Free CV0-004 Exam Braindumps
CompTIA Cloud+ Questions 156–160 (page: 33)

Updated On: 21-Sep-2026

Users report being unable to access an application that uses TLS 1.1. The users are able to access other applications on the internet.
Which of the following is the most likely reason for this issue?

  1. The security team modified user permissions.
  2. Changes were made to address vulnerabilities.
  3. Privileged access was implemented.
  4. The network ACL was modified.

Answer(s): B

Explanation:

Changes were made to address vulnerabilities likely involved disabling older, less secure protocols like TLS 1.1, causing the application that relies on it to become inaccessible.



A customer is migrating applications to the cloud and wants to grant authorization using the classification levels of each system.
Which of the following should the customer implement to ensure authorization to systems is granted when the user and system classification properties match? (Choose two.)

  1. Resource tagging
  2. Single sign-on
  3. Multifactor authentication
  4. Attribute-based access control
  5. Token-based authentication
  6. Bastion host

Answer(s): A,D

Explanation:

Resource tagging allows classification of systems and resources, enabling policies to be applied based on those tags.
Attribute-based access control (ABAC) grants authorization based on matching attributes like classification levels between users and systems.



A vulnerability exists on a critical cloud server. The cloud administrator needs to resolve the issue with minimal interruptions.
Which of the following should the administrator do next?

  1. Perform a patch installation during lunchtime.
  2. Run a vulnerability scan.
  3. Install major updates after business hours.
  4. Apply fixes in the testing environment.

Answer(s): D

Explanation:

Applying fixes in the testing environment first allows the administrator to verify the patch’s effectiveness and stability before deploying it to the critical server, minimizing interruptions.



A bank was recently hacked. The bank reviews the logs to see how the attack occurred. The security administrator suspects the logs were manipulated because no traces of the attack can be found in them.
Which of the following should have been enabled before the attack occurred?

  1. Metric and alerts
  2. Tracing and aggregation
  3. Dashboard and reporting
  4. Versioning and immutability

Answer(s): D

Explanation:

Versioning and immutability ensure that logs cannot be altered or deleted, preserving their integrity and providing reliable evidence for forensic analysis.



Which of the following is the best tool to deploy template-based, containerized workloads on premises and on the cloud?

  1. Docker
  2. Terraform
  3. Jenkins
  4. Git

Answer(s): B

Explanation:

Terraform is designed to deploy and manage infrastructure as code, including template-based, containerized workloads across both on-premises and cloud environments.



Viewing page 33 of 64
Viewing questions 161 - 165 out of 314 questions


Post your Comments and Discuss CompTIA CV0-004 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!