CompTIA Cloud+ Post-Assessment Practice Test

These questions are part of the practice quiz. Start practicing

• Which storage architecture provides block-level storage to servers over a network?
• An external hard drive is attached to a workstation to back up virtual machines for testing. What type of storage is this?
• A system requires users to log in with a username, a password, and a smart card. This authentication approach is best described as:
• In cloud disaster recovery, which architecture keeps only minimal core services always on and replicates other components as needed?
• Fictional Corp expects to deploy more than one web server to handle increasing traffic. For load balancing a shopping site, which feature should they look for?
• In virtualization, which memory technique allows more memory to be allocated to VMs than physical RAM would allow?
• Which description best captures the characteristics of a well-designed cloud incident response plan?
• In which scenario is serverless computing most advantageous?
• Which combination best reflects common challenges of multi-cloud deployments?
• In a community cloud, which component might be the most difficult for the member organizations to manage?
• Which team is responsible for approving or denying change requests in an ITIL-based change management process?
• Which statement best describes cloud-native architecture in contrast to a traditional monolithic application?
• In cloud deployment, increasing the number of resources by adding more servers to handle load describes which scaling approach?
• Which contract document defines the legal terms and responsibilities between a customer and a service provider?
• What is the recommended mitigation for unencrypted FTP exposing credentials?
• In cloud computing, what platform is widely used to orchestrate and manage containers across clusters?
• Which disaster recovery site type is configured to be ready with minimal downtime but at higher ongoing cost?
• When investigating an intermittent cloud application issue, after forming a theory of the cause, what is the next step?
• After passive tests indicate the configuration appears correct, what is the likely next step to identify vulnerabilities and potential compromises?
• Data gravity describes how large datasets influence where compute and storage should be placed because their location affects latency and cost.
• Which metric defines the maximum acceptable downtime for an IT service during a disruption?
• Which security factor is a common contributor to data breaches when using cloud-based apps?
• Which option best describes using IAM groups and service principals to enable least-privilege access?
• After applying a patch, which step ensures the patch did not adversely affect the system?
• Which storage class is best for long-term retention when data is rarely accessed and retrieval time is not critical?
• Which protocol would allow the organization to synchronize clocks with a globally accessible time server across the Internet?
• Before migrating, what should be done to compare performance?
• Rosa can remote into a Linux server using a management IP address separate from the one users resolve via DNS. Which command should she run to start troubleshooting the server's network interface?
• In SaaS, who is responsible for security and most maintenance?
• Which deployment model uses dedicated infrastructure with the customer retaining greater control?
• Which term best describes a plan to restore IT infrastructure after a disaster?
• Which strategy is used to prevent leakage of sensitive data in cloud storage and databases?
• Which technology is used to issue certificates and bind public keys to user identities?
• Timeframe requirement the sales department has given for downtime is described by which metric?
• For a globally deployed application that requires redundancy and fast data access, which storage method is most suitable?
• Which protocol is commonly used to secure VPN communications at the IP layer?
• What does RTO stand for and what is its role in DR planning?
• For a script to control services on a server, which interface is typically used?
• During private cloud network planning, which consideration is necessary to support vNICs operating in bridging mode?
• After installing Linux, which step best reduces the attack surface?
• CMDB is used for what?
• Under the shared responsibility model, which statement correctly matches provider and customer responsibilities in IaaS?
• For a volatile cloud-based class registration portal, which capability enables handling peak load without downtime?
• In a login that uses a username and password, the username is considered which security concept?
• Which statement best describes the roles of security groups, firewalls, and ACLs in a cloud network and their best practices?
• Which concept improves portability of applications across different cloud platforms by packaging the app and its dependencies into a portable unit?
• Explain the role of identity and access management (IAM) in cloud security, including least privilege and MFA concepts.
• On a host running multiple VMs, overcommitting memory is possible due to which capability?
• Which cloud capability allows a system to automatically adjust resources in response to load without manual intervention?
• Which is a common cloud security threat and its corresponding mitigation?
• To allow users to access cloud services without separate credentials, which identity mechanism is configured?
• Which deployment method updates servers in successive waves to minimize impact?
• For a department planning growth within a 10.0.0.0/8 private space, which subnet would be the smallest that can accommodate the finance department’s growth (current 10 hosts, 50% growth)?
