CompTIA Cloud+ Post-Assessment Practice Test

These questions are part of the practice quiz. Start practicing

• Which strategy is used to prevent leakage of sensitive data in cloud storage and databases?
• Which deployment approach uses a duplicate production environment to validate changes before directing traffic to it?
• In a subnet of 10.8.2.0/27, which statement is correct about host addresses?
• Before migrating, what should be done to compare performance?
• Under SaaS, which is the customer’s responsibility?
• Which cloud service model offers a managed runtime and platform, while the customer manages applications and data?
• Which recovery approach is designed to minimize downtime by having live data and systems ready at a separate location?
• Which practice improves audit trails by capturing exact deployment artifacts and times rather than making in-place changes?
• Which access control model uses fixed security labels and clearance levels to determine access?
• What is Infrastructure as Code (IaC) and how does it improve cloud operations?
• Which factors influence cloud capacity planning and autoscaling thresholds?
• Which principle ensures users are granted only the minimum privileges needed to perform their jobs?
• Which storage class is best for long-term retention when data is rarely accessed and retrieval time is not critical?
• For a volatile cloud-based class registration portal, which capability enables handling peak load without downtime?
• Which storage architecture provides block-level storage to servers over a network?
• During deprovisioning of an application, which firewall-related action is typically required?
• In a community cloud, which component might be the most difficult for the member organizations to manage?
• After provisioning a Linux VM, what is the first security hardening step you should perform?
• Which Kubernetes feature helps maintain desired state by restarting failed pods?
• When investigating an intermittent cloud application issue, after forming a theory of the cause, what is the next step?
• Which approach is commonly used to provide single sign-on (SSO) between on-premises Active Directory and cloud identities?
• A VM's FQDN does not resolve while its IP does; which DNS tool would you use to verify name resolution?
• Which redundancy pattern provides continuous operation by having multiple active components that handle workloads in parallel?
• Which ITIL body approves or denies change requests?
• What is the primary purpose of logging and monitoring in cloud operations?
• Immutable infrastructure replaces components rather than modifying them; what is a primary benefit of this approach in cloud operations?
• Which cloud capability allows a system to automatically adjust resources in response to load without manual intervention?
• In a backup strategy where a weekly full backup is performed and daily backups minimize disk usage, which backup type uses the least additional disk space for daily backups?
• Which migration strategy involves moving workloads to the cloud with minimal or no changes?
• For disaster recovery, which approach minimizes downtime by maintaining a copy of data at a remote site?
• In an identity federation setup between on-premises Active Directory and cloud identities, which practice helps maintain consistent access control across environments?
• CMDB is used for what?
• What mechanisms ensure data integrity and durability in cloud storage?
• What are the core data protection considerations for cloud databases, including backups, PITR, replication, and encryption?
• Which access control model uses roles to grant permissions to users?
• Which protocol would allow the organization to synchronize clocks with a globally accessible time server across the Internet?
• For a globally deployed application that requires redundancy and fast data access, which storage method is most suitable?
• After passive tests indicate the configuration appears correct, what is the likely next step to identify vulnerabilities and potential compromises?
• If a new employee uses a default weak password and must change it on first login, which password policy is likely missing?
• What is the primary benefit of federation in cloud identity management?
• In cloud disaster recovery, which architecture keeps only minimal core services always on and replicates other components as needed?
• In cloud computing, what platform is widely used to orchestrate and manage containers across clusters?
• What is the first step in implementing a formalized process for changes to functions, processes, or systems?
• In which scenario is serverless computing most advantageous?
• Which statement best describes the encryption keys lifecycle, including rotation, revocation, and separation of duties?
• In a community cloud, which security control is often the most challenging to manage across organizations?
• Clyde has just configured a web server as the first virtual machine on the cloud. Which must he configure to make the web server reachable by users around the world?
• Which of the following best describes IaaS (Infrastructure as a Service)?
• When data gravity is a factor, what is a best practice for architecture placement of compute and storage?
• What mechanisms ensure data integrity and durability in cloud storage?
• To achieve the fastest failover in storage replication, which option is typically used despite higher bandwidth requirements?
