NEW
Font size
WorksheetsCompTIA Cloud+ CV0-004 Exam Prep
Total questions: 67
Worksheet time: 34mins
Which statement best defines IaaS (Infrastructure as a Service)?
Allows applications to communicate and share data, often using HTTP.
The provider offers hardware, while the consumer manages the OS, apps, and everything above the infrastructure.
Stores data in chunks across devices, independent of a server’s file system.
Organises structured data into tables with rows and columns.
What does Broad Network Access enable in cloud computing?
Consumers can subscribe and unsubscribe from services easily.
Allows cloud resources to be accessed over local networks, the internet, or both.
A full physical server reserved for you, running one or more virtual machines.
Values set by the OS or shell that can change during script execution.
On-Demand Self-Service primarily allows customers to do what?
Provision and adjust services like compute, storage, or databases without contacting the provider.
Ensure standard OS versions and settings when deploying new systems.
Communicate between applications using HTTP.
Extend VLANs in multi-cloud deployments using VXLAN, NVGRE, and STT.
Which storage description matches Block Storage?
Stores data in chunks across devices, independent of a server’s file system.
Organises structured data into tables with rows and columns.
A full physical server reserved for you.
Standard OS versions and settings used when deploying new systems.
Which option best describes a Relational Database?
Allows cloud resources to be accessed over networks.
Organises structured data into tables with rows and columns.
Values that can change during script execution.
A network virtualisation standard for VLAN extension.
Which statement best describes an API (Application Programming Interface)?
Allows applications to communicate and share data, often using HTTP.
Provides a full physical server reserved for one tenant.
Standard OS versions and settings used during deployment.
Stores data in independent chunks across devices.
Configuration Baselines are primarily used for what purpose?
Extending VLANs in multi-cloud deployments.
Standard OS versions and settings used when deploying new systems.
Managing changing values during script execution.
Providing hardware while the consumer manages the OS and apps.
Which scenario best requires a Dedicated Host with VM Instance?
You need a full physical server reserved for you to run one or more virtual machines.
You need to programmatically manage resources via HTTP.
You need to store data as blocks across multiple devices.
You need on-demand subscription and unsubscription of services.
What does the Geneve standard support in cloud networking?
On-demand provisioning of compute resources.
A network virtualisation standard used with VXLAN, NVGRE, and STT, often required for VLAN extension in multi-cloud deployments.
Organising data into relational tables.
Providing a full physical server reserved for a single tenant.
In scripting, what are Script Variables?
Standard OS versions and settings used when deploying new systems.
Values set by the OS or shell that can change during script execution.
Functions that enable apps to communicate via HTTP.
Chunks of data stored across devices, independent of the file system.
Which statement best describes Function as a Service (FaaS)?
Developers manage servers directly to run code
Code runs in response to events without managing servers
It is a storage-only service for object data
It is a network segmentation technique
What does multitenancy allow in a public cloud?
Each tenant gets a separate physical server with no shared resources
Multiple tenants share CSP-managed resources securely
Only a single tenant can use a region at a time
Tenants must bring their own hypervisors
Which are common compute resources used by a VM to process data?
CPU, GPU, and memory
NIC, firewall, and router
Keyboard, mouse, and monitor
SSD, HDD, and tape
Why might hybrid disks combine SSD and HDD?
To balance cost and speed by placing frequent data on SSD and less-used data on HDD
To increase power consumption for better performance
To encrypt data by default
To avoid all forms of caching
In cloud environments, what is the purpose of resource metering?
It is unrelated to billing and usage tracking
It tracks resource usage for billing and monitoring
It only controls user permissions
It replaces logging systems
Non-relational databases primarily support which type of data model?
Only structured tables with fixed schemas
Key-value, document, or graph models that aren't limited to tables
Spreadsheets only
Tape archives
What do network flow diagrams illustrate?
How data moves through internal/external nodes, devices, and cloud services
Only the physical cable layout in a data center
The cost breakdown of cloud invoices
User interface mockups for applications
What is a capability of gateway load balancers in modern architectures?
They cannot scale network appliances like firewalls or IDS/IPS
They can scale and insert network appliances such as firewalls or IDS/IPS
They replace all routing protocols
They store long-term logs
Where is microsegmentation typically applied?
At the network perimeter to separate external from internal traffic
Inside data centers and clouds to segment workloads at a granular level
Only on WAN links between sites
On physical cabling
Why is version tracking important in development?
It has no impact on understanding features
It enables understanding changes and features across the development process
It only stores compiled binaries
It replaces testing
Which statement about Identity and Access Management (IAM) is most accurate?
It starts with physical security and ignores user policies
It defines and applies policies using tools like local or centralized user/group management and roles
It is only about encrypting data at rest
It is unrelated to permissions
Which logging tools are commonly associated with Windows and Linux, respectively?
