How many questions are on the CompTIA Cloud+ exam and how long is it?

CV0-004 has a maximum of 90 questions, combining multiple-choice and performance-based items, with a 90-minute time limit. Performance-based questions ask you to complete tasks in a simulated environment rather than just selecting an answer.

What score do I need to pass CompTIA Cloud+?

The passing score for CompTIA Cloud+ is a scaled score of 750 on a scale of 100 to 900. Because CompTIA uses scaled scoring, the result is not a simple percentage of questions correct, and you receive a pass or fail result immediately after testing.

How much does the CompTIA Cloud+ exam cost?

A single CV0-004 exam voucher is about USD $390, though prices vary by region and promotion and CompTIA periodically updates them. Bundles that include training materials and a retake voucher are also available, so verify the current price on the CompTIA Marketplace before purchasing.

How long is CompTIA Cloud+ valid and how do I renew it?

CompTIA Cloud+ is valid for three years from the date you pass. You can renew it through CompTIA's Continuing Education (CE) program by earning continuing education units (CEUs), completing higher-level certifications, or other approved activities, rather than retaking the exam.

What is new in CV0-004 compared with CV0-003?

CV0-004 adds a dedicated DevOps Fundamentals domain (covering CI/CD, infrastructure as code, and configuration management), expands automation and security content, and reorganizes the objectives around modern multi-cloud practices. It reflects the shift toward automation-driven cloud operations since the prior version.

In cloud computing, what is the primary purpose of orchestration?

To automate the arrangement, coordination, and management of complex computer systems, middleware, and services

To manage individual cloud resources

To provide data backup and recovery services

To monitor the performance of cloud resources

In cloud deployment, what is the primary function of a cloud gateway?

To provide a point of connectivity between different cloud environments

To monitor cloud resource usage

What is the purpose of using a cloud service catalog?

To list available cloud services for users to self-provision

To monitor the performance of cloud services

To provide a detailed cost analysis of cloud services

To act as a firewall in cloud environments

Which cloud service model delivers software applications over the internet and is managed by a third-party vendor?

Infrastructure as a Service (IaaS)

In cloud computing, what is the primary function of a load balancer?

To distribute network or application traffic across multiple servers

What is the primary purpose of auto-scaling in a cloud environment?

To automatically adjust the amount of computational resources based on server load

To provide a consistent user interface

To reduce the number of servers used

In a cloud environment, what is the main purpose of implementing disaster recovery as a service (DRaaS)?

To ensure business continuity by enabling rapid recovery from a disaster

To provide additional storage space

To manage cloud-based firewalls

To optimize the performance of cloud applications

In cloud computing, what is the primary function of container orchestration?

Managing the lifecycle of containers

Monitoring the performance of physical servers

Backing up containerized applications

What is the primary advantage of using serverless computing in a cloud environment?

Reduced need for system administrators

In a cloud environment, what is the primary function of a cloud access security broker CASB?

To mediate between cloud service consumers and providers

To provide physical security for data centers

What is the primary function of a cloud management platform (CMP)?

To provide a unified management interface for cloud services

To encrypt data transmitted to the cloud

To increase the bandwidth of cloud connections

To monitor the physical health of cloud servers

In cloud computing, what is the purpose of a virtual network function (VNF)?

To implement network functions in software that can run on standard hardware

To provide virtual storage solutions

To monitor cloud infrastructure

To encrypt virtual network traffic

What does the term "cloud bursting" refer to in cloud computing?

Using public cloud resources to manage spikes in demand

Data breach in a cloud environment

Temporary increase in cloud storage capacity

Sudden shutdown of cloud services

In the context of cloud computing, what is the main purpose of implementing an API gateway?

To act as a single entry point for defined APIs

To increase the physical security of data centers

To manage virtual machine backups

What is the primary role of a cloud service broker?

To act as an intermediary between cloud providers and consumers

To negotiate contracts with cloud providers

To manage the physical infrastructure of cloud data centers

To provide technical support for cloud services

Which cloud computing service model provides users with a platform to develop, run, and manage applications without the complexity of building and maintaining the underlying infrastructure?

Infrastructure as a Service (IaaS)

In a cloud environment, which of the following best describes the concept of 'elasticity'?

The ability to expand or contract computing resources as needed

Providing a consistent user experience regardless of device

Encrypting data in transit and at rest

Implementing redundant network architectures

What is the primary function of a cloud-based Intrusion Detection System (IDS)?

To monitor network traffic for suspicious activities

To provide data encryption services

To increase data storage capacity

To optimize application performance

In cloud computing, what is the primary purpose of resource pooling?

To distribute resources among multiple clients from a shared pool

To provide dedicated resources for individual clients

To encrypt data at the storage level

To backup data across multiple locations

What is the primary purpose of a Cloud Access Security Broker CASB in cloud computing?

To act as an intermediary between cloud service users and cloud service providers for security

To provide data backup services

To manage network infrastructure

To offer financial management services

In cloud computing, what does the term "data sovereignty" refer to?

The jurisdictional control over data

The physical location of data storage

The encryption level of data in transit

The redundancy level of data storage

In the context of cloud security, what is the primary purpose of tokenization?

To replace sensitive data elements with non-sensitive equivalents

In cloud computing, what is a primary security concern of multi-tenancy?

Higher cost of security management

Reduced performance due to shared resources

Increased complexity in billing

What is the main function of a Web Application Firewall (WAF) in cloud environments?

To protect web applications by filtering and monitoring HTTP traffic

To monitor and control incoming and outgoing network traffic

To encrypt data stored in the cloud

To manage user access to cloud services

Which of the following best describes the purpose of "Cloud Security Posture Management" (CSPM)?

Automating the identification and remediation of risks in cloud environments

Managing the physical security of cloud data centers

Monitoring compliance with regulatory standards

Providing real-time threat intelligence

In a cloud environment, what is the main purpose of using "Cloud Workload Protection Platforms" (CWPP)?

To protect cloud workloads from data breaches and attacks

To monitor and balance the load across servers

To provide a platform for deploying cloud applications

To ensure the physical security of cloud infrastructure

In cloud computing, what is the main purpose of Identity and Access Management (IAM)?

To manage user identities and access permissions

To provide disaster recovery services

What type of cloud service model is particularly susceptible to hypervisor attacks?

Infrastructure as a Service (IaaS)

In cloud security, what does the Shared Responsibility Model imply?

Both the cloud provider and the customer share responsibilities for security.

Cloud providers are solely responsible for all aspects of cloud security.

Customers are solely responsible for securing their data in the cloud.

Security responsibilities are outsourced to third-party vendors.

What is the primary function of Secure Sockets Layer (SSL) in cloud computing?

To encrypt data transmitted over the Internet

To manage user access to cloud applications

Which cloud security measure is specifically designed to protect data by converting it into unreadable code that requires a key to decrypt?

Intrusion Detection Systems (IDS)

In cloud computing, what is the main purpose of implementing a Zero Trust security model?

To enforce strict access controls and not trust any user by default

To completely eliminate the need for security measures

To rely solely on external security audits

To centralize all security protocols in one location

Which of the following best describes the function of Cloud Service Level Agreements (SLAs) in terms of security?

Outlining the security protocols and procedures for cloud services

Defining the performance metrics the cloud provider must meet

Providing a detailed list of available cloud services

Ensuring compliance with specific industry regulations

Your FREE CompTIA Cloud+ (CV0-004) Practice Test 2026 – 190+ Q&A

Q: What are the CompTIA Cloud+ CV0-004 exam domains?

The exam covers six domains: Cloud Architecture (23%), Deployment (19%), Security (19%), Operations (17%), Troubleshooting (12%), and DevOps Fundamentals (10%). These weights come from the official CompTIA CV0-004 exam objectives.

Q: Are there prerequisites for the CompTIA Cloud+ exam?

There are no mandatory prerequisites, so anyone can register. However, CompTIA recommends 2 to 3 years of hands-on experience as a systems administrator or cloud engineer, plus familiarity with a major cloud provider, before taking CV0-004.

Realistic CompTIA Cloud+ CV0-004 practice questions across all six official exam domains, with instant scoring and answer explanations.

Master questions to boost your scoreMaster questions to raise your exam readiness score

How ready are you?