• Fictional Corp has two data centers in the United States with private clouds. They want to connect them via the Internet using GRE, but GRE lacks encryption. Which option should they combine with GRE to provide encryption?
• Will has been asked to recommend a VPN protocol for his company to connect to the cloud service provider. Which protocol could he rule out as an option for this connection?
• Which term refers to designing IT services to deliver value to customers by following a recognized framework?
• In ITIL lifecycle management for applications, what is the primary purpose?
• Why is exposing port 21 (FTP) on virtual machines reachable from the public Internet a security concern?
• In ITIL lifecycle management, which is the first stage for developing a new application intended for deployment on a private cloud?
• Which is a key consideration when securing cloud databases such as RDS, Cosmos DB, or BigQuery?
• What does RPO stand for and how does it influence disaster recovery planning?
• Which of the following are typical tools used for logging and monitoring in cloud environments?
• Under the shared responsibility model, which statement correctly matches provider and customer responsibilities in IaaS?
• For a script to control services on a server, which interface is typically used?
• A six-year-old firewall replacement is recommended because of what fundamental issue?
• Which technology is used to issue certificates and manage public keys for users within a system?
• Which term best describes a plan to restore IT infrastructure after a disaster?
• What plan focuses on restoring IT infrastructure after a disaster to minimize downtime?
• Which contract document defines the legal terms and responsibilities between a customer and a service provider?
• What is a plausible reason for an automation tool account to become locked, requiring investigation?
• Fictional Corp expects to deploy more than one web server to handle increasing traffic. For load balancing a shopping site, which feature should they look for?
• An employee in a new department receives an access denied error when attempting to access the first system on a list. What is the most likely reason?
• Which statement best describes data governance in data lifecycle management policies?
• Disaster relief nonprofits central app; which cloud service model would best fit their needs?
• After installing Linux, which step best reduces the attack surface?
• What device is typically used to establish secure connectivity between an on-premises network and a cloud environment?
• What is the primary purpose of resource tagging in cloud environments?
• In IPv4 subnet notation, what does '/27' specify in 10.3.3.128/27?
• Frank created a new virtual machine and tries to ping it, but the request times out. What is the most likely reason?
• Why are sticky sessions valuable for a load-balanced e-commerce site?
• Which document outlines how a company will continue to operate during a disaster?
• David notices a lack of documentation and scattered spreadsheets. Which IT management tool should he implement to centralize information about IT assets and their relationships?
• To enforce HTTPS on a website, which technology should be installed and configured?
• Which description best captures the characteristics of a well-designed cloud incident response plan?
• What is a primary benefit of a rolling deployment?
• To deploy with elasticity, what activity should be performed at every step of the project?
• Which statement best describes the role of CSPM, CWPP, and provider-native security features in a cloud security strategy?
• Which support model could Fictional Corp choose to meet 24/7 coverage without staffing every office?
• An external hard drive is attached to a workstation to back up virtual machines for testing. What type of storage is this?
• For the 10.8.2.0/27 network, which is a valid host address?
• When migrating many servers to a cloud provider, which of the following is recommended as an early project activity?
• Which tool would you use to capture and inspect network traffic to verify inbound XML data is reaching the VM?
• Which storage type is designed for high-performance database workloads requiring block-level access?
• Which technology is designed to monitor a single server for malicious activity and can stop it on the host if detected?
• Which combination best reflects common challenges of multi-cloud deployments?
• In access control terminology, which statement best describes identification?
• What is the significance of data residency and data sovereignty in cloud deployments?
• An IT team wants to convert a physical server into a virtual machine image to run in their lab environment. What technique is this called?
• To avoid vendor lock-in and enable easier migration between cloud providers, which approach should be used to package applications?
• Which metric defines the maximum allowable downtime after a disruption?
• For a department planning growth within a 10.0.0.0/8 private space, which subnet would be the smallest that can accommodate the finance department’s growth (current 10 hosts, 50% growth)?
• Which set of activities comprises data lifecycle management in cloud data services?
• In blue-green deployment, what is the key action after testing the new environment is satisfactory?
• Which deployment model blends public and private environments with policy enforcement across both?
• Which statement best describes fault tolerance?
• A quick, targeted software update aimed at fixing a specific issue or security flaw is called a?
