SkillTestPro | CompTIA Cloud+ Practice Test 10

CompTIA Cloud+ Practice Test 10

1 / 10

A company using cloud object storage discovered that an external attacker accessed private files. What is the best immediate action?

Enable cross-region replication for redundancy

Restrict storage bucket policies to only authorized users

Increase storage IOPS limits to reduce performance impact

Reduce object storage logging frequency

Move all files to an encrypted format

2 / 10

A microservices-based application running in the cloud is experiencing intermittent failures, but the root cause is unclear. What is the best strategy to diagnose the issue?

Increase log retention periods

Deploy more redundant microservices

Reduce the number of API calls between services

Enable full-disk encryption on all containers

Implement distributed tracing

3 / 10

A cloud security breach was detected, and an incident response team is investigating. What should be the first step in the investigation?

Revoke all IAM access credentials

Move all compromised workloads to a separate region

Increase cloud logging verbosity

Contain the breach to prevent further impact

Notify all users of the security breach immediately

4 / 10

A company is deploying multi-cloud applications but is experiencing inconsistent networking performance due to differences in cloud provider routing policies. What is the best solution?

Use provider-specific VPN tunnels

Deploy a cloud-agnostic SD-WAN

Increase MTU values across all cloud networks

Implement direct inter-region peering

Reduce network segmentation between providers

5 / 10

A cloud-based edge computing deployment is experiencing high latency in data synchronization between edge locations and the central cloud. What is the best solution?

Increase edge device processing power

Deploy more DNS resolvers at edge locations

Implement event-driven data replication

Enable longer data retention at edge nodes

Reduce the frequency of edge-to-cloud communication

6 / 10

A company wants to implement a Zero Trust model for its cloud environment. What is the first step?

Enforce identity-based access controls

Increase firewall rules to block external traffic

Deploy a dedicated cloud VPN

Use a single shared IAM role for all users

Reduce storage access permissions for internal users

7 / 10

A DevOps team wants to secure their cloud-based CI/CD pipeline against supply chain attacks. What is the best approach?

Increase pipeline execution timeout values

Deploy CI/CD agents in a private subnet

Use a shared IAM role for all deployment tasks

Implement code signing for build artifacts

Reduce pipeline concurrency

8 / 10

Security logs indicate that an IAM role assigned to cloud automation scripts is being misused by unauthorized users. What is the best mitigation?

Reduce IAM session timeout values

Implement role session logging and monitoring

Increase IAM API rate limits

Deploy IAM credentials on a local server

Enable multi-factor authentication (MFA) for IAM roles

9 / 10

A company is storing large volumes of structured and unstructured data in a cloud-based data lake. Costs are increasing rapidly due to inefficient storage allocation. What is the best strategy to reduce costs?

Increase object storage replication factor

Deploy high-performance SSD storage for all datasets

Reduce the number of cloud regions used for replication

Enable lifecycle policies to move infrequently accessed data to cold storage

Implement database indexing on stored objects

10 / 10

A Kubernetes-based application running in the cloud is failing to enforce network segmentation, allowing unauthorized pods to communicate. What is the best fix?

Enable host-based firewalling on worker nodes

Deploy a separate virtual network for each namespace

Use a service mesh for traffic control

Increase pod-to-pod encryption

Apply network policies with explicit allow rules

Your score is

The average score is 0%