Event Viewer for Windows and rsyslog for Linux, both can forward to a central server
rsyslog for Windows and Event Viewer for Linux, neither supports forwarding
Only Windows supports centralized logs
Only Linux supports centralized logs
What do cryptojacking attacks typically target and cause?
Target VMs to mine cryptocurrency, causing performance issues
Encrypt files with ransomware for ransom
Exploit only network devices
Only steal credentials without resource use
Which practice helps mitigate cloud legal risks?
Ignoring CSP contracts to avoid liability
Reviewing CSP contracts, relevant security practices, and applicable data laws
Relying only on verbal agreements
Storing all data without classification
Which statement about TCP/IP traffic encryption by default is correct?
Most TCP/IP protocols like SMTP, HTTP, and FTP are encrypted by default
Many classic protocols like SMTP, HTTP, and FTP are not encrypted by default
Encryption is mandatory in all L3 protocols
ICMP provides end-to-end encryption by default
What does privilege escalation enable?
Users upgrade privileges permanently without controls
Admins temporarily gain elevated rights to perform specific tasks safely
It disables auditing
It blocks all access
On Linux systems, where is centralized log forwarding commonly configured?
/etc/syslog.conf or rsyslog configuration files
C:\\Windows\\System32
/var/www/html
/etc/fstab
Which statement best describes the deployment phase in DevOps pipelines?
Always extremely long with no staging
Brief, includes staging, and may use tools like Ansible
Done only manually without automation
Unrelated to labels or environments
For small and medium-sized businesses, which backup approach is recommended?
Relying solely on regular file storage in the cloud is often acceptable
Following best practices rather than treating backups as ordinary files
Avoiding cloud backups entirely
Keeping only local copies on user laptops
When does cloud bursting apply?
When private or on-premises resources are overwhelmed and extend to public cloud
Only when public cloud is overwhelmed
Only during normal operation with spare capacity
When migrating from public to private cloud permanently
Choose the correct answer. What is identity management?
Setting up network devices for secure connections
Monitoring user activities across multiple systems
Assigning user accounts and controlling access to resources
Encrypting data to prevent unauthorised access
Choose the correct answer. What is a key characteristic of an internal (private) cloud deployment?
Cloud services are hosted by a third‑party provider
The company uses only public internet‑based cloud tools
The company hosts and controls its own cloud infrastructure
Services are shared between unrelated organisations
Choose the correct answer. What is a common reason for moving resources from the cloud back to on‑premises?
High availability
Reduced performance
Increased automation
New compliance needs
Choose the correct answer. A research team needs a cost‑effective instance type with substantial local storage for large datasets, prioritising capacity and savings over performance. Which AWS instance type should the team choose?
m4.large
d2.xlarge
m4.xlarge
t2.micro
Choose the correct answer. Your IT team is setting up a cloud‑based lab for testing, with usage fluctuating between 0 and 20 hours monthly. Which instance purchasing option is most cost‑effective for this setup?
On‑demand
Spot
Dedicated
Reserved
Choose the correct answer. A container image is built from a configuration file called a _____.
Dockerscript
Dockerfile
Dockerbuild
Containerlist
Choose the correct answer. An admin notices that requests are being evenly distributed to servers in a fixed, repeating order, regardless of current load. Which load‑balancing method is likely being used?
Least connections
Dynamic algorithm
Round robin
Weighted response
Choose the correct answer. What is the primary difference between automation and orchestration?
Automation sets a single task to run on its own, while orchestration configures a series of automated tasks to run as a workflow.
Automation requires human intervention, while orchestration does not.
Automation is used in cloud administration, while orchestration is used in CI/CD.
Automation involves multiple tasks, while orchestration involves a single task.
Choose the correct answer. Which firewall type filters traffic directly on an individual server?
Network
Host‑based
Proxy
Perimeter
Choose the correct answer. An employee works Monday to Friday, 8 am–5 pm and needs to read sales reports in a shared folder and print them using ColorPrinter7. They do not need to edit the files or manage the printer. Which configuration best follows the principle of least privilege?
Full access to the folder and printer
Write access to the folder, print/manage printer
Unrestricted access during and after work hours
Read‑only access to the folder, print‑only access to printer
Choose the correct answer. Triggered scaling adjusts cloud resources based on specific _____.
Regions
Conditions
Users
Schedules
Select only two that apply. Which are key characteristics of the 3‑2‑1 backup rule?
Use two different media types
Keep one copy encrypted
Store three total copies of data
Store one copy on the same server
Select only two that apply. Which statements are true about NIC teaming?
Each physical NIC gets a unique IP address
It limits traffic to a single physical NIC
It creates a single virtual NIC
It increases total available bandwidth
Which statement best describes containers in cloud environments?
They emulate full hardware stacks to run multiple operating systems per host
They are lightweight, share a single OS kernel (often Linux), and package one application with its dependencies
They require a hypervisor to virtualise at the hardware layer for each app
They are primarily used to store unstructured data blobs
According to the IoT transmission protocol stack aligned to the OSI model, which layer is responsible for providing connectivity and security between devices?
