SkillTestPro | CompTIA Cloud+ Practice Test 4

CompTIA Cloud+ Practice Test 4

CompTIA Cloud+ Exam Practice Test

1 / 20

Which metric measures cloud service reliability and is most relevant for SLA compliance?

RTO

RPO

MTBF

MTTR

Uptime percentage

2 / 20

A company runs mission-critical applications in the cloud and needs to ensure minimal downtime during a hardware failure. What is the best solution?

Implement auto-scaling groups

Use an active-passive failover model

Deploy applications in a single availability zone

Increase server CPU and memory capacity

Disable automatic failover to reduce unexpected changes

3 / 20

What is the purpose of a Cloud Governance Policy?

Reduce cloud costs

Limit employee cloud access

Remove all cloud security restrictions

Ensure consistent security and compliance across cloud workloads

Monitor hardware failures

4 / 20

Which method prevents unauthorized API access in a cloud service?

Using API keys with granular permissions

Exposing all endpoints publicly

Storing API keys in application logs

Disabling authentication mechanisms

Allowing open access to all users

5 / 20

Which tool automates compliance checks in cloud environments?

Wireshark

AWS Config

Telnet

Ping

Traceroute

6 / 20

Which approach reduces attack surface for cloud containerized applications?

Running all containers with root access

Disabling audit logs

Using unverified public container images

Running containers on a shared network

Deploying containers in a least privileged mode

7 / 20

A cloud provider must apply critical security patches while minimizing downtime. Which method is ideal?

Blue-Green Deployment

Manual patching during off-peak hours

Disabling patching to prevent failures

Rolling back updates only if issues arise

Patching all servers simultaneously

8 / 20

Which protocol ensures secure file transfers in a cloud-based deployment?

FTP

SMB

SFTP

NFS

Telnet

9 / 20

A global application needs consistent performance across multiple regions. What is the best strategy?

Use a single cloud region for all traffic

Disable auto-scaling

Prioritize CPU-bound instances

Implement a global load balancer

Rely on a single database for all users

10 / 20

Which logging approach helps detect insider threats within a cloud environment?

Encrypting all log data

Capturing and analyzing IAM access logs

Logging only error messages

Storing logs locally on each instance

Deleting logs after 30 days

11 / 20

Which technique prevents lateral movement of attackers within a cloud network?

Enabling network segmentation

Increasing firewall timeout settings

Using a single VLAN for all instances

Disabling logging services

Allowing unrestricted inbound traffic

12 / 20

A cloud-based web server is under a DDoS attack, causing degraded performance. What should be the first action?

Increase server capacity

Migrate the workload to another region

Disable all network access

Activate an application firewall with rate limiting

Notify cloud provider's compliance team

13 / 20

A cloud engineer needs to ensure that data encryption keys are never exposed in a multi-tenant cloud environment. What is the best approach?

Store keys in environment variables

Share keys across all applications

Manually rotate encryption keys annually

Use plaintext storage for fast retrieval

Implement a Hardware Security Module (HSM)

14 / 20

Which cost management strategy reduces cloud compute costs while maintaining performance?

Over-provisioning resources

Using reserved instances for predictable workloads

Running workloads in a single availability zone

Allocating maximum storage capacity upfront

Disabling auto-scaling

15 / 20

Which framework provides continuous compliance monitoring for cloud services?

ISO 9001

Zero Trust Architecture

RAID Level 6

OAuth 2.0

NIST SP 800-53

16 / 20

Which approach minimizes latency in real-time applications hosted in the cloud?

Increasing virtual machine CPU allocation

Deploying workloads closer to users with edge computing

Using long-lived TCP connections

Enabling hyper-threading

Storing all data in a single region

17 / 20

Which security mechanism ensures cloud-stored data has not been altered or tampered with?

Data encryption

Redundant backups

Hashing with digital signatures

RAID configuration

Multi-region storage

18 / 20

A company wants instant failover between cloud regions in case of a catastrophic failure. Which method is the most effective?

Cold site backup

Pilot light architecture

Warm standby

Active-active deployment

Synchronous replication

19 / 20

A cloud engineer is setting up secure authentication for an application deployed in a multi-cloud environment. Which approach reduces the risk of credential theft?

Hardcoding API keys in application code

Using password hashing algorithms

Storing credentials in a shared database

Disabling multi-factor authentication (MFA)

Implementing short-lived tokens with IAM policies

20 / 20

A cloud-based database system is experiencing high latency due to frequent read operations. Which solution would improve performance while minimizing costs?

Enable object versioning

Use data deduplication

Implement a content delivery network (CDN)

Deploy a read replica

Increase block storage IOPS

Your score is

The average score is 0%