Cloud+ Practice Questions

In cloud computing, what is the primary purpose of orchestration?
- To manage individual cloud resources
- To automate the arrangement, coordination, and management of complex computer systems, middleware, and services
- To provide data backup and recovery services
- To monitor the performance of cloud resources
Correct answer: To automate the arrangement, coordination, and management of complex computer systems, middleware, and services
Correct answer: To automate the arrangement, coordination, and management of complex computer systems, middleware, and services. Explanation: Orchestration in cloud computing is the automated management of computer systems, middleware, and services. It is not just about automating a task but involves coordinating automated tasks into a cohesive process or workflow for IT and business purposes.
What is the primary benefit of implementing a multi-cloud strategy?
- Simplified management
- Reduced need for security
- Avoidance of vendor lock-in
- Decreased operational costs
Correct answer: Avoidance of vendor lock-in
Correct answer: Avoidance of vendor lock-in. Explanation: The primary benefit of a multi-cloud strategy is the avoidance of vendor lock-in. By using services from multiple cloud providers, organizations are not dependent on a single provider, increasing flexibility and options for service and cost optimization.
Which technology is essential for creating a hybrid cloud environment?
- Virtual LANs
- Hypervisor
- VPN (Virtual Private Network)
- Load balancer
Correct answer: VPN (Virtual Private Network)
Correct answer: VPN (Virtual Private Network). Explanation: A VPN (Virtual Private Network) is essential in creating a hybrid cloud environment as it securely connects a private cloud to a public cloud, making it a crucial component for integrating and managing resources between different cloud environments.
In cloud deployment, what is the primary function of a cloud gateway?
- To act as a firewall
- To provide a point of connectivity between different cloud environments
- To optimize cloud storage
- To monitor cloud resource usage
Correct answer: To provide a point of connectivity between different cloud environments
Correct answer: To provide a point of connectivity between different cloud environments. Explanation: A cloud gateway provides a point of connectivity between different cloud environments. It is used for data migration, integration, and connectivity between on-premises and cloud environments or between different cloud platforms.
What is the purpose of using a cloud service catalog?
- To list available cloud services for users to self-provision
- To monitor the performance of cloud services
- To provide a detailed cost analysis of cloud services
- To act as a firewall in cloud environments
Correct answer: To list available cloud services for users to self-provision
Correct answer: To list available cloud services for users to self-provision. Explanation: A cloud service catalog lists available cloud services that users can self-provision. It helps in streamlining the process of service deployment and management, offering a user-friendly interface for accessing and utilizing cloud resources.
Which cloud service model delivers software applications over the internet and is managed by a third-party vendor?
- Infrastructure as a Service (IaaS)
- Platform as a Service (PaaS)
- Software as a Service (SaaS)
- Function as a Service (FaaS)
Correct answer: Software as a Service (SaaS)
Correct answer: Software as a Service (SaaS). Explanation: Software as a Service (SaaS) is a cloud computing model that delivers software applications over the internet, which are managed by a third-party vendor. Users can access these applications from any internet-connected device.
In cloud computing, what is the primary function of a load balancer?
- To encrypt data
- To distribute network or application traffic across multiple servers
- To provide a VPN tunnel
- To backup data
Correct answer: To distribute network or application traffic across multiple servers
Correct answer: To distribute network or application traffic across multiple servers. Explanation: A load balancer in cloud computing is used to distribute network or application traffic across multiple servers. This distribution helps in optimizing resource use, maximizing throughput, reducing latency, and ensuring fault-tolerant configurations.
What is the primary purpose of auto-scaling in a cloud environment?
- To increase security
- To automatically adjust the amount of computational resources based on server load
- To provide a consistent user interface
- To reduce the number of servers used
Correct answer: To automatically adjust the amount of computational resources based on server load
Correct answer: To automatically adjust the amount of computational resources based on server load. Explanation: Auto-scaling in a cloud environment is primarily used to automatically adjust the amount of computational resources (like adding or removing servers) based on the current server load. This ensures efficient use of resources and maintains performance during varying workload conditions.
Which cloud computing feature allows for the automatic distribution of incoming application traffic across multiple targets, such as EC2 instances?
- Elastic Load Balancing
- Auto-Scaling
- Elastic Block Store
- Amazon S3
Correct answer: Elastic Load Balancing
Correct answer: Elastic Load Balancing. Explanation: Elastic Load Balancing (ELB) in cloud computing automatically distributes incoming application traffic across multiple targets, like Amazon EC2 instances, containers, and IP addresses. It helps to achieve fault tolerance in applications, ensuring high availability.
In a cloud environment, what is the main purpose of implementing disaster recovery as a service (DRaaS)?
- To provide additional storage space
- To manage cloud-based firewalls
- To ensure business continuity by enabling rapid recovery from a disaster
- To optimize the performance of cloud applications
Correct answer: To ensure business continuity by enabling rapid recovery from a disaster
Correct answer: To ensure business continuity by enabling rapid recovery from a disaster. Explanation: Disaster Recovery as a Service (DRaaS) in a cloud environment is primarily focused on ensuring business continuity by providing rapid recovery capabilities in the event of a disaster. It allows organizations to quickly restore data and application functionality with minimal downtime.
Which cloud deployment model is best suited for organizations with fluctuating resource demands, offering a scalable and flexible environment?
- Public cloud
- Private cloud
- Community cloud
- Hybrid cloud
Correct answer: Public cloud
Correct answer: Public cloud. Explanation: The public cloud is best suited for organizations with fluctuating resource demands due to its scalable and flexible nature. It provides resources on a pay-as-you-go basis, allowing for easy scaling up or down based on demand.
In cloud computing, what is the primary function of container orchestration?
- Managing the lifecycle of containers
- Encrypting container data
- Monitoring the performance of physical servers
- Backing up containerized applications
Correct answer: Managing the lifecycle of containers
Correct answer: Managing the lifecycle of containers. Explanation: Container orchestration in cloud computing primarily involves managing the lifecycle of containers. This includes provisioning, deployment, scaling, networking, and load balancing of containers.
What is the primary advantage of using serverless computing in a cloud environment?
- Enhanced security
- Reduced need for system administrators
- No need to manage servers
- Unlimited storage capacity
Correct answer: No need to manage servers
Correct answer: No need to manage servers. Explanation: The primary advantage of serverless computing is that it eliminates the need for organizations to manage servers. It allows developers to focus on writing and deploying code without worrying about the underlying infrastructure.
Which protocol is primarily used for securely transferring files to and from a cloud storage service?
- HTTP
- FTP
- SFTP
- SMTP
Correct answer: SFTP
Correct answer: SFTP. Explanation: SFTP (Secure File Transfer Protocol) is primarily used for securely transferring files to and from a cloud storage service. It provides a secure channel over an insecure network in a client-server architecture, offering an additional layer of security.
In a cloud environment, what is the primary function of a cloud access security broker CASB?
- To provide data encryption
- To manage network traffic
- To mediate between cloud service consumers and providers
- To provide physical security for data centers
Correct answer: To mediate between cloud service consumers and providers
Correct answer: To mediate between cloud service consumers and providers. Explanation: A cloud access security broker CASB acts as a gatekeeper, allowing organizations to extend their security policies beyond their own infrastructure. It mediates between cloud service consumers and providers, ensuring secure cloud usage.
What is the primary function of a cloud management platform (CMP)?
- To encrypt data transmitted to the cloud
- To provide a unified management interface for cloud services
- To increase the bandwidth of cloud connections
- To monitor the physical health of cloud servers
Correct answer: To provide a unified management interface for cloud services
Correct answer: To provide a unified management interface for cloud services. Explanation: A cloud management platform (CMP) provides a unified management interface for cloud services, enabling organizations to manage cloud resources across multiple providers and services through a single interface.
In cloud computing, what is the purpose of a virtual network function (VNF)?
- To provide virtual storage solutions
- To monitor cloud infrastructure
- To implement network functions in software that can run on standard hardware
- To encrypt virtual network traffic
Correct answer: To implement network functions in software that can run on standard hardware
Correct answer: To implement network functions in software that can run on standard hardware. Explanation: Virtual Network Function (VNF) involves implementing network functions in software that can run on standard hardware, such as routers, firewalls, and load balancers. This approach is part of the broader trend towards network function virtualization.
What does the term "cloud bursting" refer to in cloud computing?
- Data breach in a cloud environment
- Temporary increase in cloud storage capacity
- Using public cloud resources to manage spikes in demand
- Sudden shutdown of cloud services
Correct answer: Using public cloud resources to manage spikes in demand
Correct answer: Using public cloud resources to manage spikes in demand. Explanation: Cloud bursting is a configuration setup in cloud computing where a private cloud automatically offloads to a public cloud to manage spikes in demand. This helps in handling peak loads by utilizing external resources.
Which aspect of cloud computing allows for the division of a single physical server into multiple virtual machines?
- Multi-tenancy
- Virtualization
- Load balancing
- Cloud bursting
Correct answer: Virtualization
Correct answer: Virtualization. Explanation: Virtualization in cloud computing is the process that allows for the division of a single physical server into multiple isolated virtual machines. This technology is fundamental in creating scalable and efficient cloud environments.
In the context of cloud computing, what is the main purpose of implementing an API gateway?
- To provide additional storage
- To act as a single entry point for defined APIs
- To increase the physical security of data centers
- To manage virtual machine backups
Correct answer: To act as a single entry point for defined APIs
Correct answer: To act as a single entry point for defined APIs. Explanation: An API gateway in cloud computing acts as a single entry point for all API calls. It provides a unified interface for clients and encapsulates the internal structure of the application, offering API management features like security, rate limiting, and analytics.
What is the primary role of a cloud service broker?
- To negotiate contracts with cloud providers
- To act as an intermediary between cloud providers and consumers
- To manage the physical infrastructure of cloud data centers
- To provide technical support for cloud services
Correct answer: To act as an intermediary between cloud providers and consumers
Correct answer: To act as an intermediary between cloud providers and consumers. Explanation: A cloud service broker acts as an intermediary between cloud service providers and consumers, helping to manage and integrate different services and ensuring that the needs and expectations of the consumers are met effectively.
Which cloud computing service model provides users with a platform to develop, run, and manage applications without the complexity of building and maintaining the underlying infrastructure?
- Infrastructure as a Service (IaaS)
- Platform as a Service (PaaS)
- Software as a Service (SaaS)
- Database as a Service (DBaaS)
Correct answer: Platform as a Service (PaaS)
Correct answer: Platform as a Service (PaaS). Explanation: Platform as a Service (PaaS) provides users with a platform, allowing them to develop, run, and manage applications without the complexity of building and maintaining the infrastructure typically associated with developing and launching an app.
In a cloud environment, which of the following best describes the concept of 'elasticity'?
- The ability to expand or contract computing resources as needed
- Providing a consistent user experience regardless of device
- Encrypting data in transit and at rest
- Implementing redundant network architectures
Correct answer: The ability to expand or contract computing resources as needed
Correct answer: The ability to expand or contract computing resources as needed. Explanation: Elasticity in a cloud environment refers to the ability to dynamically scale computing resources up or down as needed. This allows for efficient utilization of resources in response to varying workload demands.
What is the primary function of a cloud-based Intrusion Detection System (IDS)?
- To provide data encryption services
- To monitor network traffic for suspicious activities
- To increase data storage capacity
- To optimize application performance
Correct answer: To monitor network traffic for suspicious activities
Correct answer: To monitor network traffic for suspicious activities. Explanation: A cloud-based Intrusion Detection System (IDS) is primarily used to monitor network traffic for suspicious activities and potential threats. It plays a crucial role in identifying and reporting security breaches or malicious activities.
In cloud computing, what is the primary purpose of resource pooling?
- To distribute resources among multiple clients from a shared pool
- To provide dedicated resources for individual clients
- To encrypt data at the storage level
- To backup data across multiple locations
Correct answer: To distribute resources among multiple clients from a shared pool
Correct answer: To distribute resources among multiple clients from a shared pool. Explanation: Resource pooling in cloud computing involves providing resources to clients from a shared pool. These resources are dynamically assigned and reassigned according to demand, allowing for efficient utilization and cost savings.
What is the primary purpose of a Cloud Access Security Broker CASB in cloud computing?
- To provide data backup services
- To manage network infrastructure
- To act as an intermediary between cloud service users and cloud service providers for security
- To offer financial management services
Correct answer: To act as an intermediary between cloud service users and cloud service providers for security
Correct answer: To act as an intermediary between cloud service users and cloud service providers for security. Explanation: A Cloud Access Security Broker CASB is a security policy enforcement point that sits between cloud service users and cloud service providers to ensure that the cloud applications being used comply with the organization's security policies. It is essential for managing security in cloud environments.
In cloud computing, what does the term "data sovereignty" refer to?
- The physical location of data storage
- The encryption level of data in transit
- The jurisdictional control over data
- The redundancy level of data storage
Correct answer: The jurisdictional control over data
Correct answer: The jurisdictional control over data. Explanation: Data sovereignty concerns the jurisdictional aspects of data privacy and security, pertaining to the laws and regulations of the country in which the data is stored. This is critical in cloud environments where data can be stored across different geographic locations.
Which cloud security concept involves distributing data across multiple storage devices to mitigate the risk of data loss?
- Tokenization
- Data obfuscation
- Data fragmentation
- Data dispersion
Correct answer: Data dispersion
Correct answer: Data dispersion. Explanation: Data dispersion in cloud computing involves distributing data across multiple storage devices, often in different geographic locations. This strategy is used to mitigate risks such as data loss or unauthorized access, enhancing data security and availability.
In the context of cloud security, what is the primary purpose of tokenization?
- To validate user identities
- To replace sensitive data elements with non-sensitive equivalents
- To encrypt data in transit
- To monitor network traffic
Correct answer: To replace sensitive data elements with non-sensitive equivalents
Correct answer: To replace sensitive data elements with non-sensitive equivalents. Explanation: Tokenization is a data security process in which a sensitive data element is substituted with a non-sensitive equivalent, referred to as a token, that has no extrinsic or exploitable meaning or value. It is used to safeguard sensitive data like credit card numbers.
In cloud computing, what is a primary security concern of multi-tenancy?
- Higher cost of security management
- Reduced performance due to shared resources
- Data leakage between tenants
- Increased complexity in billing
Correct answer: Data leakage between tenants
Correct answer: Data leakage between tenants. Explanation: In a multi-tenant cloud environment, where multiple customers share the same resources, a primary security concern is the potential for data leakage between tenants. Ensuring isolation and robust access controls is essential to mitigate this risk.
What is the main function of a Web Application Firewall (WAF) in cloud environments?
- To monitor and control incoming and outgoing network traffic
- To protect web applications by filtering and monitoring HTTP traffic
- To encrypt data stored in the cloud
- To manage user access to cloud services
Correct answer: To protect web applications by filtering and monitoring HTTP traffic
Correct answer: To protect web applications by filtering and monitoring HTTP traffic. Explanation: A Web Application Firewall (WAF) in cloud environments is specifically designed to protect web applications by filtering and monitoring HTTP traffic between a web application and the Internet. It is a protective layer for web applications against various attacks.
Which of the following best describes the purpose of "Cloud Security Posture Management" (CSPM)?
- Managing the physical security of cloud data centers
- Monitoring compliance with regulatory standards
- Automating the identification and remediation of risks in cloud environments
- Providing real-time threat intelligence
Correct answer: Automating the identification and remediation of risks in cloud environments
Correct answer: Automating the identification and remediation of risks in cloud environments. Explanation: Cloud Security Posture Management (CSPM) tools automate the identification and remediation of risks across cloud infrastructures, including IaaS, PaaS, and SaaS. They help in maintaining the security posture by identifying misconfigurations and compliance risks.
In a cloud environment, what is the main purpose of using "Cloud Workload Protection Platforms" (CWPP)?
- To monitor and balance the load across servers
- To protect cloud workloads from data breaches and attacks
- To provide a platform for deploying cloud applications
- To ensure the physical security of cloud infrastructure
Correct answer: To protect cloud workloads from data breaches and attacks
Correct answer: To protect cloud workloads from data breaches and attacks. Explanation: Cloud Workload Protection Platforms (CWPP) are designed to protect workloads running in the cloud from data breaches and attacks. They offer security for servers, containers, and other critical elements of cloud infrastructure.
Which cloud security strategy involves replicating data across multiple locations to ensure its availability and durability?
- Data masking
- Geo-redundancy
- Encryption at rest
- Single sign-on implementation
Correct answer: Geo-redundancy
Correct answer: Geo-redundancy. Explanation: Geo-redundancy is a cloud security strategy that involves storing copies of data in multiple geographic locations to ensure data availability and durability. This helps protect against data loss due to disasters or system failures in one location.
Which encryption method in cloud computing involves encrypting data before it leaves the client's network and enters the cloud provider's environment?
- At-rest encryption
- In-transit encryption
- Client-side encryption
- Server-side encryption
Correct answer: Client-side encryption
Correct answer: Client-side encryption. Explanation: Client-side encryption refers to the process where data is encrypted on the client's side before it is transferred to the cloud. This ensures that data is already encrypted when it enters the cloud provider's environment, enhancing data security and privacy.
In cloud computing, what is the main purpose of Identity and Access Management (IAM)?
- To provide disaster recovery services
- To ensure network performance
- To manage user identities and access permissions
- To encrypt data transmissions
Correct answer: To manage user identities and access permissions
Correct answer: To manage user identities and access permissions. Explanation: Identity and Access Management (IAM) in cloud computing is a framework of policies and technologies for ensuring that the right users have the appropriate access to technology resources. IAM systems provide administrators with the tools and technologies to control user access to critical information within their organizations.
What type of cloud service model is particularly susceptible to hypervisor attacks?
- Infrastructure as a Service (IaaS)
- Platform as a Service (PaaS)
- Software as a Service (SaaS)
- Database as a Service (DBaaS)
Correct answer: Infrastructure as a Service (IaaS)
Correct answer: Infrastructure as a Service (IaaS). Explanation: In the IaaS model, where the cloud provider manages the infrastructure including hypervisors, these systems become prime targets for attacks. Compromising the hypervisor can lead to significant security breaches, including access to all virtual machines hosted on the server.
Which cloud security threat involves the unauthorized exploitation of valid cloud service features?
- DDoS attacks
- Cloud malware
- Insider threat
- API vulnerabilities
Correct answer: API vulnerabilities
Correct answer: API vulnerabilities. Explanation: API vulnerabilities in cloud computing involve the unauthorized exploitation of valid features within cloud services' APIs. Since APIs are fundamental for cloud service operations, they are a common target and can be exploited if not properly secured.
In cloud security, what does the Shared Responsibility Model imply?
- Cloud providers are solely responsible for all aspects of cloud security.
- Customers are solely responsible for securing their data in the cloud.
