10 free CompTIA Cloud+ CV0-004 practice questions with the correct answer and a full explanation for each, taken from the CertStash pack of 314 questions. Work through them, then open each answer to check your reasoning.
Get all 314 questions (US$39) · Download these 10 as a PDF
Question 1
A software engineer needs to transfer data over the internet using programmatic access while also being able to query the data.
Which of the following will best help the engineer to complete this task?
Show answer and explanation
Correct answer: D. GraphQL
GraphQL is a query language and runtime that allows programmatic access to data over the internet while enabling flexible data querying. It specifically addresses the need to both transfer data and query it efficiently. SQL is for databases only, Web sockets are for rea-ime communication, and RPC is for remote procedure calls without query capabilities.
Why the other options are wrong
- A. SQL operates on databases, not for general internet data transfer and querying.
- B. Web sockets provide bidirectional communication but lack query capabilities.
- C. RPC enables remote function calls but does not provide query language functionality.
Question 2
Which of the following is a field of computer science that enables computers to identify and understand objects and people in images and videos?
Show answer and explanation
Correct answer: D. Computer vision
Computer vision is the field of computer science that enables machines to identify and understand objects and people in images and videos. It encompasses image recognition, object detection, and related tasks. Image reconstruction refers to rebuilding images from data, facial recognition is a specific application of computer vision, and natural language processing deals with text, not images.
Why the other options are wrong
- A. Image reconstruction is a technique within computer vision, not the broader field definition.
- B. Facial recognition is a specific application of computer vision, not the entire field.
- C. Natural language processing focuses on text and language, not visual understanding.
Question 3
A company needs to deploy its own code directly in the cloud without provisioning additional infrastructure.
Which of the following is the best cloud service model for the company to use?
Show answer and explanation
Correct answer: A. PaaS
PaaS (Platform as a Service) is the ideal model for deploying code directly without provisioning infrastructure. The platform provider manages servers, storage, and networking while developers focus on application code. SaaS is for end-user applications, IaaS requires infrastructure provisioning, and XaaS is a generic term.
Why the other options are wrong
- B. SaaS provides finished applications to end-users, not a development deployment platform.
- C. IaaS requires the company to provision and manage infrastructure, defeating the purpose.
- D. XaaS is too generic and does not specifically address code deployment without infrastructure.
Question 4
A company just learned that the data in its object storage was accessed by an unauthorized party.
Which of the following should the company have done to make the data unusable?
Show answer and explanation
Correct answer: D. The company should have encrypted the data at rest.
Encryption at rest ensures that even if data is accessed by unauthorized parties, it remains unreadable and unusable without the decryption key. This is the fundamental protection mechanism that makes stolen data worthless. Switching storage types does not protect data, hashing is for verification not protection, and changing permissions after a breach does nothing to secure already-accessed data.
Why the other options are wrong
- A. Storage type does not prevent unauthorized access or make data unusable if accessed.
- B. Hashing is a one-way function for verification, not encryption for making data unreadable.
- C. Changing permissions after unauthorized access has already occurred provides no retroactive protection.
Question 5
A customer relationship management application, which is hosted in a public cloud IaaS network, is vulnerable to a remote command execution vulnerability.
Which of the following is the best solution for the security engineer to implement to prevent the application from being exploited by basic attacks?
Show answer and explanation
Correct answer: D. WAF
A WAF (Web Application Firewall) is specifically designed to protect web applications from exploits including remote command execution vulnerabilities by filtering malicious HTTP requests. It operates at the application layer and can detect and block attack patterns. IPS works at network level, ACLs control access but not application attacks, and DLP prevents data loss rather than stopping attacks.
Why the other options are wrong
- A. IPS (Intrusion Prevention System) operates at the network layer and is less effective against application-layer exploits.
- B. ACLs control network traffic access but cannot specifically prevent remote command execution attacks.
- C. DLP (Data Loss Prevention) focuses on preventing unauthorized data movement, not stopping application attacks.