Application layer
Network layer
Perception/Sensor layer
Presentation layer
Which option lists the three types of Physical to Virtual (P2V) migrations?
Cold, Warm, Hot
Manual, Semi-automatic, Automatic
Lift-and-shift, Refactor, Replatform
Online, Offline, Hybrid
What is blob storage primarily used for?
Hosting operating systems for VMs
Storing relational tables with strict schemas
Holding immense chunks of unstructured data (Binary Large Objects)
Caching frequently accessed web pages only
Which sequence correctly represents the key stages in the management lifecycle of a virtual machine (VM)?
Plan VM → Create VM → Update OS/apps → Monitor cost/performance → Delete when no longer needed
Create VM based on use case → Maintain and update OS/apps → Monitor cost and performance → Delete when services are no longer necessary
Procure hardware → Install hypervisor → Create VM → Backup VM monthly
Design container → Build image → Push to registry → Deploy to cluster
Which statement best defines VXLAN?
A wireless protocol for IoT sensors
Virtual Extensible LAN used to implement an overlay network enabling layer 2 adjacency across separate subnets
A data encryption standard for storage at rest
A hypervisor feature for VM live migration
What is the primary function of DHCP in a network?
To segment broadcast domains using VLAN tags
To automatically assign IP configuration details to hosts
To encrypt web traffic between browsers and servers
To discover the shortest path through a network using a link-state algorithm
OSPF is best described as which type of protocol?
Distance-vector routing protocol
Link-state dynamic routing protocol with a hierarchical topology
Name-resolution protocol
Session-layer protocol for remote login
Configuration as Code (CaC) primarily focuses on what?
Manual configuration using vendor GUIs
Storing and managing application and infrastructure configurations as code integrated with CI/CD pipelines
Encrypting files to ensure integrity
Provisioning physical cabling layouts
Which option correctly describes SDKs in software development?
Tools and libraries that help developers create applications for a specific language or platform
A firewall for protecting web applications
A protocol for automatic IP address assignment
Software that monitors files for tampering
File Integrity Monitoring (FIM) is used to:
Block malicious HTTP requests
Ensure designated files have not been maliciously or inadvertently changed
Provide developers with code samples
Establish layer 2 adjacency across subnets
What is the primary purpose of a Web Application Firewall (WAF)?
Filter HTTP traffic to protect web applications and their back-end databases from attacks like code injection and DoS
Assign IP addresses and DNS settings to clients
Provide hierarchical routing between autonomous systems
Manage infrastructure configurations using code
In the hybrid cloud diagram, which label best corresponds to the public cloud component that interconnects with multiple organizations?
Private Cloud
Public Cloud
Organization 1
Organization 3
Organization 4
In the hybrid application migration strategy, which action describes moving Application B to cloud infrastructure without major code changes?
Developer rearchitects Application A
Rehosting migration
Developer purchases on-premises servers
Blocking end-user access during cutover
Which AI application is best described as converting spoken audio into written words for analysis and search?
Text recognition
Text translation
Voice-to-text
Visual recognition
Generative AI
During a cloud migration, which network consideration focuses on ensuring continuous Internet connectivity, potentially by adding a second ISP to remove a single point of failure?
Bandwidth
Availability
Latency
Security
Which pair correctly matches a cloud service provider with one of its relational database offerings?
Microsoft Azure — Aurora
Amazon Web Services — AWS RDS
Google Cloud Platform — SQL Server
Microsoft Azure — AWS Redshift
Amazon Web Services — Cloud Spanner
After discovering that user credentials have leaked, which immediate action best reduces the chance that stolen passwords alone can grant access in the future?
Increase bandwidth to reduce latency
Reset firewall rules
Enable multifactor authentication (MFA)
Switch from TCP to UDP for SSH
Disable all user accounts permanently
Which cloud concept is described as providing the appropriate level of available memory for applications using memory-optimised instances?
Tracing
Storage Tiers
Memory Considerations
Network Latency
Which option best matches a design that provides quick but cost‑effective access to stored data, where cost correlates with data access speed?
Storage Tiers
At Rest Encryption
Horizontal Scaling
Memory Considerations
Which scaling approach increases compute capabilities by adding more CPU and memory resources across additional machines or instances?
Vertical Scaling
Horizontal Scaling
Tracing
Network Latency
What term measures the delay between when information is sent and when it arrives at its destination?
Throughput
Network Latency
Tracing
At Rest Encryption
Which practice provides monitoring and troubleshooting for complex, distributed systems by following an application's flow and data progression through its lifecycle?
Logging
Tracing
At Rest Encryption
Memory Considerations
Which security control helps protect data residing on storage media in either a private or public cloud environment?
In Transit Encryption
Access Control Lists
At Rest Encryption
Network Latency