- Both the cloud provider and the customer share responsibilities for security.
- Security responsibilities are outsourced to third-party vendors.
Correct answer: Both the cloud provider and the customer share responsibilities for security.
Correct answer: Both the cloud provider and the customer share responsibilities for security. Explanation: The Shared Responsibility Model in cloud computing means that security responsibilities are divided between the cloud provider and the customer. The cloud provider is responsible for the security of the cloud infrastructure, while the customer is responsible for securing their data within the cloud.
What is the primary function of Secure Sockets Layer (SSL) in cloud computing?
- To manage user access to cloud applications
- To encrypt data transmitted over the Internet
- To provide firewall services
- To monitor network traffic
Correct answer: To encrypt data transmitted over the Internet
Correct answer: To encrypt data transmitted over the Internet. Explanation: In cloud computing, Secure Sockets Layer (SSL) is primarily used to encrypt data transmitted over the Internet, especially between web browsers and web servers. This ensures the privacy and integrity of the transmitted data.
Which cloud security measure is specifically designed to protect data by converting it into unreadable code that requires a key to decrypt?
- Tokenization
- Firewalls
- Intrusion Detection Systems (IDS)
- Encryption
Correct answer: Encryption
Correct answer: Encryption. Explanation: Encryption in cloud security involves converting data into an unreadable form (cipher text) that can only be returned to its original form (plain text) with the correct key. It's a fundamental measure for protecting data privacy and security.
In cloud computing, what is the main purpose of implementing a Zero Trust security model?
- To completely eliminate the need for security measures
- To enforce strict access controls and not trust any user by default
- To rely solely on external security audits
- To centralize all security protocols in one location
Correct answer: To enforce strict access controls and not trust any user by default
Correct answer: To enforce strict access controls and not trust any user by default. Explanation: The Zero Trust model in cloud security operates on the principle that no user or device, inside or outside the network, should be trusted by default. It requires strict identity verification and access controls for every individual and device attempting to access resources on a private network.
Which of the following best describes the function of Cloud Service Level Agreements (SLAs) in terms of security?
- Defining the performance metrics the cloud provider must meet
- Outlining the security protocols and procedures for cloud services
- Providing a detailed list of available cloud services
- Ensuring compliance with specific industry regulations
Correct answer: Outlining the security protocols and procedures for cloud services
Correct answer: Outlining the security protocols and procedures for cloud services. Explanation: Cloud Service Level Agreements (SLAs) are crucial for defining the terms of service, including security protocols and procedures that the cloud provider is obligated to follow. This includes aspects like data protection, privacy policies, and response times.
In the context of cloud security, what is the primary role of a Virtual Private Network (VPN)?
- To create a dedicated physical connection to the cloud
- To increase the bandwidth available for cloud services
- To establish a secure, encrypted connection over the Internet
- To manage virtual machine deployments
Correct answer: To establish a secure, encrypted connection over the Internet
Correct answer: To establish a secure, encrypted connection over the Internet. Explanation: A Virtual Private Network (VPN) in cloud computing is used to establish a secure, encrypted connection over the Internet. This ensures that data transmitted between the user and the cloud service is protected from interception and eavesdropping.
In cloud environments, what is the primary purpose of orchestration tools?
- To manage network configurations
- To automate the deployment of resources
- To provide data encryption services
- To monitor user activities
Correct answer: To automate the deployment of resources
Correct answer: To automate the deployment of resources. Explanation: Orchestration tools in cloud environments are primarily used for automating the deployment, arrangement, coordination, and management of complex computer systems, middleware, and services. They play a key role in efficiently managing cloud resources.
Which process is essential for ensuring data integrity during cloud-based backups?
- Data deduplication
- Incremental backup
- Snapshot
- Hash checking
Correct answer: Hash checking
Correct answer: Hash checking. Explanation: Hash checking is crucial for ensuring data integrity during cloud-based backups. It involves creating a unique digital fingerprint of data that can be used to verify its integrity post-transfer.
In cloud computing, what is the primary function of a hypervisor?
- To encrypt virtual machine data
- To manage network traffic
- To create and run virtual machines
- To conduct automated system updates
Correct answer: To create and run virtual machines
Correct answer: To create and run virtual machines. Explanation: The primary function of a hypervisor in cloud computing is to create and manage virtual machines. It allows multiple virtual machines to share physical hardware resources.
Which cloud maintenance activity involves updating the underlying physical hardware and software infrastructure components?
- Service level agreement monitoring
- Patch management
- Infrastructure refresh
- Data replication
Correct answer: Infrastructure refresh
Correct answer: Infrastructure refresh. Explanation: Infrastructure refresh is a maintenance activity in cloud computing that involves updating or replacing the underlying physical hardware and software infrastructure components to ensure optimal performance and security.
In cloud environments, what is the primary purpose of implementing a disaster recovery plan?
- To ensure compliance with legal requirements
- To facilitate software updates
- To reduce operational costs
- To ensure business continuity in the event of a disaster
Correct answer: To ensure business continuity in the event of a disaster
Correct answer: To ensure business continuity in the event of a disaster. Explanation: The primary purpose of implementing a disaster recovery plan in cloud environments is to ensure business continuity in the event of a disaster. It outlines how to continue operations and recover from a disruptive event.
What is the main goal of capacity planning in a cloud environment?
- To minimize security risks
- To ensure adequate resources are available to meet future demands
- To reduce energy consumption
- To comply with regulatory standards
Correct answer: To ensure adequate resources are available to meet future demands
Correct answer: To ensure adequate resources are available to meet future demands. Explanation: Capacity planning in a cloud environment is mainly focused on ensuring that adequate resources are available to meet future demands. It involves predicting future needs and scaling resources accordingly to maintain performance and avoid over-provisioning.
Which of the following is a key consideration when implementing cloud automation?
- Physical hardware maintenance
- Manual intervention in routine tasks
- Ensuring compatibility with existing systems
- Focusing solely on cost reduction
Correct answer: Ensuring compatibility with existing systems
Correct answer: Ensuring compatibility with existing systems. Explanation: A key consideration when implementing cloud automation is ensuring compatibility with existing systems. It's crucial to ensure that automated processes and tools integrate smoothly with the current infrastructure and applications.
In cloud computing, what is the primary purpose of implementing change management?
- To document software license agreements
- To manage the introduction of new services or updates
- To oversee the physical security of data centers
- To handle customer service requests
Correct answer: To manage the introduction of new services or updates
Correct answer: To manage the introduction of new services or updates. Explanation: The primary purpose of implementing change management in cloud computing is to manage the introduction of new services or updates. It ensures that changes are made in a controlled and coordinated manner, minimizing potential disruptions and risks.
Which cloud maintenance activity is specifically focused on identifying and addressing vulnerabilities within the cloud infrastructure?
- Network traffic analysis
- Vulnerability scanning
- Data encryption
- Load balancing
Correct answer: Vulnerability scanning
Correct answer: Vulnerability scanning. Explanation: Vulnerability scanning is a cloud maintenance activity dedicated to identifying and addressing security vulnerabilities within the cloud infrastructure. This process helps in proactively detecting potential security issues before they can be exploited.
In cloud computing, what is the main purpose of implementing automated scaling?
- To reduce manual intervention in resource allocation
- To increase the physical security of servers
- To improve data encryption techniques
- To enhance user authentication processes
Correct answer: To reduce manual intervention in resource allocation
Correct answer: To reduce manual intervention in resource allocation. Explanation: Automated scaling in cloud computing primarily aims to reduce manual intervention in the process of resource allocation. It allows the system to dynamically adjust resources based on current demand, improving efficiency and performance.
Which activity is crucial for maintaining data accuracy and consistency across multiple cloud storage locations?
- Data replication
- Load balancing
- Data deduplication
- Network sniffing
Correct answer: Data replication
Correct answer: Data replication. Explanation: Data replication is essential for maintaining data accuracy and consistency across multiple cloud storage locations. It ensures that copies of data are kept synchronized across different storage environments.
In the context of cloud maintenance, what is the primary function of configuration management tools?
- To manage network traffic
- To keep track of system configurations and automate the process of making changes
- To monitor user activities
- To encrypt data transmissions
Correct answer: To keep track of system configurations and automate the process of making changes
Correct answer: To keep track of system configurations and automate the process of making changes. Explanation: Configuration management tools in cloud maintenance primarily keep track of system configurations and automate the process of making changes. These tools help in maintaining consistency in resource configuration over time, crucial for the stability and reliability of cloud services.
What is the main advantage of implementing predictive maintenance in a cloud environment?
- Reducing the physical space required for hardware
- Decreasing the overall cost of storage
- Preventing system failures before they occur
- Enhancing data encryption techniques
Correct answer: Preventing system failures before they occur
Correct answer: Preventing system failures before they occur. Explanation: The main advantage of implementing predictive maintenance in a cloud environment is to prevent system failures before they occur. It involves using data analysis tools and techniques to detect issues and potential points of failure, allowing for proactive maintenance.
In cloud environments, what is the purpose of log file analysis?
- To upgrade software versions
- To monitor and analyze system operations for security and performance issues
- To manage user authentication processes
- To allocate resources for load balancing
Correct answer: To monitor and analyze system operations for security and performance issues
Correct answer: To monitor and analyze system operations for security and performance issues. Explanation: Log file analysis in cloud environments is used to monitor and analyze system operations. This includes tracking security incidents, system errors, and performance bottlenecks, providing valuable insights for maintenance and optimization.
Which maintenance process is involved in updating cloud applications to newer versions?
- Patch management
- Network traffic analysis
- Data encryption
- User authentication
Correct answer: Patch management
Correct answer: Patch management. Explanation: Patch management is the maintenance process involved in updating cloud applications to newer versions. It includes the systematic notification, identification, deployment, installation, and verification of patches to cloud applications and services.
What is the primary goal of disaster recovery testing in a cloud environment?
- To assess the physical security of data centers
- To verify the effectiveness of the disaster recovery plan
- To evaluate the user interface of cloud applications
- To measure the network bandwidth capacity
Correct answer: To verify the effectiveness of the disaster recovery plan
Correct answer: To verify the effectiveness of the disaster recovery plan. Explanation: The primary goal of disaster recovery testing in a cloud environment is to verify the effectiveness of the disaster recovery plan. This involves simulating various disaster scenarios to ensure that the recovery procedures are effective and meet the required recovery objectives.
Which process in cloud maintenance involves checking and managing the licenses of software used in the cloud environment?
- License management
- Resource allocation
- Data deduplication
- Performance tuning
Correct answer: License management
Correct answer: License management. Explanation: License management in cloud maintenance involves checking and managing the licenses of software used in the cloud environment. This process ensures compliance with software licensing agreements and helps avoid legal and financial penalties.
In a cloud computing environment, what does the term 'autoscaling' refer to?
- Automatically updating software across all servers
- Dynamically adjusting the number of active servers based on load
- Scaling the physical size of the data center
- Automatically increasing storage capacity
Correct answer: Dynamically adjusting the number of active servers based on load
Correct answer: Dynamically adjusting the number of active servers based on load. Explanation: Autoscaling in a cloud environment refers to the dynamic adjustment of the number of active servers to meet the current load requirements. This ensures optimal resource utilization and maintains performance levels without manual intervention.
Which cloud management task is primarily concerned with ensuring compliance with legal and regulatory standards?
- Resource optimization
- Security management
- Cost management
- Governance
Correct answer: Governance
Correct answer: Governance. Explanation: Governance in cloud management involves ensuring that cloud deployments comply with legal, regulatory, and policy standards. This includes monitoring and enforcing compliance with these standards.
What tool or technique in cloud management is most effective for detecting unauthorized access to cloud resources?
- Cost analysis tools
- Intrusion detection systems (IDS)
- Resource tagging
- Automated scaling tools
Correct answer: Intrusion detection systems (IDS)
Correct answer: Intrusion detection systems (IDS). Explanation: Intrusion detection systems (IDS) are designed to detect unauthorized access or anomalies in network traffic and system behavior. They are essential tools for maintaining security in cloud environments.
Which of the following best describes 'chargeback' in cloud computing?
- Charging clients based on resource consumption
- Refunding clients for unused resources
- Distributing costs among different departments
- Billing for cloud services on a subscription basis
Correct answer: Charging clients based on resource consumption
Correct answer: Charging clients based on resource consumption. Explanation: Chargeback in cloud computing refers to the practice of charging clients or internal departments based on their actual consumption of cloud resources. This helps in attributing the cost fairly based on usage.
In cloud management, what is the primary function of Configuration Management Databases CMDB?
- Storing configuration information about hardware and software assets
- Managing user access and permissions
- Optimizing cloud resource costs
- Monitoring network traffic
Correct answer: Storing configuration information about hardware and software assets
Correct answer: Storing configuration information about hardware and software assets. Explanation: A Configuration Management Database CMDB is used to store information about hardware and software assets (known as configuration items) in a cloud environment. This includes their configurations, relationships, and dependencies.
In cloud management, which process involves identifying and correcting cloud resource issues before they affect service?
- Proactive maintenance
- Disaster recovery planning
- Resource tagging
- Cost optimization
Correct answer: Proactive maintenance
Correct answer: Proactive maintenance. Explanation: Proactive maintenance in cloud management involves regularly checking and maintaining cloud resources to identify and correct issues before they escalate into problems affecting services.
Which of these is a key feature of cloud-based disaster recovery planning?
- Regular physical backups
- On-premises redundant systems
- Rapid provisioning of resources for recovery
- Manual intervention for resource allocation
Correct answer: Rapid provisioning of resources for recovery
Correct answer: Rapid provisioning of resources for recovery. Explanation: A key feature of cloud-based disaster recovery is the ability to rapidly provision resources to restore services in the event of a disaster. This ensures minimal downtime and data loss.
In cloud computing, what is the primary purpose of a 'service level agreement' SLA?
- To define the technical specifications of cloud services
- To outline the legal terms and conditions between provider and client
- To document the performance and availability standards agreed upon
- To list the prices and billing models for cloud services
Correct answer: To document the performance and availability standards agreed upon
Correct answer: To document the performance and availability standards agreed upon. Explanation: A service level agreement SLA in cloud computing is a contract between a service provider and the end user that defines the level of service expected, including performance and availability metrics, responsibilities, and warranties.
Which cloud management function involves monitoring resource usage to control costs and optimize efficiency?
- Compliance auditing
- Performance monitoring
- Resource tagging
- Capacity planning
Correct answer: Capacity planning
Correct answer: Capacity planning. Explanation: Capacity planning in cloud management is the process of determining the necessary resources to meet future workload demands. It involves monitoring resource usage to optimize efficiency and control costs.
In cloud management, what is 'resource tagging' primarily used for?
- Identifying underutilized resources for decommissioning
- Assigning metadata to cloud resources for easier management and categorization
- Encrypting data stored in cloud resources
- Monitoring network traffic between cloud resources
Correct answer: Assigning metadata to cloud resources for easier management and categorization
Correct answer: Assigning metadata to cloud resources for easier management and categorization. Explanation: Resource tagging in cloud management involves assigning labels or metadata to cloud resources. This practice aids in organizing, managing, and locating resources, as well as in cost allocation and security.
What does 'multi-tenancy' in cloud computing refer to?
- Multiple cloud services sharing the same physical resources
- A single cloud service being distributed across multiple physical locations
- Multiple customers sharing the same cloud infrastructure
- A single customer using multiple cloud service providers
Correct answer: Multiple customers sharing the same cloud infrastructure
Correct answer: Multiple customers sharing the same cloud infrastructure. Explanation: Multi-tenancy in cloud computing refers to a single instance of software running on a server that serves multiple tenants (customers). Tenants may share common access with specific privileges to the software instance and the underlying infrastructure.
Which aspect of cloud management involves ensuring that cloud deployments adhere to relevant industry standards and legislation?
- Compliance management
- Resource optimization
- Service continuity planning
- Cost management
Correct answer: Compliance management
Correct answer: Compliance management. Explanation: Compliance management in cloud environments involves ensuring that cloud services and deployments are in line with industry standards, legal requirements, and organizational policies.
In cloud management, what is the main purpose of using 'Infrastructure as Code' IaC?
- To automate the provisioning and management of cloud infrastructure
- To encrypt data in transit and at rest
- To monitor and analyze network traffic
- To manage user identities and access rights
Correct answer: To automate the provisioning and management of cloud infrastructure
Correct answer: To automate the provisioning and management of cloud infrastructure. Explanation: Infrastructure as Code IaC is a key practice in cloud management that involves managing and provisioning computing infrastructure through machine-readable definition files, rather than physical hardware configuration or interactive configuration tools. This enables automation, repeatability, and version control in infrastructure deployment.
What is the primary benefit of implementing 'cloud federation' in cloud management?
- Enhancing data security through distributed storage
- Increasing operational efficiency by centralizing management
- Enabling seamless resource sharing across different cloud environments
- Reducing costs through bulk purchasing of cloud resources
Correct answer: Enabling seamless resource sharing across different cloud environments
Correct answer: Enabling seamless resource sharing across different cloud environments. Explanation: Cloud federation refers to the arrangement and cooperation between different cloud providers to allow their resources to be shared seamlessly. This can provide users with a broader network of resources and services.
Which tool in cloud management is primarily used for automating application deployment, scaling, and operations?
- Kubernetes
- Terraform
- Nagios
- Ansible
Correct answer: Kubernetes
Correct answer: Kubernetes. Explanation: Kubernetes is an open-source platform designed to automate deploying, scaling, and operating application containers. It helps manage containerized applications across multiple hosts and provides tools for deploying applications, scaling them as necessary, and managing changes to existing containerized applications.
In cloud management, what is the primary function of 'cost allocation tags'?
- To encrypt sensitive data in the cloud
- To manage network access control lists
- To assign costs of cloud resources to different business units or projects
- To monitor the performance of cloud services
Correct answer: To assign costs of cloud resources to different business units or projects
Correct answer: To assign costs of cloud resources to different business units or projects. Explanation: Cost allocation tags in cloud management are used to assign the costs associated with cloud resources to specific business units, projects, or other categories. This aids in tracking and managing cloud expenses more effectively.
