a regulatory standard that may apply to cloud environments?
Select an answer first
33application · medium
A company runs a fleet of Windows and Linux VMs in a public cloud. A critical vulnerability was announced for a widely used application. The security team needs to patch all affected VMs quickly, but some VMs are in production and cannot tolerate downtime. What is the best approach?
Select an answer first
34application · medium
A company's cloud environment has experienced multiple security incidents due to misconfigured security groups and overly permissive IAM policies. The management wants a proactive approach to continuously monitor and remediate these issues. What should the security team implement?
Select an answer first
35foundation · easy
Which of the following is a common vulnerability that is specific to cloud environments?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CV0-004

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CV0-004” is a trademark of its owner, used for identification only.