SkillTestPro | CompTIA CloudNetX Practice Test 5

CompTIA CloudNetX Practice Test 5

CompTIA CloudNetX Practice Tests

1 / 10

A company is adopting a microservices architecture in the cloud. What is the best way to secure communication between services?

Using only IP-based access control without encryption

Hardcoding credentials in the application code for service access

Disabling authentication between microservices for performance reasons

Implementing service mesh with mutual TLS authentication

Relying on a single firewall to secure all microservices

2 / 10

A financial institution using cloud services must ensure compliance with strict regulatory requirements. What is the best strategy?

Relying on cloud provider certifications without internal checks

Conducting regular third-party compliance audits

Disabling access logging to protect user privacy

Using only on-premises storage for compliance-sensitive data

Avoiding documentation of security policies to reduce overhead

3 / 10

A company needs to secure data in transit between cloud workloads. Which option provides the best security?

Using only VPN tunnels for cloud network encryption

Disabling encryption for low-risk workloads to reduce latency

Implementing end-to-end TLS encryption for all internal communications

Encrypting only external traffic but not internal cloud traffic

Relying on private IP addressing for security instead of encryption

4 / 10

A cloud administrator needs to collect and analyze logs from multiple cloud services for security and compliance. What is the best solution?

Using a centralized log aggregation and analysis platform

Storing logs locally on each instance and reviewing them manually

Disabling logging to reduce storage costs

Sending logs to multiple storage locations without aggregation

Keeping logs on the same server as the application for easy access

5 / 10

An application hosted in the cloud is experiencing uneven traffic distribution. What is the best approach to ensure high availability and performance?

Using a static round-robin DNS configuration for traffic distribution

Manually adjusting instance allocations during traffic spikes

Assigning a single public IP address to all instances

Configuring a cloud-native load balancer with dynamic traffic routing

Running all application requests through a single server for consistency

6 / 10

A security team wants to ensure that a cloud-native application follows best security practices. Which approach is the most effective?

Deploying security patches manually to each cloud instance

Using only runtime security monitoring without development-stage checks

Integrating security checks into the CI/CD pipeline

Relying solely on network firewalls to protect the application

Allowing developers to bypass security policies for faster deployment

7 / 10

A company operates in a multi-cloud environment and wants to centralize identity management. What is the best solution?

Using separate authentication mechanisms for each cloud provider

Storing credentials locally on each virtual machine for authentication

Disabling multi-factor authentication (MFA) to simplify access

Implementing a federated identity system with single sign-on (SSO)

Relying only on username and password authentication

8 / 10

An organization wants to protect its cloud-based services from DNS-based attacks. Which security measure is most effective?

Blocking all outbound DNS requests from cloud workloads

Relying on public DNS resolvers without additional controls

Disabling DNS caching to force fresh lookups for each request

Implementing DNSSEC to validate DNS responses

Configuring static host files instead of using DNS

9 / 10

A company using multiple cloud providers wants to optimize costs without sacrificing performance. Which approach provides the best solution?

Running all workloads on reserved instances with long-term commitments

Implementing autoscaling and right-sizing instances based on demand

Disabling logging and monitoring to reduce operational costs

Keeping all workloads active at peak capacity regardless of usage

Migrating all workloads to a single cloud provider to get volume discounts

10 / 10

A cloud architect is tasked with designing a zero-trust security model for a cloud-native application. What is the most effective strategy?

Implementing static IP whitelisting for all cloud workloads

Relying on traditional perimeter-based security with firewalls

Using a single shared authentication token for all users and services

Disabling encryption for internal network traffic to reduce overhead

Enforcing identity-based micro-segmentation with continuous authentication

Your score is

The average score is 0%