What is the purpose of a 'cloud broker' in cloud computing environments?
- To negotiate contracts between cloud providers and customers
- To provide additional security layers for cloud data
- To optimize network routes within the cloud
- To manage cloud resource provisioning
Correct answer: To negotiate contracts between cloud providers and customers
Correct answer: To negotiate contracts between cloud providers and customers. Explanation: A cloud broker acts as an intermediary between cloud service providers and consumers, helping to negotiate contracts, manage services, integrate operations, and optimize costs on behalf of the consumer.
Which cloud management activity involves regular testing and updating of disaster recovery plans?
- Risk assessment
- Service continuity planning
- Compliance auditing
- Performance benchmarking
Correct answer: Service continuity planning
Correct answer: Service continuity planning. Explanation: Service continuity planning in cloud management involves developing, testing, and updating disaster recovery and business continuity plans. This ensures that services can be maintained or quickly restored in the event of a disruption.
In cloud computing, what is the most likely cause of increased latency in data transfer between a user and an application hosted in the cloud?
- Insufficient storage capacity
- High CPU utilization
- Network congestion
- Inadequate memory allocation
Correct answer: Network congestion
Correct answer: Network congestion. Explanation: Network congestion is a common cause of increased latency in cloud environments, as it directly affects the time taken for data to travel between the user and the cloud-hosted application. This can be due to a high volume of traffic or inefficient routing.
Which tool or technique is most effective for diagnosing packet loss in a cloud network environment?
- Ping
- Traceroute
- CPU monitoring
- Disk I/O monitoring
Correct answer: Traceroute
Correct answer: Traceroute. Explanation: Traceroute is an effective tool for diagnosing packet loss in a network. It shows the path that packets take to reach a destination and identifies at which hop packet loss is occurring, making it invaluable for troubleshooting network issues in the cloud.
What is the first step in troubleshooting a cloud service that is not performing as expected?
- Checking the physical connections
- Rebooting the server
- Reviewing the service-level agreement (SLA)
- Consulting the cloud service provider's documentation
Correct answer: Consulting the cloud service provider's documentation
Correct answer: Consulting the cloud service provider's documentation. Explanation: When a cloud service is not performing as expected, the first step should be to consult the cloud service provider's documentation. This often contains troubleshooting guides, best practices, and other vital information for diagnosing and resolving issues.
In cloud-based virtual environments, which issue is most likely to cause a virtual machine (VM) to become unresponsive?
- Misconfigured network settings
- Overallocated CPU resources
- Overutilization of host resources
- Incorrect time synchronization
Correct answer: Overutilization of host resources
Correct answer: Overutilization of host resources. Explanation: Overutilization of host resources, such as CPU, memory, or I/O, can cause VMs to become unresponsive. This happens when the host is unable to allocate sufficient resources to the VM due to high demand from other VMs or processes.
What is a common cause of performance degradation in a cloud storage service?
- Exceeding IOPS (Input/Output Operations Per Second.) limits
- Low network latency
- Excess server capacity
- Underutilized CPU resources
Correct answer: Exceeding IOPS (Input/Output Operations Per Second.) limits
Correct answer: Exceeding IOPS (Input/Output Operations Per Second.) limits. Explanation: Exceeding the IOPS limits of a cloud storage service can lead to performance degradation. IOPS limits define the maximum read/write operations per second, and exceeding these limits can slow down data access and processing.
In a cloud environment, what is a common cause of an application failing to connect to its database?
- Incorrect firewall rules
- Overallocated memory
- High CPU usage
- Redundant network paths
Correct answer: Incorrect firewall rules
Correct answer: Incorrect firewall rules. Explanation: Incorrectly configured firewall rules can prevent applications from connecting to their databases in a cloud environment. These rules might inadvertently block the ports or IP addresses required for the database connection.
What troubleshooting step is crucial when a cloud-based application experiences intermittent connectivity issues?
- Increasing the application's memory allocation
- Monitoring network traffic
- Scaling up the CPU resources
- Defragmenting the storage disk
Correct answer: Monitoring network traffic
Correct answer: Monitoring network traffic. Explanation: Monitoring network traffic is crucial for identifying the root cause of intermittent connectivity issues in cloud-based applications. It helps in pinpointing whether the issue is due to network congestion, packet loss, or other network-related problems.
Which action should be taken first when a cloud-based application's response time is slower than usual?
- Increasing the bandwidth
- Analyzing application logs
- Upgrading the server hardware
- Changing the data center location
Correct answer: Analyzing application logs
Correct answer: Analyzing application logs. Explanation: When a cloud-based application's response time is slower than usual, the first action should be to analyze application logs. These logs can provide insights into errors, resource bottlenecks, or other issues affecting performance.
What is a typical symptom of a misconfigured security group in a cloud environment?
- Decreased storage capacity
- Increased CPU utilization
- Inability to establish remote connections
- Reduced memory usage
Correct answer: Inability to establish remote connections
Correct answer: Inability to establish remote connections. Explanation: A misconfigured security group in a cloud environment can lead to the inability to establish remote connections. Security groups act as a virtual firewall, and incorrect configurations can block incoming or outgoing network traffic necessary for such connections.
In a cloud environment, what is the likely cause of a sudden increase in billing or resource usage costs?
- Decreased network latency
- Misconfigured auto-scaling settings
- Over-efficient load balancing
- Underutilized storage resources
Correct answer: Misconfigured auto-scaling settings
Correct answer: Misconfigured auto-scaling settings. Explanation: Misconfigured auto-scaling settings in a cloud environment can lead to a sudden increase in billing or resource usage costs. If the thresholds for scaling are set too low or the scaling policies are not optimized, it can result in unnecessary scaling up of resources, thereby increasing costs.
What tool or method is most effective for identifying a memory leak in a cloud-based application?
- Network traffic analysis
- CPU utilization monitoring
- Application profiling
- Disk I/O monitoring
Correct answer: Application profiling
Correct answer: Application profiling. Explanation: Application profiling is the most effective method for identifying memory leaks in cloud-based applications. It involves analyzing the application's runtime to monitor memory allocation and usage, helping to pinpoint the source of a memory leak.
In cloud environments, which of the following is a common cause of DNS resolution failures?
- Misconfigured security groups
- Inadequate storage allocation
- Incorrect DNS server settings
- Overloaded application servers
Correct answer: Incorrect DNS server settings
Correct answer: Incorrect DNS server settings. Explanation: Incorrect DNS server settings are a common cause of DNS resolution failures in cloud environments. Misconfiguration can prevent cloud resources from correctly resolving domain names, leading to connectivity issues.
When experiencing performance issues in a cloud-based database, what is the first metric that should be checked?
- Network latency
- CPU usage
- Disk I/O
- Memory usage
Correct answer: Disk I/O
Correct answer: Disk I/O. Explanation: Disk I/O is a critical metric to check first when experiencing performance issues in a cloud-based database. High or inefficient disk I/O can be a primary bottleneck affecting database performance.
Which component should be primarily investigated when a cloud-based virtual machine experiences slow boot times?
- Network configurations
- CPU allocation
- Storage performance
- Memory capacity
Correct answer: Storage performance
Correct answer: Storage performance. Explanation: Slow boot times in cloud-based virtual machines are often related to storage performance issues. This includes slow disk reads/writes or storage bottlenecks, impacting the time it takes for the VM to access and load necessary data during boot.
In cloud computing, what is a common cause of service interruption during a scale-down operation?
- Insufficient network bandwidth
- Premature termination of critical instances
- Overutilization of CPU resources
- Security group misconfigurations
Correct answer: Premature termination of critical instances
Correct answer: Premature termination of critical instances. Explanation: During a scale-down operation in cloud computing, premature termination of critical instances can cause service interruptions. If auto-scaling is not configured correctly, essential instances might be terminated unexpectedly, leading to service disruptions.
What is a likely cause of a sudden decrease in cloud application performance during peak usage times?
- Inadequate auto-scaling configuration
- Excessive memory allocation
- Low network traffic
- High disk storage availability
Correct answer: Inadequate auto-scaling configuration
Correct answer: Inadequate auto-scaling configuration. Explanation: Inadequate auto-scaling configuration can lead to decreased performance during peak usage times. If the scaling policies are not set correctly, the system may not provision enough resources to meet the increased demand, resulting in performance degradation.
What is the primary reason for a "502 Bad Gateway" error in a cloud-based web application?
- The application is down for maintenance
- There is a misconfiguration in load balancing
- The SSL certificate has expired
- The application is experiencing high traffic
Correct answer: There is a misconfiguration in load balancing
Correct answer: There is a misconfiguration in load balancing. Explanation: A "502 Bad Gateway" error in a cloud-based web application often indicates a misconfiguration in load balancing. This error occurs when a proxy or load balancer receives an invalid response from the upstream server.
In cloud environments, which action should be taken to resolve throughput issues with a storage service?
- Resetting user passwords
- Reducing the number of database indexes
- Adjusting storage performance tiers
- Decreasing network firewall rules
Correct answer: Adjusting storage performance tiers
Correct answer: Adjusting storage performance tiers. Explanation: To resolve throughput issues with a cloud storage service, adjusting storage performance tiers is an effective solution. This involves selecting the appropriate performance tier that matches the required throughput for optimal operation.
What is a typical reason for HTTP request timeouts in a cloud application?
- The application's database is being updated
- Misconfigured or overloaded application servers
- The user has insufficient permissions
- The domain name has not been properly registered
Correct answer: Misconfigured or overloaded application servers
Correct answer: Misconfigured or overloaded application servers. Explanation: HTTP request timeouts in a cloud application are commonly due to misconfigured or overloaded application servers. These issues can prevent the server from processing requests within the expected timeframe, leading to timeouts.
Which troubleshooting step is critical when a cloud service is not accessible from certain geographical locations?
- Checking content delivery network (CDN) configurations
- Inspecting the CPU utilization of the server
- Reviewing the application code for errors
- Updating the operating system of the server
Correct answer: Checking content delivery network (CDN) configurations
Correct answer: Checking content delivery network (CDN) configurations. Explanation: When a cloud service is not accessible from certain geographical locations, checking the content delivery network (CDN) configurations is a critical troubleshooting step. Misconfigurations in CDN can lead to accessibility issues in specific regions.
What is the primary cause of SSL/TLS handshake failures in a cloud-based application?
- Incorrect file permissions on the server
- Expired or invalid SSL/TLS certificates
- Insufficient server memory
- Firewall blocking HTTP traffic
Correct answer: Expired or invalid SSL/TLS certificates
Correct answer: Expired or invalid SSL/TLS certificates. Explanation: SSL/TLS handshake failures in a cloud-based application are primarily caused by expired or invalid SSL/TLS certificates. These certificates are essential for establishing a secure connection, and any issues with them can prevent the handshake from completing successfully.
In a cloud environment, what could be the reason for a sudden spike in the error rate of API calls?
- API rate limiting or throttling
- Changes in the network topology
- Upgrades to the cloud platform
- Decreased user activity
Correct answer: API rate limiting or throttling
Correct answer: API rate limiting or throttling. Explanation: A sudden spike in the error rate of API calls in a cloud environment can often be attributed to API rate limiting or throttling. This happens when the number of API requests exceeds the limits set by the cloud provider, leading to an increase in error responses.
In a cloud computing environment, what is a common cause of virtual machine (VM) migration failures?
- Low network bandwidth
- Incompatible VM image formats
- Excessive memory allocation to VMs
- Firewall blocking ICMP traffic
Correct answer: Incompatible VM image formats
Correct answer: Incompatible VM image formats. Explanation: VM migration failures in a cloud environment are often due to incompatible VM image formats. When the source and destination hosts use different hypervisors or VM image formats, it can prevent successful migration of the VMs.
An organization is moving an on-premises application to the cloud with minimal changes, essentially performing a 'lift and shift.' Which migration strategy does this describe?
- Refactor
- Rehost
- Retire
- Re-architect
Correct answer: Rehost
Correct answer: Rehost. Explanation: Rehosting, commonly called 'lift and shift,' moves an application to the cloud with little or no modification to its code or architecture. It is the fastest migration approach but does not optimize the workload for cloud-native features.
A team wants to migrate an application to the cloud while making minor optimizations, such as switching to a managed database service, without changing the core application code. Which strategy is this?
- Replatform
- Rehost
- Retain
- Refactor
Correct answer: Replatform
Correct answer: Replatform. Explanation: Replatforming (sometimes 'lift, tinker, and shift') involves making a few cloud optimizations, such as moving to a managed database or runtime, to gain benefits without changing the application's core architecture.
During migration planning, an organization decides that a legacy application will not move to the cloud and will be decommissioned because it is no longer needed. Which migration disposition is this?
- Retain
- Replatform
- Retire
- Repurchase
Correct answer: Retire
Correct answer: Retire. Explanation: Retiring means decommissioning or removing an application that is no longer needed. Identifying applications to retire reduces migration scope and ongoing maintenance costs.
What is the primary characteristic of Infrastructure as Code (IaC)?
- Manually configuring servers through a web console
- Defining and provisioning infrastructure through machine-readable definition files
- Encrypting infrastructure configuration at rest only
- Running applications without managing servers
Correct answer: Defining and provisioning infrastructure through machine-readable definition files
Correct answer: Defining and provisioning infrastructure through machine-readable definition files. Explanation: Infrastructure as Code (IaC) provisions and manages infrastructure using machine-readable definition files (such as JSON or YAML templates) rather than manual configuration. This enables repeatability, version control, and consistent deployments.
An IaC deployment is failing because the actual state of the cloud environment no longer matches the state declared in the configuration files. What is this condition called?
- Configuration drift
- Resource pooling
- Cloud bursting
- Vendor lock-in
Correct answer: Configuration drift
Correct answer: Configuration drift. Explanation: Configuration drift (drift) occurs when the real-world state of infrastructure diverges from the desired state defined in IaC. Drift detection identifies these differences so the environment can be reconciled with the code.
Which two data serialization formats are most commonly used to author Infrastructure as Code templates?
- CSV and XML
- JSON and YAML
- INI and TOML
- PDF and DOCX
Correct answer: JSON and YAML
Correct answer: JSON and YAML. Explanation: JSON and YAML are the predominant formats for writing IaC templates because they are human-readable, machine-parseable, and widely supported by tools such as Terraform, CloudFormation, and Ansible.
A cloud engineer is preconfiguring a virtual machine image with a hardened OS, patches, and required software so that all new instances launch from a consistent, approved baseline. What is this image commonly called?
- Snapshot
- Golden image
- Thin provision
- Container manifest
Correct answer: Golden image
Correct answer: Golden image. Explanation: A golden image (or golden AMI/template) is a preconfigured, standardized base image used to deploy consistent instances. It reduces configuration effort and enforces security and compliance baselines across deployments.
When provisioning storage for a high-transaction database, which performance metric is the most important to evaluate?
- Object lifecycle policy
- IOPS (input/output operations per second)
- Number of availability zones
- DNS time-to-live
Correct answer: IOPS (input/output operations per second)
Correct answer: IOPS (input/output operations per second). Explanation: IOPS measures the input/output operations per second a storage volume can sustain. High-transaction databases require high IOPS, so provisioning storage with adequate IOPS (for example, provisioned SSD volumes) is critical for performance.
An engineer needs to provision a network boundary in the cloud that isolates a set of resources with its own IP address range, subnets, and routing. What should be deployed?
- A virtual private cloud (VPC)
- A content delivery network (CDN)
- A bastion host only
- A service catalog
Correct answer: A virtual private cloud (VPC)
Correct answer: A virtual private cloud (VPC). Explanation: A virtual private cloud (VPC) provides an isolated, logically defined network in the cloud with a configurable IP address range, subnets, route tables, and gateways. It is the foundational construct for deploying isolated workloads.
A company wants to deploy resources across multiple isolated data center locations within a single cloud region to improve fault tolerance. Which construct should they use?
- Multiple availability zones
- A single subnet
- A single security group
- A NAT gateway
Correct answer: Multiple availability zones
Correct answer: Multiple availability zones. Explanation: Availability zones are physically separate, isolated locations within a cloud region. Deploying resources across multiple availability zones increases fault tolerance and high availability because a failure in one zone does not affect the others.
What does 'right-sizing' refer to when provisioning cloud compute resources?
- Always selecting the largest instance type available
- Matching instance type and capacity to the actual workload requirements
- Encrypting all instances by default
- Distributing traffic across servers
Correct answer: Matching instance type and capacity to the actual workload requirements
Correct answer: Matching instance type and capacity to the actual workload requirements. Explanation: Right-sizing means selecting compute resources (CPU, memory, instance type) that match the actual demands of a workload. It avoids both over-provisioning, which wastes money, and under-provisioning, which hurts performance.
Which deployment approach reduces risk by gradually shifting a small percentage of production traffic to a new version before a full rollout?
- Big bang deployment
- Canary deployment
- Cold standby
- Snapshot deployment
Correct answer: Canary deployment
Correct answer: Canary deployment. Explanation: A canary deployment releases a new version to a small subset of users or servers first. If no issues are detected, traffic is gradually increased, limiting the blast radius of a faulty release.
In a blue-green deployment, what is the primary advantage?
- It permanently runs two production environments at full cost
- It enables near-instant rollback by switching traffic back to the previous environment
- It eliminates the need for load balancers
- It removes the need for testing
Correct answer: It enables near-instant rollback by switching traffic back to the previous environment
Correct answer: It enables near-instant rollback by switching traffic back to the previous environment. Explanation: Blue-green deployment maintains two identical environments; one (blue) serves production while the other (green) hosts the new version. Traffic is switched to green after validation, and if problems arise, rollback is achieved by switching traffic back to blue.
An engineer is using a deployment template that accepts input variables so the same template can provision dev, test, and production environments. What IaC benefit does this demonstrate?
- Repeatability and parameterization
- Manual configuration
- Vendor lock-in
- Physical isolation
Correct answer: Repeatability and parameterization
Correct answer: Repeatability and parameterization. Explanation: Parameterizing templates with input variables allows the same code to be reused across multiple environments, demonstrating repeatability. This consistency reduces errors and configuration drift between environments.
A cloud team needs to deploy short-lived, event-driven code without provisioning or managing any servers, paying only for execution time. Which resource type should they provision?
- A dedicated bare-metal server
- A serverless function
- A virtual private network
- A storage gateway
Correct answer: A serverless function
Correct answer: A serverless function. Explanation: Serverless functions (Function as a Service) run code in response to events without requiring the user to provision or manage servers. Billing is based on execution time and invocations, making them ideal for event-driven, short-lived workloads.
Before promoting an IaC configuration to production, a team runs automated validation to confirm the template syntax and planned changes are correct. Which IaC practice does this represent?
- Testing
- Drift remediation
- Tagging
- Decommissioning
Correct answer: Testing
Correct answer: Testing. Explanation: Testing IaC (including syntax validation, linting, and plan/preview steps) verifies that templates are valid and that proposed changes match intent before they are applied, reducing the risk of failed or destructive deployments.
Which cloud networking component allows instances in a private subnet to initiate outbound internet connections while preventing inbound connections from the internet?
- Internet gateway
- NAT gateway
- Load balancer
- VPN concentrator
Correct answer: NAT gateway