• What is the primary role of SIEM in cloud security?
• Which statement best describes the role of an Internet Gateway in a VPC?
• In the planning stage, what data-related concern might the legal department worry about after reviewing the provider SLAs and terms?
• Which pairing correctly describes encryption in transit and at rest with typical protocols and key management considerations?
• Why is tagging important in cloud cost management and governance, and what are best practices for tag strategies?
• What activity should be performed at every step of a cloud deployment project to ensure traceability and repeatable deployments?
• Startup with limited capital wants to participate in a private cloud approach without purchasing extensive hardware. What is the next best option?
• In a virtualized server environment, which technique allows the hypervisor to reclaim memory from non-critical VMs so a critical VM can continue running with the required memory?
• Which factor is least likely to influence the success of migrating on-prem workloads to the cloud?
• What best describes cloudbursting in a hybrid cloud environment?
• Which backup type backs up only data that has changed since the last backup of any type?
• Which of the following is an example of a tag taxonomy category?
• What interface do automation scripts commonly use to interact with services on a server?
• What is the recommended mitigation for unencrypted FTP exposing credentials?
• Which document contains guarantees and terms used to determine backup schedules and service commitments?
• In incident response, a runbook typically contains step-by-step actions to restore services.
• Which technology is used to issue certificates and bind public keys to user identities?
• Developers need lightweight, self-contained environments that run consistently across different host OSes. Which technology provides this?
• Which cloud characteristic allows provisioning the minimum necessary disk space with automatic expansion when needed?
• Which term describes increasing the capabilities of the VM to meet demand by upgrading its resources?
• Which data lifecycle management phase is included in the typical framework used for cloud data services?
• Explain the role of identity and access management (IAM) in cloud security, including least privilege and MFA concepts.
• What is a bastion host and how does it enhance secure remote access to cloud resources?
• A system requires users to log in with a username, a password, and a smart card. This authentication approach is best described as:
• Which protocol is commonly used for storage area network implementations?
• A university migrating class registration to a CSP seeks to support variable demand during peak registration periods; what benefit is most important?
• If a recently installed update prevents standard operation, performing this action to return to the previous state is known as a?
• What is the primary purpose of federation in cloud identity management?
• What best describes IAM roles vs policies and how to implement least-privilege access?
• In a backup plan where full backups occur weekly and hourly backups capture changes since the last backup of any type, which backup type is used every hour?
• Which protocol is commonly used to secure VPN communications at the IP layer?
• A newly deployed VM cannot be reached by ICMP from an external source. Which firewall behavior most likely causes this?
• Which concept improves portability of applications across different cloud platforms by packaging the app and its dependencies into a portable unit?
• In SaaS, who is responsible for security and most maintenance?
• Which option best describes using IAM groups and service principals to enable least-privilege access?
• To keep a new VM's network communication limited to other virtual machines within the cloud provider's environment, which type of IP address should be assigned?
• Which deployment model uses dedicated infrastructure with the customer retaining greater control?
• Which disaster recovery site type is configured to be ready with minimal downtime but at higher ongoing cost?
• Explain how governance and compliance controls are implemented in cloud environments (policies, standards, audits).
• To allow users to access cloud services without separate credentials, which identity mechanism is configured?
• In a login that uses a username and password, the username is considered which security concept?
• Rosa can remote into a Linux server using a management IP address separate from the one users resolve via DNS. Which command should she run to start troubleshooting the server's network interface?
• Which approach has a goal of ensuring that a given workload can be moved with minimal changes between cloud providers?
• Which statement best describes effective cloud security monitoring and governance practices?
• Which is a primary advantage of a multi-cloud strategy?
• Which statement best describes the roles of security groups, firewalls, and ACLs in a cloud network and their best practices?
• Which deployment method updates servers in successive waves to minimize impact?
• After applying a patch, which step ensures the patch did not adversely affect the system?
• During a canary deployment, what is typically done after the canary group proves stable?
• Which metric defines the maximum acceptable downtime for an IT service during a disruption?
• Which term best describes the practice of coordinating multiple automated tasks into a single cohesive workflow?
• Which team is responsible for approving or denying change requests in an ITIL-based change management process?
