CV0-004 Exam Questions and Answers | Exam-Dumps (Page: 2)

QUESTION: 6

A company's man web application is no longer accessible via the internet. The cloud administrator investigates and discovers the application is accessible locally and only via an IP access.
Which of the following was misconfigured?

IP
DHCP
NAT
DNS

Answer(s): D

Explanation:

When a web application is accessible locally via an IP address but not via the internet, the issue likely lies with the Domain Name System (DNS). DNS is responsible for translating domain names into IP addresses. A misconfiguration in DNS records or failure in DNS resolution can prevent users from accessing the application through its domain name, even though the application itself is running and accessible via its direct IP address.

Reference:

In the CompTIA Cloud+ curriculum, understanding cloud concepts and networking fundamentals, including DNS, is crucial for troubleshooting and ensuring applications are accessible and perform optimally in cloud environments.

Reveal Solution Next Question

QUESTION: 7

A cloud engineer is provisioning a new application that requires access to the organization's public cloud resources.
Which of the following is the best way for the cloud engineer to authenticate the application?

Access key
API
MFA token
Username and Password

Answer(s): A

Explanation:

The best way to authenticate an application requiring access to an organization's public cloud resources is through the use of an access key. Access keys provide a secure means of authentication for applications and services without the need for interactive login credentials. This method is particularly useful for automated processes or applications that need to interact with cloud services programmatically, ensuring secure and efficient access control.

Reference:

CompTIA Cloud+ content emphasizes the importance of secure authentication mechanisms, such as access keys, in managing and securing access to cloud resources, aligning with best practices for cloud security and application deployment.

Reveal Solution Next Question

QUESTION: 8

A security engineer Identifies a vulnerability m a containerized application. The vulnerability can be exploited by a privileged process to read tie content of the host's memory. The security engineer reviews the following Dockerfile to determine a solution to mitigate similar exploits:

Which of the following is the best solution to prevent similar exploits by privileged processes?

Adding the USER myappuserinstruction
Patching the host running the Docker daemon
Changing FROM alpiner3.17 to FROM alpine:latest
Running the container with the ready-only filesystem configuration

Answer(s): A

Explanation:

Adding the "USER myappuser" instruction to the Dockerfile is the best solution to prevent similar exploits by privileged processes. This instruction ensures that the container runs as a non-privileged user instead of the root user, significantly reducing the risk of privileged exploits. Running containers with least privilege principles minimizes the potential impact of vulnerabilities, enhancing the overall security posture of the containerized environment.

Reference:

The CompTIA Cloud+ framework includes security concerns, measures, and concepts for cloud operations, highlighting the importance of container security practices, such as running containers as non-root users to prevent unauthorized access and exploitation.

Reveal Solution Next Question

QUESTION: 9

A cross-site request forgery vulnerability exploited a web application that was hosted in a public laaS network. A security engineer determined that deploying a WAF in blocking mode at a CDN would prevent the application from being exploited again. However, a week after implementing the WAF, the application was exploited again.
Which of the following should the security engineer do to make the WAF control effective?

Configure the DDoS protection on the CDN.
Install endpoint protection software on the VMs
Add an ACL to the VM subnet.
Deploy an IDS on the laaS network.

Answer(s): C

Explanation:

After a WAF deployment fails to prevent an exploit, adding an Access Control List (ACL) to the Virtual Machine (VM) subnet can be an effective control. ACLs provide an additional layer of security by explicitly defining which traffic can or cannot enter a network segment. By setting granular rules based on IP addresses, protocols, and ports, ACLs help to restrict access to resources, thereby mitigating potential exploits and enhancing the security of the IaaS network.

Reference:

CompTIA Cloud+ materials cover governance, risk, compliance, and security for the cloud, including the implementation of network security controls like ACLs, to protect cloud environments from unauthorized access and potential security threats.

Reveal Solution Next Question

QUESTION: 10

A cloud engineer wants containers to run the latest version of a container base image to reduce the number of vulnerabilities. The applications in use requite Python 3.10 and ate not compatible with any other version. The containers' images are created every time a new version is released from the source image. Given the container Dockerfile below:

Which of the following actions will achieve the objectives with the least effort?

Perform docker pull before executing docker run.
Execute docker update using a local cron to get the latest container version.
Change the image to use python:latest on the image build process.
Update the Dockerfile to pin the source image version.

Answer(s): A

Explanation:

Performing a "docker pull" before executing "docker run" ensures that the latest version of the container base image is used, aligning with the objective of reducing vulnerabilities. This command fetches the latest image version from the repository, ensuring that the container runs the most up- to-date and secure version of the base image. This approach is efficient and requires minimal effort,

as it automates the process of maintaining the latest image versions for container deployments.

Reference:

Within the CompTIA Cloud+ examination scope, understanding management and technical operations in cloud environments, including container management and security, is critical. This includes best practices for maintaining up-to-date container images to minimize vulnerabilities.

Reveal Solution Next Question

CompTIA CV0-004 Exam (page: 2) CompTIA Cloud+ Updated on: 12-Feb-2026

QUESTION: 6

Explanation:

Reference:

QUESTION: 7

Explanation:

Reference:

QUESTION: 8

Explanation:

Reference:

QUESTION: 9

Explanation:

Reference:

QUESTION: 10

Explanation:

Reference:

CompTIA CV0-004 Exam (page: 2)
CompTIA Cloud+
Updated on: 12-Feb-2026