Correct answer: NAT gateway. Explanation: A NAT (Network Address Translation) gateway lets resources in a private subnet reach the internet for updates or outbound calls while blocking unsolicited inbound traffic, preserving the privacy of those resources.
When provisioning resources, an engineer applies metadata key-value pairs to track cost center, environment, and owner. What is this practice called?
- Tagging
- Encryption
- Throttling
- Federation
Correct answer: Tagging
Correct answer: Tagging. Explanation: Tagging applies metadata (key-value pairs) to cloud resources to support cost allocation, automation, organization, and governance. Consistent tagging is essential for tracking spend and managing resources at scale.
A cloud architect must select a deployment that requires migrating a monolithic application into independently deployable services to fully leverage cloud-native scaling. Which migration strategy is this?
- Rehost
- Refactor/re-architect
- Retain
- Retire
Correct answer: Refactor/re-architect
Correct answer: Refactor/re-architect. Explanation: Refactoring (re-architecting) redesigns an application, often breaking a monolith into microservices, to take full advantage of cloud-native capabilities such as elastic scaling and managed services. It offers the greatest long-term benefit but requires the most effort.
In a CI/CD pipeline, what does the 'continuous integration' (CI) stage primarily accomplish?
- Automatically deploying code to production without testing
- Frequently merging code changes into a shared repository and running automated builds and tests
- Manually approving every line of code
- Encrypting source code at rest
Correct answer: Frequently merging code changes into a shared repository and running automated builds and tests
Correct answer: Frequently merging code changes into a shared repository and running automated builds and tests. Explanation: Continuous integration (CI) is the practice of frequently merging developers' code into a shared repository, where automated builds and tests run to detect integration problems early and keep the codebase stable.
What is the key difference between continuous delivery and continuous deployment in a CI/CD pipeline?
- Continuous delivery requires a manual approval to release to production, while continuous deployment releases automatically
- Continuous deployment never runs tests
- Continuous delivery skips the build stage
- There is no difference between them
Correct answer: Continuous delivery requires a manual approval to release to production, while continuous deployment releases automatically
Correct answer: Continuous delivery requires a manual approval to release to production, while continuous deployment releases automatically. Explanation: In continuous delivery, every change is built and tested and made ready for release, but a human triggers the production deployment. In continuous deployment, validated changes are released to production automatically without manual approval.
A developer creates a branch, makes changes, and opens a request for teammates to review and approve before merging into the main branch. What is this version control mechanism called?
- A pull request (merge request)
- A rollback
- A snapshot
- A webhook
Correct answer: A pull request (merge request)
Correct answer: A pull request (merge request). Explanation: A pull request (called a merge request in some tools) proposes merging changes from one branch into another and provides a place for code review, discussion, and automated checks before the merge is approved.
Which characteristic best distinguishes a container from a traditional virtual machine?
- Containers include a full guest operating system for each instance
- Containers share the host operating system kernel and package only the application and its dependencies
- Containers cannot be deployed in the cloud
- Containers require dedicated physical hardware
Correct answer: Containers share the host operating system kernel and package only the application and its dependencies
Correct answer: Containers share the host operating system kernel and package only the application and its dependencies. Explanation: Containers share the host OS kernel and bundle only the application and its dependencies, making them lightweight and fast to start. Virtual machines, by contrast, each run a full guest operating system on a hypervisor.
Which tool is an open-source platform for automating the deployment, scaling, and management of containerized applications?
- Jenkins
- Kubernetes
- Grafana
- Git
Correct answer: Kubernetes
Correct answer: Kubernetes. Explanation: Kubernetes is an open-source container orchestration platform that automates deployment, scaling, healing, and management of containerized applications across a cluster of hosts.
Which DevOps tool is most commonly associated with automating CI/CD pipelines and build/test/deploy jobs?
- Jenkins
- Terraform
- Ansible
- Prometheus
Correct answer: Jenkins
Correct answer: Jenkins. Explanation: Jenkins is a widely used open-source automation server for building, testing, and deploying software, making it a cornerstone tool for orchestrating CI/CD pipelines.
A team uses a configuration management tool that applies an agentless, declarative approach using YAML playbooks to configure servers. Which DevOps tool fits this description?
- Ansible
- Kubernetes
- Docker
- Splunk
Correct answer: Ansible
Correct answer: Ansible. Explanation: Ansible is an agentless configuration management and automation tool that uses declarative YAML playbooks to configure systems and deploy applications, communicating over SSH without requiring agents on managed nodes.
In Git-based version control, what is the primary purpose of branching?
- To permanently delete the main codebase
- To allow isolated lines of development that can later be merged
- To encrypt the repository
- To reduce storage costs
Correct answer: To allow isolated lines of development that can later be merged
Correct answer: To allow isolated lines of development that can later be merged. Explanation: Branching in Git creates an isolated line of development so work (features or fixes) can proceed independently of the main branch. Branches can later be merged back, enabling parallel collaboration without disrupting stable code.
A CI/CD pipeline produces a packaged, versioned build output that is stored for later deployment. What is this output called?
- An artifact
- A hypervisor
- A subnet
- A tenant
Correct answer: An artifact
Correct answer: An artifact. Explanation: An artifact is the packaged, versioned output of a build stage (such as a compiled binary, container image, or archive). Artifacts are stored in an artifact repository so they can be reliably deployed to later pipeline stages.
Which open-source tool is most commonly used for visualizing metrics and building observability dashboards in a DevOps environment?
- Grafana
- Terraform
- Git
- Ansible
Correct answer: Grafana
Correct answer: Grafana. Explanation: Grafana is a popular open-source analytics and visualization tool used to create dashboards from time-series and metrics data sources, supporting monitoring and observability in DevOps workflows.
What is the main goal of incorporating automated security scanning (DevSecOps) into a CI/CD pipeline?
- To slow deployments down intentionally
- To shift security testing earlier and detect vulnerabilities automatically before release
- To replace all developers with scanners
- To eliminate the need for source control
Correct answer: To shift security testing earlier and detect vulnerabilities automatically before release
Correct answer: To shift security testing earlier and detect vulnerabilities automatically before release. Explanation: DevSecOps integrates automated security testing (such as static analysis, dependency scanning, and image scanning) directly into the CI/CD pipeline. This 'shift left' approach catches vulnerabilities early, before code reaches production.
A finance team adopts a hosted email and document-collaboration suite where the provider manages the application, runtime, operating system, and all underlying hardware, and users simply log in through a browser. Which cloud service model is this?
- Function as a Service (FaaS)
- Platform as a Service (PaaS)
- Infrastructure as a Service (IaaS)
- Software as a Service (SaaS)
Correct answer: Software as a Service (SaaS)
Software as a Service (SaaS) is the model where a provider delivers a finished, ready-to-use application over the internet and manages everything beneath it, so customers consume the software through a browser without installing or maintaining anything. PaaS instead delivers a development platform and runtime, while IaaS provides only raw compute, storage, and networking that the customer must build on, so neither fits a turnkey browser-based suite.
A developer needs an environment that provides a managed runtime, database, and deployment tooling so they can publish a web application without provisioning or patching servers or operating systems. Which cloud service model best fits this need?
- Software as a Service (SaaS)
- Platform as a Service (PaaS)
- Storage as a Service (STaaS)
- Infrastructure as a Service (IaaS)
Correct answer: Platform as a Service (PaaS)
Platform as a Service (PaaS) gives developers a managed platform (runtime, middleware, databases, and deployment tooling) so they can build and run applications without managing the underlying OS, patching, or hardware. IaaS would still require the developer to install and maintain the OS and runtime themselves, and SaaS delivers only finished applications, not a place to deploy custom code.
A cloud engineer provisions virtual machines and configures the guest operating systems, runtime, and applications while the provider manages only the physical servers, storage, virtualization layer, and networking. Which service model is in use?
- Anything as a Service (XaaS)
- Platform as a Service (PaaS)
- Infrastructure as a Service (IaaS)
- Software as a Service (SaaS)
Correct answer: Infrastructure as a Service (IaaS)
Infrastructure as a Service (IaaS) provides raw, virtualized compute, storage, and networking, leaving the customer responsible for the guest operating system, runtime, and applications. The defining distinction in IaaS vs PaaS vs SaaS is how much of the stack the customer manages: IaaS gives the most control and responsibility, PaaS abstracts the OS and runtime, and SaaS abstracts the entire application.
A team must distinguish three cloud service models for a procurement decision. Which statement correctly describes the difference between IaaS, PaaS, and SaaS?
- All three deliver identical capabilities and differ only in price
- IaaS delivers virtualized infrastructure, PaaS delivers a managed development and runtime platform, and SaaS delivers complete applications
- IaaS delivers finished applications, PaaS delivers virtual machines, and SaaS delivers a development platform
- SaaS gives the customer the most control over the operating system, while IaaS gives the least
Correct answer: IaaS delivers virtualized infrastructure, PaaS delivers a managed development and runtime platform, and SaaS delivers complete applications
The correct distinction is that IaaS delivers virtualized infrastructure, PaaS delivers a managed platform and runtime, and SaaS delivers complete, ready-to-use applications. As you move from IaaS to PaaS to SaaS, the provider manages more of the stack and the customer manages less, so customer control is highest with IaaS and lowest with SaaS.
A company needs to store large volumes of unstructured data such as media files and backups, accessed over HTTP using unique keys and rich metadata rather than a traditional file hierarchy. Which storage type is most appropriate?
- Ephemeral instance storage
- File storage
- Block storage
- Object storage
Correct answer: Object storage
Object storage is designed for large amounts of unstructured data, storing each item as an object with a unique identifier and metadata in a flat namespace accessed over HTTP-based APIs. Block storage exposes raw volumes for low-latency, structured workloads like databases, and file storage presents a hierarchical, shared file system, so neither matches the key-and-metadata access pattern of object storage.
A database server in the cloud requires a high-performance volume that the operating system can format with a file system and treats like a directly attached disk, supporting frequent random reads and writes. Which storage type meets this requirement?
- Block storage
- File storage
- Object storage
- Archive cold storage
Correct answer: Block storage
Block storage presents raw, fixed-size volumes that the operating system can partition and format like a local disk, making it ideal for low-latency, transactional workloads such as databases. Object storage is optimized for unstructured data through APIs and is not suited to random read/write disk operations, and file storage adds a shared file-system layer that introduces overhead a database does not need.
Several virtual machines need to mount the same shared directory simultaneously using protocols such as NFS or SMB so multiple servers can read and write common files. Which cloud storage type provides this?
- Object storage
- File storage
- Block storage
- Tiered storage
Correct answer: File storage
File storage provides a shared, hierarchical file system that multiple clients can mount concurrently using protocols like NFS or SMB, making it ideal for shared documents and application data. Block storage volumes are typically attached to a single instance at a time, and object storage uses API access rather than mountable file-system semantics, so neither offers native concurrent file sharing.
A cloud architect compares three storage paradigms. Which mapping of storage type to its primary characteristic is correct?
- All three present the same hierarchical directory structure to clients
- Object storage is fastest for database random I/O; block storage is best for archival media
- Block storage uses a flat namespace with metadata; object storage attaches as a raw disk; file storage uses HTTP APIs
- Block storage attaches as a raw disk volume; object storage stores items with unique keys and metadata; file storage presents a mountable hierarchy
Correct answer: Block storage attaches as a raw disk volume; object storage stores items with unique keys and metadata; file storage presents a mountable hierarchy
The correct mapping is block storage as a raw disk volume, object storage as items addressed by unique keys with metadata, and file storage as a mountable hierarchical file system. The key differences in block vs object vs file storage are access method and structure: block is disk-level and low-latency, object is API-based and scales massively for unstructured data, and file is shared and hierarchical.
A storage policy automatically moves data that has not been accessed in 90 days from high-performance SSD-backed storage to a lower-cost archival tier. What is this practice called?
- Storage tiering
- Thin provisioning
- Block striping
- Data deduplication
Correct answer: Storage tiering
Storage tiering is the practice of placing data on different classes of storage based on access frequency and cost, automatically moving infrequently used data to cheaper, slower tiers and keeping hot data on fast media. Deduplication eliminates redundant copies and thin provisioning allocates capacity on demand, but neither relocates data across performance tiers based on usage.
A storage volume is advertised as delivering 16,000 IOPS. In the context of cloud storage performance, what does IOPS measure?
- The number of input/output read and write operations the storage can perform per second
- The total capacity of the volume in gigabytes
- The network bandwidth between the instance and the storage in megabits per second
- The encryption strength applied to data at rest
Correct answer: The number of input/output read and write operations the storage can perform per second
IOPS stands for input/output operations per second and measures how many discrete read and write operations a storage device or volume can complete each second, a key indicator for transactional workloads like databases. It is distinct from throughput (data transferred per second) and from raw capacity, so a high IOPS rating reflects responsiveness to many small operations rather than total size or bandwidth.
A cloud engineer is asked to define a virtual machine for a new deployment. Which description best captures what a virtual machine is?
- A managed function that runs only in response to an event and then stops
- A lightweight package that shares the host operating system kernel with other workloads
- A dedicated physical server rented in its entirety from a provider
- A software-based emulation of a physical computer that runs its own operating system on shared physical hardware
Correct answer: A software-based emulation of a physical computer that runs its own operating system on shared physical hardware
A virtual machine is a software-based emulation of a complete physical computer, including its own guest operating system, that runs on shared underlying hardware managed by a hypervisor. This contrasts with a container, which shares the host kernel and is more lightweight, and with serverless functions, which are event-driven and ephemeral rather than full emulated machines.
A type 1 hypervisor and a type 2 hypervisor are being compared for a production virtualization platform. What is the defining difference between them?
- A type 1 hypervisor cannot support more than one virtual machine, while a type 2 supports many
- A type 1 hypervisor runs as an application inside a host operating system, while a type 2 runs directly on the hardware
- A type 1 hypervisor runs directly on the physical hardware (bare metal), while a type 2 runs as software on top of a host operating system
- A type 1 hypervisor can only run Linux guests, while a type 2 can only run Windows guests
Correct answer: A type 1 hypervisor runs directly on the physical hardware (bare metal), while a type 2 runs as software on top of a host operating system
A type 1 (bare-metal) hypervisor runs directly on the physical hardware, giving it better performance and isolation for production, while a type 2 (hosted) hypervisor runs as an application on top of an existing host operating system, which is common on desktops. The type 1 vs type 2 hypervisor distinction is about placement in the stack, not about which guest OS or how many VMs each can run.
In a virtualized cloud host, which component is responsible for abstracting the physical CPU, memory, and devices so that multiple isolated virtual machines can share the same hardware?
- The hypervisor
- The load balancer
- The container runtime
- The orchestration controller
Correct answer: The hypervisor
The hypervisor is the virtualization layer that abstracts and allocates the physical CPU, memory, storage, and devices, allowing multiple isolated virtual machines to run concurrently on one physical host. A container runtime instead isolates processes that share a single kernel, and orchestration controllers and load balancers coordinate workloads but do not provide the hardware abstraction itself.
An application is being redesigned so that each business capability is built as a small, independently deployable service that communicates with the others over lightweight APIs. What architectural style is this?
- A microservices architecture
- A monolithic architecture
- A single-tenant architecture
- A serverless-only architecture
Correct answer: A microservices architecture
A microservices architecture decomposes an application into small, independently deployable services, each owning a specific business capability and communicating over lightweight APIs. This differs from a monolith, where all functionality is built and deployed as one unit, and the independence of each service is what allows teams to scale, update, and deploy components separately.
A team builds an application specifically to exploit cloud capabilities, using containers, microservices, declarative APIs, and automated scaling rather than lifting an existing on-premises app unchanged. This approach is best described as what?
- Hybrid hosting
- Lift and shift
- Cloud native
- Bare-metal provisioning
Correct answer: Cloud native
Cloud native describes building and running applications designed from the start to take advantage of cloud elasticity, typically using containers, microservices, declarative infrastructure, and automated scaling. It contrasts with lift and shift, which moves an existing application to the cloud with little or no redesign and therefore does not fully leverage cloud-native patterns.
An application that processes uploaded images runs only when a file is uploaded, scales automatically per request, and incurs cost only while code executes, with no servers for the team to provision or patch. Which compute model is this?
- Dedicated virtual machines
- Bare-metal hosting
- Reserved instance hosting
- Serverless computing
Correct answer: Serverless computing
Serverless computing runs code in response to events, scales automatically with demand, and bills only for actual execution time, removing server provisioning and patching from the customer's responsibilities. While servers still exist behind the scenes, the provider fully manages them, which is why a per-upload, pay-per-execution image processor is a textbook serverless workload rather than a VM or bare-metal one.
A logically isolated, software-defined network segment within a public cloud provider, where a customer controls its own private IP address range, subnets, and routing, is known as what?
- A content delivery network (CDN)
- A virtual private cloud (VPC)
- An availability zone
- A virtual private network (VPN)
Correct answer: A virtual private cloud (VPC)
A virtual private cloud (VPC) is a logically isolated section of a public cloud where the customer defines its own IP address space, subnets, route tables, and gateways, providing network isolation within shared infrastructure. A VPN secures a connection across an untrusted network and a CDN caches content near users, so neither describes the isolated software-defined network environment that a VPC provides.
Within a virtual network, an engineer divides the address space into smaller logical segments to organize resources and control traffic flow. What is each of these smaller segments called?
- A peering connection
- A subnet
- A region
- An object bucket
Correct answer: A subnet
A subnet is a logical subdivision of a larger network address range, used to segment resources, apply routing, and control traffic flow within a virtual network. Regions and availability zones describe geographic and physical placement of infrastructure rather than logical address segmentation, so they do not define the smaller network segments inside an address space.
A network is defined using the address 10.0.1.0/24. In CIDR notation, what does the /24 indicate, and how many usable host addresses does this provide?
- The first 24 addresses are reserved, leaving 232 usable host addresses
- The subnet supports exactly 24 hosts
- The first 24 bits are the network portion, leaving 254 usable host addresses
- The /24 indicates 24 usable host addresses after reserving the gateway
Correct answer: The first 24 bits are the network portion, leaving 254 usable host addresses
In CIDR notation, the /24 means the first 24 bits identify the network, leaving 8 bits for hosts, which yields 256 total addresses; subtracting the network and broadcast addresses leaves 254 usable host addresses. CIDR notation expresses the subnet mask as a prefix length, so the number after the slash is the count of network bits, not a count of hosts or reserved addresses.
In a virtual private cloud, an engineer must place internet-facing web servers and internal-only database servers appropriately. What primarily distinguishes a public subnet from a private subnet?
- A public subnet uses IPv6 exclusively, while a private subnet uses IPv4
- A public subnet can hold only one instance, while a private subnet can hold many