• During legal review of cloud provider contracts, which clause is critical to ensure data resides in specific geographic regions?
• What problem does a cloud service broker solve in multi-cloud environments?
• Which statement best describes cloud-native architecture in contrast to a traditional monolithic application?
• Which technique is used to protect sensitive data in non-production environments?
• In cloud deployment, increasing the number of resources by adding more servers to handle load describes which scaling approach?
• Fictional Corp has a DNS server running within its VPC. It plans to move an application server to a different VPC. Which step is appropriate during this move?
• What type of storage is best for centralizing log files from multiple servers?
• In virtualization, which memory technique allows more memory to be allocated to VMs than physical RAM would allow?
• An IDS failed to detect an event. Which of the following should you determine next?
• In cloud observability, which combination of artifacts constitutes the three pillars used to understand system state?
• Which set of techniques is commonly used to optimize cloud costs?
• When diagnosing a VM receiving XML data, which tool is best to start capturing and analyzing traffic on the wire?
• What term describes a documented collection of procedures for handling routine operations or incidents?
• What is a key benefit of automating cloud patch management?
• Which metric describes the maximum tolerable data loss in terms of time during a disaster?
• What is cloud-native continuous integration/continuous deployment (CI/CD) and how does it differ from traditional pipelines?
• Data gravity describes how large datasets influence where compute and storage should be placed because their location affects latency and cost.
• Which type of facility provides a backup location with minimal downtime for failover?
• Jonathan automated routine tasks by sending information from one system to a gateway on the VPC to trigger actions from multiple sources. Which automation technique did he implement?
• Which is a common cloud security threat and its corresponding mitigation?
• What does RTO stand for and what is its role in DR planning?
• Which capability does Kubernetes provide that manages deployment, scaling, and the lifecycle of containers in cloud-native applications?
• Which term describes the practice of running multiple workloads in isolated environments on a single host, sharing the host's OS kernel?
• How do data sovereignty requirements influence cloud provider selection and data architecture?
• Which command is commonly used to query DNS records for a hostname?
• Which set of best practices is commonly used to guide IT service delivery and operations?
• Which backup type copies all selected data each time the job runs, regardless of previous backups?
• What deployment strategy updates a small subset of servers first to test before proceeding to the rest?
• Which security factor is a common contributor to data breaches when using cloud-based apps?
• Where should a junior technician look to find guaranteed uptime information from the cloud provider?
• Which technique would best help with capacity issues that occur only occasionally while keeping costs low?
• Which metric defines the maximum amount of data loss tolerated in a disaster scenario?
• Which cloud service model enables end users to access email via a web browser without managing the underlying server?
• Which storage deployment is typically used to provide storage for an entire private cloud in the data center?
• A small startup wants to keep initial costs low; which cloud service model would best enable rapid development with minimal upfront investment?
• In observability, which artifacts are used together to diagnose issues in distributed systems?
• Which capability allows performing tasks like user account creation with minimal human intervention?
• During private cloud network planning, which consideration is necessary to support vNICs operating in bridging mode?
• Which open-source container orchestration system was originally developed by Google?
• On a host running multiple VMs, overcommitting memory is possible due to which capability?
• Which scaling concept involves increasing capacity by adding more instances rather than upgrading existing ones?
• Why is tagging important in cloud cost management and governance, and what are common best practices?
• In cloud service procurement, what is the difference between an SLA and an SLI?
• Which components constitute core cloud networking, and what are the primary security considerations?
• What does RPO represent in disaster recovery planning?
• Giving a coworker access permissions by the resource owner without central policy control describes which model?
• What document specifies guaranteed uptime and service levels provided by a cloud provider?
• Which strategy helps reduce latency and egress costs for cloud applications?
• Timeframe requirement the sales department has given for downtime is described by which metric?
• Which technology described in the material analyzes logs and baselines to learn from data and make decisions automatically?
• Which statement best distinguishes archiving from backup and disaster recovery in cloud data management?
• Why are disaster recovery tests and exercises important in cloud environments?
• Which scenario is not well-suited for serverless computing?
• Ann wants to add an extra layer of security to inspect packet contents as they move between her data center and the private cloud. What should she install?