Question 6
Which of the following is a difference between a SAN and a NAS?
Show answer and explanation
Correct answer: D. A NAS uses a slower protocol than a SAN.
NAS (Network Attached Storage) uses file-based protocols like NFS or SMB which operate at a higher abstraction layer and are inherently slower, while SAN (Storage Area Network) uses block-level protocols like Fibre Channel or iSCSI that provide direct block access with lower latency. This makes SAN faster than NAS. The other options contain false claims about SAN and NAS capabilities.
Why the other options are wrong
- A. SANs can use Fibre Channel, iSCSI over Ethernet, or other protocols, not exclusively fiber.
- B. SANs use block-level protocols (Fibre Channel, iSCSI), not standard Ethernet-based file protocols.
- C. NAS is slower than SAN due to its file-level protocol overhead, not faster.
Question 7
A cloud engineer is troubleshooting an application that consumes multiple third-party REST APIs. The application is randomly experiencing high latency.
Which of the following would best help determine the source of the latency?
Show answer and explanation
Question 8
A cloud engineer is reviewing the following Dockerfile to deploy a Python web application:
Which of the following changes should the engineer make to the file to improve container security?
Show answer and explanation
Correct answer: A. Add the instruction USER nonroot.
Running containers as the root user is a significant security risk because if the container is compromised, an attacker gains root-level access to the system. Adding USER nonroot ensures the container runs with reduced privileges under a non-root user, limiting the potential damage from a security breach. This is a fundamental container security best practice and aligns with the principle of least privilege.
Why the other options are wrong
- B. Specifying a fixed version like 3.11 instead of latest is a best practice for reproducibility and stability, but it does not directly improve security posture.
- C. The ENTRYPOINT instruction defines how the container starts and is necessary for proper application execution; removing it would break functionality rather than improve security.
- D. File ownership by root does not prevent privilege escalation vulnerabilities; the critical security issue is that the process itself runs as root, which is mitigated by the USER instruction.
Question 9
A group of cloud administrators frequently uses the same deployment template to recreate a cloud-based development environment. The administrators are unable to go back and review the history of changes they have made to the template.
Which of the following cloud resource deployment concepts should the administrator start using?
Show answer and explanation
Correct answer: D. Versioning
Versioning enables administrators to track, review, and revert changes to deployment templates over time. It maintains a complete history of modifications, allowing teams to understand what changed and when. Drift detection identifies configuration differences, repeatability ensures consistent deployments, and documentation provides manual notes , none of these provide automatic historical change tracking like versioning does.
Why the other options are wrong
- A. Drift detection identifies configuration divergence but does not provide change history.
- B. Repeatability ensures consistent redeployment but does not track historical changes.
- C. Documentation requires manual effort and does not provide systematic change history tracking.
Question 10
A government agency in the public sector is considering a migration from on premises to the cloud.
Which of the following are the most important considerations for this cloud migration? (Choose two.)
Show answer and explanation
Correct answer: A, D
A. Compliance D. Regulatory For a government agency migrating to the cloud, Compliance and Regulatory considerations are paramount. Government entities operate under strict regulatory frameworks (HIPAA, FedRAMP, FISMA, etc.) and must ensure their cloud solutions meet compliance requirements. These are foundational decision criteria that will influence all other aspects of the migration and cannot be overlooked.
Why the other options are wrong
- B. IaaS vs. SaaS is a service model selection decision, important but secondary to compliance requirements.
- C. Firewall capabilities are a technical implementation detail that must be designed around compliance requirements, not a primary consideration.
- E. Implementation timeline is a project management concern that should be determined after compliance and regulatory requirements are established.
- F. Service availability is a technical requirement that must meet regulatory standards but is not itself a primary migration consideration for government agencies.
That was 10 of 314.
The full CompTIA Cloud+ CV0-004 pack has all 314 questions, each with the answer, the explanation and why the other options are wrong, plus a questions-only copy for timed runs. US$39, paid once, with free monthly updates and a pass-or-your-money-back guarantee.