CompTIA CV0-004 Practice Exam Questions & Answers

CompTIA Cloud+ (CV0-004) highlights using automation and Infrastructure as Code (IaC) to deploy consistent environments across on-premises and cloud. Terraform is specifically designed for template-based provisioning and deployment using declarative configuration files. It can orchestrate infrastructure and services across multiple providers and platforms, which is essential for hybrid environments. For containerized workloads, Terraform can deploy and configure the underlying components needed to run containers---such as Kubernetes clusters, networking, load balancers, storage, and IAM---both on-prem and in the cloud, using reusable templates and modules. This aligns directly with the requirement: ''template-based'' and ''on premises and on the cloud.''

Docker (A) is primarily a container runtime and image/build tool; it helps create and run containers, but it is not the best choice for broad template-based deployment across hybrid infrastructure. Jenkins (C) is a CI/CD automation server that runs pipelines, but it does not serve as the infrastructure templating tool itself. Git (D) is version control, which supports managing templates but does not deploy them. Therefore, Terraform is the best match.

CompTIA Cloud+ (CV0-004) security objectives emphasize that traditional perimeter defenses alone are no longer sufficient because modern attacks frequently bypass the border via stolen credentials, phishing, misconfigurations, lateral movement, and compromised endpoints. When an organization already has strong next-generation firewall (NGFW) and IPS controls but still experiences breaches, the best strategic improvement is to adopt a Zero Trust approach that assumes no implicit trust based on network location. Zero Trust shifts enforcement to identity, device posture, least privilege, and continuous verification, limiting blast radius even when attackers get inside. This includes strong IAM policies, conditional access, micro-segmentation, and tighter authorization decisions for each request.

Option A (CIS benchmarking) and option B (port scanning/closure) are useful hardening steps, but they are incremental and still largely perimeter-centric. Option D (adding a WAF) improves protection for web applications, yet it remains another border control and won't address identity-based compromises across internal and cloud services. Therefore, moving to identity-centric Zero Trust is the most effective way to reduce recurring incidents.

The most likely cause of accessibility and performance issues during specific times is oversubscription. This happens when more users are trying to access the database than the hypervisors can handle, due to their resources being allocated to more virtual machines or processes than they can efficiently support.

: Resource management concepts such as avoiding oversubscription are covered under the Management and Technical Operations domain of the CompTIA Cloud+ exam objectives.

When servers in a hot site are clustered with the main site, it indicates that all servers are replicated from the main site in an online status. This means that the hot site maintains a live, real-time copy of data and applications, ensuring immediate availability in the event of a failure at the main site. Unlike options A and B, which describe load balancing and backup strategies respectively, clustering with a hot site as described in option C ensures that the hot site can take over with minimal downtime, maintaining business continuity.

References: CompTIA Cloud+ CV0-004 Study Guide and Official CompTIA Content

The logs indicate that the IP address 104.210.233.225 made a GET request that appears to traverse directories (as indicated by the '/../../') to access 'server.xml', which is a configuration file for the server. This type of request is indicative of a directory traversal attack, which can lead to unauthorized access to sensitive files on the server. The successful 200 response code suggests that the file was accessed, implying that sensitive configuration data could have been leaked. References: CompTIA Cloud+ Certification Study Guide (Exam CV0-004) by Scott Wilson and Eric Vanderburg