• Which metric defines the maximum amount of data loss tolerated in a disaster scenario?
• Which document contains guarantees and terms used to determine backup schedules and service commitments?
• Which open-source container orchestration system was originally developed by Google?
• What is a bastion host and how does it enhance secure remote access to cloud resources?
• In incident response, a runbook typically contains step-by-step actions to restore services.
• Which recovery approach is designed to minimize downtime by having live data and systems ready at a separate location?
• What type of storage is best for centralizing log files from multiple servers?
• To achieve the fastest failover in storage replication, which option is typically used despite higher bandwidth requirements?
• In a backup plan where full backups occur weekly and hourly backups capture changes since the last backup of any type, which backup type is used every hour?
• What does RPO represent in disaster recovery planning?
• If a new employee uses a default weak password and must change it on first login, which password policy is likely missing?
• Which cloud service model enables end users to access email via a web browser without managing the underlying server?
• Why is tagging important in cloud cost management and governance, and what are best practices for tag strategies?
• In observability, which artifacts are used together to diagnose issues in distributed systems?
• Which of the following best describes IaaS (Infrastructure as a Service)?
• Why are disaster recovery tests and exercises important in cloud environments?
• What best describes IAM roles vs policies and how to implement least-privilege access?
• For the 10.8.2.0/27 network, which is a valid host address?
• In an identity federation setup between on-premises Active Directory and cloud identities, which practice helps maintain consistent access control across environments?
• Which data lifecycle management phase is included in the typical framework used for cloud data services?
• Which set of best practices is commonly used to guide IT service delivery and operations?
• Which scenario is not well-suited for serverless computing?
• To deploy with elasticity, what activity should be performed at every step of the project?
• A university migrating class registration to a CSP seeks to support variable demand during peak registration periods; what benefit is most important?
• Which term describes increasing the capabilities of the VM to meet demand by upgrading its resources?
• For disaster recovery, which approach minimizes downtime by maintaining a copy of data at a remote site?
• Which metric describes the maximum tolerable data loss in terms of time during a disaster?
• Which statement best describes the role of an Internet Gateway in a VPC?
• Explain how governance and compliance controls are implemented in cloud environments (policies, standards, audits).
• Under SaaS, which is the customer’s responsibility?
• Which redundancy pattern provides continuous operation by having multiple active components that handle workloads in parallel?
• Which storage type is designed for high-performance database workloads requiring block-level access?
• In the planning stage, what data-related concern might the legal department worry about after reviewing the provider SLAs and terms?
• What are the core data protection considerations for cloud databases, including backups, PITR, replication, and encryption?
• In cloud service procurement, what is the difference between an SLA and an SLI?
• In ITIL lifecycle management, which is the first stage for developing a new application intended for deployment on a private cloud?
• Which factor is least likely to influence the success of migrating on-prem workloads to the cloud?
• In access control terminology, which statement best describes identification?
• Where should a junior technician look to find guaranteed uptime information from the cloud provider?
• What mechanisms ensure data integrity and durability in cloud storage?
• Which access control model uses fixed security labels and clearance levels to determine access?
• What interface do automation scripts commonly use to interact with services on a server?
• Fictional Corp has a DNS server running within its VPC. It plans to move an application server to a different VPC. Which step is appropriate during this move?
• Giving a coworker access permissions by the resource owner without central policy control describes which model?
• Which capability allows performing tasks like user account creation with minimal human intervention?
• Which type of facility provides a backup location with minimal downtime for failover?
• What problem does a cloud service broker solve in multi-cloud environments?
• Which components constitute core cloud networking, and what are the primary security considerations?
• Which metric defines the maximum allowable downtime after a disruption?
• Which access control model uses roles to grant permissions to users?
• Which capability does Kubernetes provide that manages deployment, scaling, and the lifecycle of containers in cloud-native applications?
• A small startup wants to keep initial costs low; which cloud service model would best enable rapid development with minimal upfront investment?
• What is the primary purpose of federation in cloud identity management?
• A newly deployed VM cannot be reached by ICMP from an external source. Which firewall behavior most likely causes this?
• During a canary deployment, what is typically done after the canary group proves stable?
• Which document outlines how a company will continue to operate during a disaster?
• Which is a key consideration when securing cloud databases such as RDS, Cosmos DB, or BigQuery?