- A public subnet encrypts all traffic, while a private subnet does not
- A public subnet has a route to an internet gateway for inbound and outbound internet access, while a private subnet has no direct route to the internet
Correct answer: A public subnet has a route to an internet gateway for inbound and outbound internet access, while a private subnet has no direct route to the internet
The defining difference is routing: a public subnet has a route to an internet gateway so its resources can be reached from and reach the internet directly, while a private subnet lacks that route and is isolated from direct internet access. This is why public-facing web servers belong in a public subnet and back-end databases belong in a private subnet, regardless of encryption, IP version, or instance count.
A media company wants users worldwide to download large video files with low latency by serving them from edge locations geographically close to each user rather than always from the origin server. Which technology provides this?
- A load balancer within a single region
- A virtual private cloud (VPC)
- A content delivery network (CDN)
- A storage area network (SAN)
Correct answer: A content delivery network (CDN)
A content delivery network (CDN) caches and serves content from a globally distributed set of edge locations close to end users, reducing latency and offloading the origin server. A load balancer distributes traffic among servers but does not cache content geographically, and a VPC provides network isolation rather than edge-based content distribution.
A network team wants to centrally manage and program network behavior in software, decoupling the control plane that makes forwarding decisions from the data plane that moves packets. What is this approach called?
- Spanning tree networking
- Network address translation (NAT)
- Direct-attached networking
- Software-defined networking (SDN)
Correct answer: Software-defined networking (SDN)
Software-defined networking (SDN) separates the control plane, which decides how traffic is routed, from the data plane, which forwards packets, allowing the network to be programmed and managed centrally through software. This decoupling is what enables automated, policy-driven network configuration in cloud environments, unlike traditional hardware-bound approaches such as NAT or spanning tree that address specific functions rather than centralized programmability.
A small architecture team must explain the difference between scalability and elasticity. Which statement is correct?
- Elasticity refers to long-term capacity planning, while scalability refers to per-second autoscaling
- Scalability and elasticity are identical terms with no practical difference
- Scalability only removes resources, while elasticity only adds them
- Scalability is the ability of a system to handle growth by adding capacity, while elasticity is the ability to automatically add and remove resources in real time to match fluctuating demand
Correct answer: Scalability is the ability of a system to handle growth by adding capacity, while elasticity is the ability to automatically add and remove resources in real time to match fluctuating demand
Scalability is the system's broader ability to grow and handle increased load by adding capacity, while elasticity is the automatic, dynamic addition and removal of resources in near real time to match changing demand. The difference between scalability and elasticity is that scalability describes capability and headroom, whereas elasticity describes responsive, automated adjustment in both directions as workload fluctuates.
A cloud engineer is provisioning a 500 GB block volume for a development virtual machine that will initially hold only about 40 GB of data. To minimize the physical capacity consumed up front while still presenting the full 500 GB to the guest OS, which storage provisioning method should be selected?
- Thick (eager-zeroed) provisioning
- RAID striping across all disks
- Thick (lazy-zeroed) provisioning
- Thin provisioning
Correct answer: Thin provisioning
Thin provisioning presents the full logical size (500 GB) to the guest but only consumes physical capacity as data is actually written, so a volume holding 40 GB uses roughly 40 GB on the back end. Thick provisioning, whether eager- or lazy-zeroed, pre-allocates the entire 500 GB at creation regardless of how little is stored, which wastes capacity in a low-utilization dev workload. RAID striping addresses performance and redundancy layout, not how logical capacity maps to physical allocation.
A storage administrator is comparing thick and thin provisioning for a new high-transaction production database. Which statement accurately describes the trade-off between the two approaches?
- Thin provisioning pre-allocates all blocks for predictable performance, while thick provisioning allocates space only as data is written
- Thick provisioning pre-allocates all blocks for predictable performance, while thin provisioning allocates space on first write and improves density
- Both methods pre-allocate all blocks; the only difference is encryption
- Thick provisioning is used only for object storage, thin only for block storage
Correct answer: Thick provisioning pre-allocates all blocks for predictable performance, while thin provisioning allocates space on first write and improves density
The accurate trade-off is that thick provisioning pre-allocates all blocks at creation for predictable, low-latency performance, while thin provisioning allocates physical space only on first write to maximize density and reduce upfront cost. The reversed description is wrong because thin (not thick) defers allocation. Both methods do not pre-allocate identically, and neither is tied exclusively to object versus block storage. Thick is generally favored for high-I/O databases precisely because allocation delays are avoided.
A team using thin provisioning across a shared storage pool discovers that the total logical capacity promised to all volumes exceeds the physical capacity actually installed. What is this condition called, and what primary risk does it introduce?
- Thick reclamation; volumes are forced to pre-allocate
- Right-sizing; volumes automatically shrink to fit
- Data deduplication; volumes silently lose blocks
- Oversubscription (overprovisioning); volumes can fail writes if the pool fills before more physical capacity is added
Correct answer: Oversubscription (overprovisioning); volumes can fail writes if the pool fills before more physical capacity is added
This is oversubscription (overprovisioning), where the sum of logical capacity exceeds installed physical capacity. The primary risk is that if actual writes grow and the shared pool fills before more physical storage is added, new writes can fail and impact every volume in the pool, so it requires diligent capacity monitoring. Right-sizing refers to matching resource size to workload demand, not capacity promises. Deduplication and a fabricated 'thick reclamation' do not describe this oversubscription condition.
An organization is moving its applications, data, and workloads from its on-premises data center into a public cloud provider's infrastructure. At a high level, what is this overall process called?
- Cloud federation
- Cloud bursting
- Cloud orchestration
- Cloud migration
Correct answer: Cloud migration
Cloud migration is the overall process of moving applications, data, and workloads from on-premises (or another environment) into a cloud provider's infrastructure. Cloud bursting is a scaling technique where overflow demand spills from a private environment into public cloud temporarily. Federation links identity or services across providers, and orchestration coordinates automated provisioning of resources, none of which name the migration process itself.
During migration planning, a cloud engineer must choose a migration strategy for a legacy application. The business wants it moved to the cloud as quickly as possible with no rewriting of code and minimal modification. Which migration approach fits this requirement?
- Lift and shift (rehost)
- Repurchase (drop and shop)
- Replatform (lift and reshape)
- Refactor (re-architect)
Correct answer: Lift and shift (rehost)
Lift and shift, also called rehosting, moves an application to the cloud essentially as-is with no code rewriting and minimal modification, which is the fastest path. Refactoring re-architects the application (for example into microservices) and is the most time-intensive. Replatforming makes small optimizations like swapping to a managed database, more than the minimal change requested. Repurchasing replaces the app with a SaaS product entirely, which is not moving the existing application.
A development team wants every code release to roll out to its fleet of identical web servers gradually: a few servers at a time are taken out of rotation, updated to the new version, and returned to service until the entire fleet is updated, using only the existing production environment. Which deployment strategy is this?
- Canary deployment
- Big-bang deployment
- Rolling deployment
- Blue-green deployment
Correct answer: Rolling deployment
A rolling deployment updates instances in batches within the single existing production environment, taking a few servers out of rotation, upgrading them, and returning them to service until the whole fleet runs the new version. Blue-green stands up a second full environment and switches all traffic at once. Canary deliberately routes a small percentage of users to the new version for monitoring. Because nodes run different versions during the rollout, a rolling deployment requires the service to support both old and new versions simultaneously.
An engineer maintains two identical production-capacity environments. The current live version runs in 'blue' while the new version is deployed and validated in 'green'; once validated, all production traffic is switched from blue to green at once. What is the primary benefit emphasized by this approach over a gradual rollout?
- Automatic resolution of configuration drift during the cutover
- Lowest possible infrastructure cost because only one environment is needed
- Gradual exposure of the new version to a small percentage of real users
- Near-instant rollback by switching traffic back to the still-intact previous environment
Correct answer: Near-instant rollback by switching traffic back to the still-intact previous environment
The primary benefit of blue-green deployment is near-instant rollback: because the previous environment (blue) remains fully intact after the cutover, traffic can be switched straight back if the new version (green) misbehaves. It does not minimize infrastructure cost; maintaining two full production-sized environments roughly doubles cost. Gradual exposure to a small percentage of users describes canary, not blue-green, which switches everyone at once. It does not inherently resolve configuration drift.
A team releasing a payment service routes 5 percent of live user traffic to the new version while 95 percent continues on the stable version, then watches error rates and latency before widening the rollout to 25 percent and eventually 100 percent. Which deployment strategy is described, and what is its defining characteristic?
- Blue-green deployment; all traffic is cut over at once
- Canary deployment; a small subset of real production traffic validates the new version before full rollout
- In-place upgrade; the running version is overwritten with no traffic control
- Rolling deployment; instances are replaced in batches regardless of users
Correct answer: Canary deployment; a small subset of real production traffic validates the new version before full rollout
This is a canary deployment, defined by exposing a small subset of real production traffic (here 5 percent) to the new version so the team can monitor metrics before progressively widening the rollout. Blue-green cuts over all traffic at once rather than in percentages. Rolling deployments target infrastructure batches rather than deliberately selecting a user/traffic percentage to validate. An in-place upgrade overwrites the version with no controlled traffic split.
A platform team is deciding between a blue-green and a canary deployment for a high-risk release. Which statement correctly distinguishes the two strategies?
- Blue-green switches all traffic at once between two full environments, while canary gradually shifts a small percentage of traffic to the new version
- Canary switches all traffic at once, while blue-green shifts traffic gradually in small percentages
- Blue-green updates instances in batches, while canary maintains two identical environments
- Both require two full production environments and cut over instantly
Correct answer: Blue-green switches all traffic at once between two full environments, while canary gradually shifts a small percentage of traffic to the new version
The correct distinction is that blue-green maintains two full environments and switches all traffic at once after validation, whereas canary gradually shifts a small percentage of live traffic to the new version while monitoring before expanding. The reversed claim is wrong because canary is the gradual one. They differ in cost and approach: blue-green roughly doubles infrastructure, while canary's footprint is closer to a rolling model. Describing blue-green as batch instance updates confuses it with rolling deployment.
A cloud engineer needs to provision compute that runs only in response to events, scales automatically per request, and bills based on execution time with no servers to manage. The team will package the code and let the provider handle the runtime. Which compute provisioning model best fits?
- A dedicated bare-metal host
- Serverless functions (Functions as a Service)
- A fixed pool of always-on virtual machines
- A manually scaled container cluster with reserved nodes
Correct answer: Serverless functions (Functions as a Service)
Serverless functions (Functions as a Service) are event-driven, scale automatically per invocation, and bill by execution time with the provider managing the runtime, which exactly matches the requirement. Always-on virtual machines and dedicated bare-metal hosts bill continuously and require capacity management. A manually scaled, reserved-node container cluster still demands node management and does not provide the per-event, pay-per-execution model described.
During a migration assessment, an engineer documents an application that will be neither moved nor modernized because the team plans to leave it running on-premises for now and revisit it later. Within the common migration strategy framework, which disposition does this represent?
- Retire (decommission)
- Repurchase (replace with SaaS)
- Retain (revisit)
- Rehost (lift and shift)
Correct answer: Retain (revisit)
Retain means the application is intentionally kept in its current environment to be revisited later, neither migrated nor modernized at this time. Retire decommissions an application that is no longer needed. Rehost moves it to the cloud as-is, and repurchase swaps it for a SaaS product, all of which involve action now rather than deliberately leaving it in place.
A cloud engineer is provisioning a managed load balancer to distribute incoming HTTPS requests across a group of application servers. To verify that the load balancer only routes traffic to instances capable of serving requests, what must the engineer configure?
- Health checks (health probes) against the backend targets
- A NAT gateway in the public subnet
- A static route table entry for each instance
- A thin-provisioned data volume per instance
Correct answer: Health checks (health probes) against the backend targets
Health checks (health probes) must be configured so the load balancer periodically tests each backend target and routes traffic only to instances that respond as healthy, automatically removing unhealthy ones. Static route table entries direct subnet traffic but do not assess instance health. Thin provisioning concerns storage allocation, and a NAT gateway enables outbound internet access for private subnets, neither of which validates backend readiness.
An engineer must provision object storage for a static website's images and downloadable PDFs, where files are written once and read frequently over the public web by their unique keys. Which storage type is the most appropriate choice for this provisioning task?
- A network file share (NAS/file storage)
- Raw ephemeral instance store
- Block storage attached to a single VM
- Object storage
Correct answer: Object storage
Object storage is the appropriate choice for web-accessible images and PDFs because objects are addressed by unique keys, scale massively, and integrate naturally with HTTP/web delivery and CDNs. Block storage is designed to attach to a single VM as a disk, not to serve files directly over the web. A network file share targets shared POSIX-style access for servers, and ephemeral instance store is temporary local disk that is lost when the instance stops.
While integrating a newly provisioned application into the cloud environment, an engineer needs the app to retrieve a database password securely at runtime without hardcoding the credential into the deployment template or image. Which approach best meets this requirement during deployment?
- Embed the password as a plaintext variable in the IaC template
- Bake the password into the golden image
- Reference the credential from a managed secrets manager at runtime
- Place the password in an environment variable committed to the code repository
Correct answer: Reference the credential from a managed secrets manager at runtime
Referencing the credential from a managed secrets manager at runtime is correct because the application fetches the secret dynamically without the value ever being stored in the template, image, or repository, and access can be controlled and rotated. Embedding it as a plaintext template variable, baking it into the golden image, or committing it as a repo environment variable all expose the credential in artifacts or source control, violating secure deployment practice.
An engineer is provisioning network infrastructure and must allow virtual machines in a private subnet to download OS updates from the internet while preventing any inbound connections initiated from the internet to those VMs. Which component satisfies this requirement?
- An internet gateway directly attached to the private subnet
- A VPN concentrator for site-to-site tunnels
- A reverse proxy that publishes the VMs publicly
- A NAT gateway in a public subnet
Correct answer: A NAT gateway in a public subnet
A NAT gateway placed in a public subnet lets private-subnet instances initiate outbound internet connections (such as fetching updates) while blocking unsolicited inbound connections from the internet. Attaching an internet gateway directly to the private subnet would make it public and allow inbound reachability, defeating the goal. A VPN concentrator handles encrypted site-to-site tunnels, and a reverse proxy publishing the VMs would expose them inbound, the opposite of the requirement.
Several hospitals that must follow the same healthcare regulations agree to jointly build and share a single cloud environment whose costs and governance are split among them, while outside organizations have no access. Which cloud deployment model does this describe?
- Community cloud
- Hybrid cloud
- Private cloud
- Public cloud
Correct answer: Community cloud
This is a community cloud. A community cloud is shared by several organizations that have common concerns such as the same compliance, security, or mission requirements, and they share the infrastructure and its costs while keeping it closed to the general public. A public cloud is open to any customer over the internet, a private cloud serves a single organization, and a hybrid cloud combines two or more distinct models linked together.
During migration planning, an organization decides that one application will stay on its current on-premises servers unchanged for now because moving it offers little benefit and carries compliance risk, although it may be revisited later. Which of the 6 R application migration strategies is this?
- Replatform
- Rehost
- Refactor
- Retain
Correct answer: Retain
This is the retain strategy. Retain means deliberately keeping an application in its existing environment without migrating it, often because the move provides little value, the application is near end of life, or regulatory and dependency concerns make migration impractical at the time. Rehost lifts and shifts the workload to the cloud as-is, replatform makes minor optimizations during the move, and refactor re-architects the application for cloud-native services.
A team already defines its servers, networks, and load balancers in version-controlled templates. They now want a separate code-driven approach that manages the operating system settings, installed packages, and application settings inside those provisioned servers. Which practice specifically addresses managing that internal configuration?
- Blue-green deployment
- Manual change management
- Configuration as code (CaC)
- Infrastructure as code (IaC)
Correct answer: Configuration as code (CaC)
This is configuration as code (CaC). Configuration as code manages the software configuration inside resources, such as OS settings, packages, and application parameters, by expressing it in version-controlled, repeatable definitions handled by tools like Ansible. Infrastructure as code instead provisions the underlying resources themselves, such as servers, networks, and load balancers, so the two are complementary but distinct.
An engineer runs the same infrastructure-as-code template against an environment that is already fully provisioned, and the tool reports that no changes are needed and creates no duplicate resources. Which property of well-written IaC produces this result?
- Drift, so the environment intentionally diverges from the template each run
- Statelessness, so the tool ignores what already exists and rebuilds everything
- Idempotency, so applying the same definition repeatedly converges to one consistent end state
- Eventual consistency, so resources are created twice and later reconciled
Correct answer: Idempotency, so applying the same definition repeatedly converges to one consistent end state
This result comes from idempotency. An idempotent IaC definition can be applied repeatedly and always converges the environment to the same declared end state, so re-running it when resources already match makes no changes rather than creating duplicates. This repeatability is a core goal of infrastructure as code, whereas drift is the unwanted divergence between the real environment and the template that idempotent runs help correct.
A company is provisioning cloud resources for an application that must store customer records only within the country where the customers live to satisfy a legal requirement. Which provisioning decision most directly satisfies this requirement?
- Enabling autoscaling so capacity grows with demand
- Choosing the largest available compute instance for maximum performance
- Using the lowest-cost storage tier to reduce monthly spend
- Selecting the cloud region and data residency that keep stored data inside the required country
Correct answer: Selecting the cloud region and data residency that keep stored data inside the required country
Selecting the appropriate cloud region and data residency is the decision that satisfies this requirement. When provisioning resources against compliance and regulatory requirements, choosing a region that keeps stored data physically within the mandated country directly meets data residency and sovereignty rules. Picking larger compute, enabling autoscaling, or choosing cheaper storage addresses performance, availability, or cost rather than the legal location of the data.
A cloud engineer is hardening logins for an administrative console. Beyond a username and password, the policy now requires a one-time code from an authenticator app. Which security control is being implemented?
