SkillTestPro | CompTIA Cloud+ Practice Test 11

CompTIA Cloud+ Practice Test 11

CompTIA Cloud+ Exam Practice Test

1 / 10

A company’s cloud environment has excessive virtual machines (VMs) running, leading to wasted resources and high costs. What is the best strategy to prevent VM sprawl?

Reduce the number of VM instance types available

Increase default CPU and memory allocations per VM

Deploy all VMs in a single cloud region

Implement automated VM lifecycle policies

Require manual approval for new VM provisioning

2 / 10

A company’s cloud-based API gateway is experiencing a high volume of unauthorized access attempts from external sources. What is the best security control to mitigate this risk?

Enforce JWT (JSON Web Token) authentication

Deploy a WAF (Web Application Firewall) in front of the API gateway

Increase API request rate limits

Use a shared API key across all consumers

Reduce the API timeout duration

3 / 10

A company using serverless computing in the cloud has unexpectedly high costs due to unmonitored function executions. What is the best way to detect and prevent this issue?

Reduce the maximum concurrency of serverless functions

Implement budget alerts and anomaly detection policies

Increase serverless timeout values

Deploy all serverless workloads in a private subnet

Enable real-time debugging of serverless executions

4 / 10

A cloud disaster recovery (DR) test was conducted, and some critical applications failed to recover within the required RTO (Recovery Time Objective). What is the best fix?

Optimize automated failover mechanisms

Increase DR region storage redundancy

Reduce the number of applications included in the DR plan

Deploy manual DR failover steps to ensure accuracy

Increase DR instance sizes for better performance

5 / 10

A cloud-based stateful firewall is experiencing high CPU utilization during peak traffic hours, causing latency issues in production applications. What is the best optimization strategy?

Increase firewall instance size and CPU allocation

Enable full packet capture to diagnose latency issues

Implement firewall rules that use stateless packet filtering

Deploy multiple firewalls in an active-passive configuration

Reduce the number of logging events processed by the firewall

6 / 10

A cloud security team has discovered that containers running on Kubernetes are using an outdated runtime version with known vulnerabilities. What is the best remediation?

Restrict container image pulls from external sources

Enable logging on all container runtime processes

Reduce the number of containerized applications in production

Implement a service mesh for container communication security

Upgrade the container runtime and enforce version control policies

7 / 10

A company is using a multi-cloud orchestration tool to manage workloads across AWS, Azure, and GCP. However, some deployments fail inconsistently due to differences in API limits and resource naming conventions. What is the best solution?

Increase API rate limits in each cloud provider

Standardize infrastructure as code (IaC) templates across all clouds

Deploy a dedicated orchestration instance for each cloud provider

Implement a single global IAM role across all clouds

Reduce the number of cloud providers used in deployments

8 / 10

A cloud-hosted AI/ML application is processing customer-sensitive data. A compliance audit revealed data exposure risks due to improper handling of training datasets. What is the best mitigation strategy?

Enable default encryption at rest

Increase model training batch sizes

Implement data tokenization before training

Reduce the number of GPUs used for processing

Disable real-time inference until security fixes are applied

9 / 10

A multi-tenant cloud provider is struggling to enforce proper network segmentation between customers, leading to data leakage risks. What is the best fix?

Use shared security groups across all tenants

Deploy network address translation (NAT) for each tenant

Reduce the number of virtual networks per customer

Implement a single firewall for all tenants

Implement VLAN tagging and separate virtual routers

10 / 10

A company has deployed a cloud-based SIEM (Security Information and Event Management) system, but it is experiencing significant performance bottlenecks due to a high volume of log ingestion. What is the best optimization?

Increase SIEM compute instance size

Enable full packet capture for better analysis

Reduce the number of log sources feeding into the SIEM

Implement log filtering and aggregation before ingestion

Disable log indexing to improve write speeds

Your score is

The average score is 0%