- Federated identity
- Single sign-on
- Multi-factor authentication
- Role-based access control
Correct answer: Multi-factor authentication
Multi-factor authentication is being implemented. Multi-factor authentication requires a user to present two or more independent factors from different categories, typically something you know (a password), something you have (an authenticator app code or hardware token), and something you are (a biometric), so a stolen password alone cannot grant access. Single sign-on only lets one credential reach many apps without adding factors, and federated identity establishes trust between providers rather than adding verification factors.
A public-facing web application in the cloud is being targeted with SQL injection and cross-site scripting attempts embedded in HTTP requests. Which control is purpose-built to inspect and filter this Layer 7 web traffic?
- A network access control list
- A load balancer
- An intrusion detection system
- A web application firewall
Correct answer: A web application firewall
A web application firewall is the purpose-built control. A WAF operates at the application layer (Layer 7) and inspects HTTP/HTTPS requests against rule sets to block common web attacks such as SQL injection and cross-site scripting before they reach the application. A network access control list filters by IP, port, and protocol at the network layer and cannot parse web payloads, and an intrusion detection system only alerts on suspicious activity rather than actively filtering web requests.
In a cloud environment, which term describes the framework of policies and technologies that ensures the right individuals and services have the appropriate access to resources?
- Identity and access management
- Change management
- Configuration management
- Network segmentation
Correct answer: Identity and access management
Identity and access management is the correct term. Identity and access management (IAM) is the discipline of defining and managing the digital identities of users and services and controlling what resources they may access through authentication and authorization. Network segmentation isolates traffic between systems and does not govern who a principal is, while configuration management tracks system state rather than access rights.
A cloud team grants permissions by assigning users to predefined job functions such as DatabaseAdmin or Auditor, and each function carries a fixed set of permissions. Which access control model is in use?
- Mandatory access control
- Role-based access control
- Attribute-based access control
- Discretionary access control
Correct answer: Role-based access control
Role-based access control is in use. Role-based access control (RBAC) assigns permissions to roles that map to job functions, and users inherit permissions by being placed into those roles, which simplifies administration at scale. Discretionary access control lets resource owners grant access at their own discretion, and mandatory access control enforces access based on classification labels set by a central authority, neither of which is keyed to job-function roles.
A security architecture removes the assumption that traffic inside the corporate network perimeter is trustworthy and instead verifies every request based on identity and device posture, regardless of network location. Which model does this describe?
- Zero trust
- Defense in depth
- Implicit trust zoning
- Perimeter-based security
Correct answer: Zero trust
This describes zero trust. The zero trust model operates on the principle of 'never trust, always verify,' treating no user, device, or network segment as inherently trusted and requiring continuous authentication and authorization for every access request. Perimeter-based security assumes anything inside the firewall is safe, which is the very assumption zero trust eliminates.
A cloud engineer must choose between two authorization models. One grants access strictly by assigned roles, while the other evaluates dynamic attributes such as department, time of day, and resource sensitivity at the moment of the request. Which statement correctly distinguishes them?
- RBAC and ABAC are identical and differ only in naming
- RBAC evaluates dynamic attributes per request, while ABAC uses fixed role assignments
- ABAC evaluates dynamic attributes per request, while RBAC grants access through fixed role assignments
- Both RBAC and ABAC make decisions only on the resource owner's discretion
Correct answer: ABAC evaluates dynamic attributes per request, while RBAC grants access through fixed role assignments
The accurate distinction is that ABAC evaluates dynamic attributes per request while RBAC grants access through fixed role assignments. Attribute-based access control (ABAC) makes decisions by evaluating attributes of the user, resource, action, and environment at request time, enabling fine-grained context-aware policies, whereas role-based access control ties permissions to static roles. RBAC is simpler to administer but less flexible; ABAC handles conditional scenarios like restricting access outside business hours.
A cloud network team wants to apply granular firewall policies between individual workloads inside the same subnet so that a compromised server cannot freely reach its neighbors. Which technique achieves this east-west isolation?
- Load balancing
- Microsegmentation
- Geo-redundancy
- Auto-scaling
Correct answer: Microsegmentation
Microsegmentation achieves this east-west isolation. Microsegmentation divides a network into small, granular zones (often down to the individual workload) and applies fine-grained policies to control lateral, east-west traffic, limiting an attacker's ability to move between systems after a breach. Load balancing distributes traffic for performance and availability, not isolation, and auto-scaling adjusts capacity rather than restricting workload-to-workload communication.
A compliance requirement states that customer records stored on cloud block volumes and object storage must be unreadable if the underlying disks are physically stolen. Which control directly satisfies this requirement?
- Encryption in transit
- Encryption at rest
- Network segmentation
- Multi-factor authentication
Correct answer: Encryption at rest
Encryption at rest directly satisfies this requirement. Encryption at rest protects stored data (on disks, volumes, databases, and object storage) by keeping it in ciphertext so it cannot be read without the decryption key, which renders stolen media useless. Encryption in transit protects data moving across networks rather than data sitting on storage, so it would not protect the records on a physically stolen disk.
In a cloud virtual network, which construct acts as a virtual, stateful firewall attached to an instance's network interface to control its inbound and outbound traffic?
- A subnet
- A security group
- A VPN gateway
- A route table
Correct answer: A security group
A security group is the correct construct. A security group functions as a virtual stateful firewall attached at the instance or network-interface level, where you define allow rules for permitted inbound and outbound traffic. Because it is stateful, return traffic for an allowed connection is automatically permitted. A route table directs where traffic is sent rather than filtering it, and a subnet is an address range, not a firewall.
A cloud architect is documenting data protection. One mechanism protects information as it moves between a client and a server over the internet using TLS, and another protects information sitting on storage volumes. Which pairing correctly maps these two states?
- Encryption in transit secures stored data; encryption at rest secures network traffic
- Both terms refer only to data being transmitted
- Both terms refer only to data on disk
- Encryption in transit secures network traffic; encryption at rest secures stored data
Correct answer: Encryption in transit secures network traffic; encryption at rest secures stored data
The correct mapping is that encryption in transit secures network traffic while encryption at rest secures stored data. Encryption in transit uses protocols such as TLS to protect data while it travels across networks, defending against interception, whereas encryption at rest keeps data on disks, databases, and object storage in ciphertext. A complete strategy applies both because each addresses a different exposure point.
A cloud IAM administrator assigns each service account only the specific permissions it needs to perform its function and nothing more. Which security principle is being applied?
- Implicit allow
- Separation of duties
- Least privilege
- Defense in depth
Correct answer: Least privilege
The principle being applied is least privilege. Least privilege grants each user, service, or process only the minimum permissions required to complete its task, which reduces the attack surface and limits damage if an identity is compromised. Separation of duties splits a sensitive task across multiple people to prevent fraud, a related but distinct control that does not by itself minimize an individual account's permission set.
Under the cloud shared responsibility model, which party is responsible for the security of the physical data center hardware, including servers, storage devices, and facility access controls?
- A third-party auditor
- The cloud service provider
- The customer
- The end users of the application
Correct answer: The cloud service provider
The cloud service provider is responsible for the physical infrastructure. Under the shared responsibility model, the provider secures the 'security of the cloud,' including physical facilities, hardware, and the host infrastructure, while the customer is responsible for 'security in the cloud,' such as their data, identities, access configuration, and OS patching in IaaS. The customer never controls the physical data center, so that responsibility always rests with the provider.
A cloud engineer must explain why a security group and a network access control list (NACL) behave differently when filtering traffic. Which statement is accurate?
- A security group is stateful and applied at the instance level, while a NACL is stateless and applied at the subnet level
- A security group supports deny rules, while a NACL supports only allow rules
- Both are stateful and applied at the subnet level
- A security group is stateless and applied at the subnet level, while a NACL is stateful and applied per instance
Correct answer: A security group is stateful and applied at the instance level, while a NACL is stateless and applied at the subnet level
The accurate statement is that a security group is stateful and applied at the instance level, while a NACL is stateless and applied at the subnet level. A stateful security group automatically permits return traffic for allowed connections and supports allow rules only, whereas a stateless NACL evaluates each packet independently (requiring explicit inbound and outbound rules) and supports both allow and deny rules. This is why NACLs are often used to block specific IP ranges at the subnet boundary.
A regulatory standard requires that login credentials and form submissions cannot be read if intercepted while traveling between a user's browser and a cloud-hosted web application. Which protection addresses this specific scenario?
- Data at rest encryption
- Tokenization of stored records
- Data in transit encryption
- Database-level access auditing
Correct answer: Data in transit encryption
Data in transit encryption addresses this scenario. Data in transit encryption protects information while it moves across a network, typically using TLS to create an encrypted channel so that intercepted packets between the browser and the application reveal only ciphertext. Data at rest encryption protects stored information and would not prevent interception of credentials moving over the network, which is the exact exposure described here.
A cloud engineer is documenting recovery targets for a production database. The business states it can tolerate losing at most 15 minutes of transactions, but it can accept up to 2 hours of downtime while the system is rebuilt. Which pair of values correctly maps these requirements to the recovery objectives?
- RTO = 15 minutes, RPO = 2 hours
- RPO = 2 hours, RTO = 15 minutes
- Both RPO and RTO = 15 minutes
- RPO = 15 minutes, RTO = 2 hours
Correct answer: RPO = 15 minutes, RTO = 2 hours
RPO = 15 minutes and RTO = 2 hours is correct. The Recovery Point Objective (RPO) is the maximum acceptable amount of data loss measured in time, so the 15-minute data-loss tolerance is the RPO and dictates how frequently backups or replication must occur. The Recovery Time Objective (RTO) is the maximum acceptable time to restore service after an outage, so the 2-hour downtime tolerance is the RTO. Swapping them is the common trap: RPO looks backward to the last good data point, while RTO looks forward to when the service is running again.
An organization is choosing a disaster recovery facility. It wants the lowest ongoing cost and is willing to accept the longest recovery time, since it can rebuild and reload data after a regional outage. Which recovery site type best fits this requirement?
- Warm site
- Hot site
- Active-active site
- Cold site
Correct answer: Cold site
A cold site is correct. A cold site provides only the basic facility (space, power, and network connectivity) with little or no pre-installed hardware or current data, making it the cheapest option but the slowest to bring online because equipment must be provisioned and data restored. A warm site keeps some hardware and periodically updated data, recovering faster at higher cost. A hot site is a fully mirrored, near-real-time environment that recovers almost immediately but is the most expensive, which contradicts the goal of lowest cost and longest acceptable recovery time.
A cloud engineer must protect a transactional financial database where any committed write must survive a site failure with zero data loss, even though the two sites are within the same metro region. Which replication approach should be configured?
- Nightly full backups to object storage
- Asynchronous replication
- Periodic snapshot copying
- Synchronous replication
Correct answer: Synchronous replication
Synchronous replication is correct. Synchronous replication writes data to both the primary and the replica before the write is acknowledged to the application, guaranteeing the replica is identical to the primary and supporting an effective RPO of zero. Because it waits for both writes, it adds latency and is practical only over low-latency links such as within a metro region, which matches the scenario. Asynchronous replication acknowledges the primary write first and copies to the replica afterward, so a failure can lose the most recent transactions; snapshots and nightly backups leave even larger data-loss windows.
A cloud team runs a full backup every Sunday. On Monday through Saturday they want each nightly job to copy only the data that changed since the most recent backup of any kind, so each nightly backup runs as fast as possible and uses the least storage. To restore Thursday's data they would then need Sunday's full backup plus every nightly job from Monday through Thursday. Which backup type is being scheduled on the weeknights?
- Differential backup, because each job copies everything changed since the last full backup
- Incremental backup, because each job copies only what changed since the most recent backup of any kind
- Mirror backup, because each job keeps an exact one-to-one copy of the source
- Synthetic full backup, because each job rebuilds a complete image from prior backups
Correct answer: Incremental backup, because each job copies only what changed since the most recent backup of any kind
This is an incremental backup. An incremental backup copies only the data that changed since the most recent backup of any type, which makes each nightly job the smallest and fastest to run, but restoring a given day requires the last full backup plus every incremental created after it in sequence. A differential backup, by contrast, copies everything changed since the last full backup, so differentials grow larger each night but restore needs only the full plus one differential. A synthetic full is assembled from existing backups rather than reading the source, and a mirror keeps a live one-to-one copy, so neither matches the described change-since-last-backup chain. Backup-type selection and scheduling fall under Cloud+ Operations backup and restore objectives.
After a ransomware incident, a cloud operations lead discovers that nightly backups had been running successfully for months but the most recent attempt to recover a database from them failed because the backup files were silently corrupted. Which operational practice would have caught this problem before it was needed in an emergency?
- Periodic restore testing, where backups are regularly restored to a recovery environment to confirm they are usable
- Switching from incremental to full backups every night
- Moving the backups to a colder, cheaper storage tier
- Increasing the backup retention period so older copies are kept longer
Correct answer: Periodic restore testing, where backups are regularly restored to a recovery environment to confirm they are usable
Periodic restore testing would have caught the problem, because a backup is only proven good when it is actually restored and validated, not merely when the backup job reports success. Regularly restoring backups to an isolated recovery environment verifies the files are complete, uncorrupted, and usable, surfacing silent corruption long before a real emergency. Lengthening retention only keeps more copies, which may all be equally corrupt; changing backup frequency or type does not validate readability; and moving data to a colder tier addresses cost, not integrity verification. Restore testing and retention management are core Cloud+ Operations backup objectives.
A cloud engineer is configuring an autoscaling group for a web tier. The requirement is that the group should add instances when sustained CPU utilization rises above 70 percent and remove instances when it falls below 30 percent, with the actions driven automatically by the monitoring system. What is the engineer defining when they set these 70 percent and 30 percent values?
- Cost allocation tags for the autoscaling group
- Scaling thresholds, the metric values that trigger automatic scale-out and scale-in actions
- Recovery point objectives for the web tier
- Service level agreement penalties
Correct answer: Scaling thresholds, the metric values that trigger automatic scale-out and scale-in actions
The engineer is defining scaling thresholds, the specific metric values that trigger automatic scale-out and scale-in actions. In autoscaling, a monitoring system continuously evaluates a metric such as CPU utilization against configured thresholds, and when the metric crosses a threshold the platform automatically adds or removes capacity to match demand. Service level agreement penalties are contractual, recovery point objectives describe acceptable data loss in recovery planning rather than scaling, and cost allocation tags attribute spend to teams, so none of those define the trigger points. Configuring monitoring-driven scaling triggers and thresholds is part of the Cloud+ Operations objectives for scaling and observability.
A cloud engineering team stores its Terraform configuration files in a shared repository so that every change is recorded, can be attributed to an author, and can be rolled back to a previous state if a deployment breaks. Which type of tool provides this capability?
- A version control system such as Git
- A container runtime such as Docker
- A monitoring stack such as the ELK Stack
- A configuration management agent such as an Ansible playbook runner
Correct answer: A version control system such as Git
A version control system such as Git is the correct tool. Version control (also called source control) tracks every change to files over time, records who made each change and when, and lets a team review history and revert to an earlier committed state. Git is the most widely used distributed version control system and is the standard place to keep infrastructure-as-code and application source. A container runtime packages and runs applications but does not track file history, and a monitoring stack only collects logs and metrics rather than versioning code.
In a CI/CD pipeline, a developer's commit automatically triggers a build that compiles the code and runs the unit-test suite, merging the change into the mainline only if every test passes. Which part of CI/CD does this describe?
- Infrastructure provisioning
- Continuous deployment
- Blue-green release management
- Continuous integration
Correct answer: Continuous integration
Continuous integration is the correct answer. Continuous integration (the CI in CI/CD) is the practice of frequently merging code changes into a shared mainline, where each merge automatically triggers a build and automated tests to catch integration problems early. The later stages that package and release the validated build toward staging or production are continuous delivery and continuous deployment (the CD). The scenario stops at automated build-and-test on merge, which is squarely continuous integration, not the release step.
A cloud architect needs to run many isolated instances of a microservice on a single Linux host while keeping startup time in milliseconds and memory overhead minimal. Compared with running each instance in its own virtual machine, why does packaging each microservice as a container achieve this goal?
- Containers each include a full guest operating system, while VMs share the host kernel
- Containers require a dedicated hypervisor per instance, while VMs do not
- Containers share the host operating system kernel and isolate only the application and its dependencies, while each VM bundles a full guest operating system
- Containers cannot be isolated from one another, so they consume fewer resources than VMs
Correct answer: Containers share the host operating system kernel and isolate only the application and its dependencies, while each VM bundles a full guest operating system
Containers share the host operating system kernel and isolate only the application plus its dependencies, while each virtual machine bundles its own full guest operating system on top of a hypervisor. Because containers skip the per-instance guest OS, their images are smaller and they start in milliseconds with far less CPU and memory overhead, which is why many can pack onto one host. The other choices invert this relationship; VMs are the ones that carry a full guest OS and rely on a hypervisor.
An organization runs production workloads across AWS, Azure, and Google Cloud and wants a single infrastructure-as-code tool and language to provision resources consistently in all three. Which choice best meets this requirement, and why?
- Terraform, because it can only manage AWS resources and therefore standardizes the environment
- Terraform, because it is provider-agnostic and uses one declarative language (HCL) to manage many cloud and SaaS providers
- AWS CloudFormation, because its JSON and YAML templates provision resources across any cloud provider
- AWS CloudFormation, because it is multi-cloud while Terraform is limited to a single provider
Correct answer: Terraform, because it is provider-agnostic and uses one declarative language (HCL) to manage many cloud and SaaS providers
Terraform is the right choice because it is provider-agnostic and uses one declarative language, HashiCorp Configuration Language (HCL), to provision resources across AWS, Azure, Google Cloud, and many other cloud and SaaS providers through a plugin model. AWS CloudFormation is native to AWS only, so it cannot manage Azure or Google Cloud, which makes it a poor fit for a multi-cloud standard. The distractors describing CloudFormation as multi-cloud or Terraform as AWS-only state the relationship backward.

To find us again, just search “Career Employer Cloud+”

By Career EmployerUpdated Jun 7, 2026

Cloud+ Question of the DayNew daily

1 of 190+ free questions — a new one every day

What is the primary characteristic of Infrastructure as Code (IaC)?

Pick an answer to see the explanation

Click Start Test above to launch a full-length CompTIA Cloud+ practice test weighted exactly like the real CV0-004 exam, or drill a single domain — Cloud Architecture, Deployment, Security, Operations, Troubleshooting, or DevOps Fundamentals. Every question includes a clear explanation so you learn the reasoning, not just the answer.

CompTIA Cloud+, exam code CV0-004, is a vendor-neutral certification that validates the skills needed to deploy and automate secure cloud environments supporting the high availability of modern applications and data.^[1] These free Cloud+ practice questions and test prep mirror the official CV0-004 objectives so you practice the way the real exam is built.^[2] To round out your prep, pair these with our free study guide, flashcards.

CompTIA Cloud+ is one of the 14 CompTIA certifications — explore all our CompTIA practice tests to compare and prep across the whole family.

CompTIA Cloud+ at a Glance

Cloud+ (CV0-004) at a glance
Detail	Cloud+ (CV0-004)
Certifying Body	CompTIA
Exam Code	CV0-004 (current version)
Total Questions	Maximum of 90 (multiple choice and performance-based)
Time Limit	90 minutes
Passing Score	750 (on a scale of 100-900)
Exam Cost	About USD $390 (subject to change; verify with CompTIA)
Recommended Experience	2-3 years as a systems administrator or cloud engineer
Recertification	Valid 3 years; renew via CompTIA continuing education (CEUs)

What Is on the CompTIA Cloud+ Exam?

The CompTIA Cloud+ CV0-004 exam covers six domains: Cloud Architecture (23%), Deployment (19%), Security (19%), Operations (17%), Troubleshooting (12%), and DevOps Fundamentals (10%).^[1]

Cloud Architecture is the largest section, covering cloud and deployment models, capacity planning, and high availability. CV0-004 is the first CompTIA certification to formally include a DevOps domain. Our full practice test is weighted to match:

Cloud+ CV0-004 weighting by domain

Cloud Architecture23% · ≈21 Qs

Deployment19% · ≈17 Qs

Security19% · ≈17 Qs

Operations17% · ≈15 Qs

Troubleshooting12% · ≈11 Qs

DevOps Fundamentals10% · ≈9 Qs

Practice Questions by Domain

Use Start Test for a full weighted CV0-004 simulation, or open the hub and pick a single domain to drill your weak area. After each full exam, your results show a per-domain breakdown so you know exactly where to focus — most candidates need the most reps on Cloud Architecture and the new DevOps content.

What Are the Requirements to Take CompTIA Cloud+?

CompTIA Cloud+ has no mandatory prerequisites — the exam is open to anyone who registers and pays the fee.^[1] CompTIA recommends that candidates have 2 to 3 years of hands-on experience as a systems administrator or cloud engineer, along with familiarity with a major cloud service provider, before attempting CV0-004. Network+ and Server+ (or equivalent knowledge) provide useful foundational background.

How Do You Register for the CompTIA Cloud+ Exam?

You register for CompTIA Cloud+ (CV0-004) by purchasing an exam voucher from the CompTIA Marketplace (store.comptia.org) or an authorized reseller, then scheduling your exam through Pearson VUE.^[5] You can test at a Pearson VUE testing center or via online proctored delivery from home.

After purchasing a voucher you create or sign in to your CompTIA and Pearson VUE accounts to pick a date, time, and delivery method. Verify the current voucher price and any bundle or retake options on the CompTIA Marketplace, as prices vary by region and promotion.

What Is the Passing Score for CompTIA Cloud+?

The passing score for CompTIA Cloud+ CV0-004 is 750 on a scale of 100 to 900.^[1]

Scores are not a simple percentage of questions correct; CompTIA uses a scaled scoring model so questions of differing difficulty contribute appropriately, and performance-based questions are weighted alongside multiple-choice items.

You receive a pass or fail result immediately at the testing center, along with a score report that breaks down your performance by domain. Your overall scaled score — not any single domain — determines whether you pass.

How Hard Is Cloud+? (Pass Rate)

Cloud+ is an intermediate-level certification — more advanced than entry-level certs like A+ or Network+, but not as specialized as expert cloud credentials. CompTIA does not publish official pass-rate statistics, so any specific figure cited online is an unofficial estimate.^[4] The difficulty comes from its vendor-neutral breadth and the performance-based questions; candidates most often underestimate the new DevOps and security content.

Intermediate

Difficulty level

above A+/Network+

750

Passing scaled score

of 100-900

23%

Cloud Architecture

largest domain

The takeaway: practice automation, security hardening, and troubleshooting workflows across providers, and drill until you’re consistently scoring above target on full-length practice before you book your exam date.

What to Expect on Exam Day

Arrive at your Pearson VUE test center at least 15 minutes early to check in — bring a valid, unexpired government-issued photo ID whose name matches your CompTIA registration.^[5]You’ll store phones and personal items in a locker; no notes are allowed.

A short tutorial precedes the exam, then you have 90 minutes to answer up to 90 multiple-choice and performance-based questions. The PBQs ask you to complete tasks in a simulated environment, so budget time carefully — they take longer than standard items.

If you test via online proctoring, expect a workspace scan and ID check. CompTIA reports a pass/fail result immediately, with a domain breakdown on your score report. Having simulated the full timing with practice tests makes that 90-minute clock feel routine.

How to Use This Cloud+ Practice Test

Recreate exam conditions. Take the full test timed, with no notes.^[4]
Diagnose, then drill. Use a full CV0-004 simulation to find weak domains, then drill them.
Prioritize Architecture + DevOps. Architecture is the largest domain and DevOps is the newest.
Learn the why. Read every explanation — understanding beats memorizing.
Think vendor-neutral. Practice concepts across providers, not just one platform.

Why Get Cloud+ Certified?

Cloud+ is a vendor-neutral credential that validates multi-cloud deployment, security, and automation skills employers value for cloud engineer, systems administrator, and cloud security roles, and CV0-004 keeps it current with modern DevOps practices.^[1] These free Cloud+ practice tests are the most efficient way to get there.

Conclusion

Passing CV0-004 comes down to knowing cloud architecture, security, automation, and the new DevOps fundamentals cold. Use this free CompTIA Cloud+ practice test to find your weak domains, drill them to mastery, and reinforce them with our study guide, flashcards so you walk in confident on test day.

CompTIA Cloud+ Practice Test FAQ

The current version is CV0-004, which launched on September 24, 2024 and replaced the previous CV0-003. CV0-004 is the first CompTIA certification to include a dedicated DevOps domain. When you register, make sure you are scheduling the CV0-004 exam.

References

1.CompTIA. “Cloud+ Certification (official; CV0-004 domains and weights).” CompTIA, 2026. ↑
2.CompTIA. “Cloud+ CV0-004 Exam Objectives (official PDF).” CompTIA. ↑
3.CompTIA. “The New CompTIA Cloud+ (CV0-004 changes).” CompTIA. ↑
4.CompTIA. “How to Study for CompTIA Cloud+.” CompTIA. ↑
5.CompTIA. “Marketplace - Exam Vouchers and Pricing.” CompTIA. ↑

Career Employer

Career Employer is the ultimate resource to help you get started working the job of your dreams. We cover topics from general career information, career searching, exam preparation with free study materials, career interviewing, and becoming successful in your career of choice.

All Posts

Career Employer’s Editorial Process

Here at Career Employer, we focus a lot on providing factually accurate information that is always up to date. We strive to provide correct information using strict editorial processes, article editing, and fact-checking for all of the information found on our website. We only utilize trustworthy and relevant resources. To find out more, make sure to read our full editorial process page here.