• How do data sovereignty requirements influence cloud provider selection and data architecture?
• A VM's FQDN does not resolve while its IP does; which DNS tool would you use to verify name resolution?
• Which set of activities comprises data lifecycle management in cloud data services?
• When diagnosing a VM receiving XML data, which tool is best to start capturing and analyzing traffic on the wire?
• Which principle ensures users are granted only the minimum privileges needed to perform their jobs?
• A six-year-old firewall replacement is recommended because of what fundamental issue?
• Which technique would best help with capacity issues that occur only occasionally while keeping costs low?
• What is the primary benefit of federation in cloud identity management?
• What is a primary benefit of a rolling deployment?
• Which statement best describes data governance in data lifecycle management policies?
• Will has been asked to recommend a VPN protocol for his company to connect to the cloud service provider. Which protocol could he rule out as an option for this connection?
• Which migration strategy involves moving workloads to the cloud with minimal or no changes?
• Jonathan automated routine tasks by sending information from one system to a gateway on the VPC to trigger actions from multiple sources. Which automation technique did he implement?
• Clyde has just configured a web server as the first virtual machine on the cloud. Which must he configure to make the web server reachable by users around the world?
• Which backup type copies all selected data each time the job runs, regardless of previous backups?
• If a recently installed update prevents standard operation, performing this action to return to the previous state is known as a?
• What term describes a documented collection of procedures for handling routine operations or incidents?
• David notices a lack of documentation and scattered spreadsheets. Which IT management tool should he implement to centralize information about IT assets and their relationships?
• Which support model could Fictional Corp choose to meet 24/7 coverage without staffing every office?
• Which scaling concept involves increasing capacity by adding more instances rather than upgrading existing ones?
• In a subnet of 10.8.2.0/27, which statement is correct about host addresses?
• In a virtualized server environment, which technique allows the hypervisor to reclaim memory from non-critical VMs so a critical VM can continue running with the required memory?
• Which technique is used to protect sensitive data in non-production environments?
• Which Kubernetes feature helps maintain desired state by restarting failed pods?
• Which strategy helps reduce latency and egress costs for cloud applications?
• What deployment strategy updates a small subset of servers first to test before proceeding to the rest?
• Which technology is used to issue certificates and manage public keys for users within a system?
• Which deployment model blends public and private environments with policy enforcement across both?
• Which is a primary advantage of a multi-cloud strategy?
• Which command is commonly used to query DNS records for a hostname?
• What document specifies guaranteed uptime and service levels provided by a cloud provider?
• To keep a new VM's network communication limited to other virtual machines within the cloud provider's environment, which type of IP address should be assigned?
• Why are sticky sessions valuable for a load-balanced e-commerce site?
• What device is typically used to establish secure connectivity between an on-premises network and a cloud environment?
• To enforce HTTPS on a website, which technology should be installed and configured?
• What does RPO stand for and how does it influence disaster recovery planning?
• Which protocol is commonly used for storage area network implementations?
• Developers need lightweight, self-contained environments that run consistently across different host OSes. Which technology provides this?
• Which pairing correctly describes encryption in transit and at rest with typical protocols and key management considerations?
• An IT team wants to convert a physical server into a virtual machine image to run in their lab environment. What technique is this called?
• Which of the following is an example of a tag taxonomy category?
• Which statement best describes the role of CSPM, CWPP, and provider-native security features in a cloud security strategy?
• What is a plausible reason for an automation tool account to become locked, requiring investigation?
• What is the primary purpose of resource tagging in cloud environments?
• Which term best describes the practice of coordinating multiple automated tasks into a single cohesive workflow?
• Why is exposing port 21 (FTP) on virtual machines reachable from the public Internet a security concern?
• When migrating many servers to a cloud provider, which of the following is recommended as an early project activity?
• What activity should be performed at every step of a cloud deployment project to ensure traceability and repeatable deployments?
• When data gravity is a factor, what is a best practice for architecture placement of compute and storage?
• Which term refers to designing IT services to deliver value to customers by following a recognized framework?
• Disaster relief nonprofits central app; which cloud service model would best fit their needs?
• In blue-green deployment, what is the key action after testing the new environment is satisfactory?
• Which ITIL body approves or denies change requests?
• An employee in a new department receives an access denied error when attempting to access the first system on a list. What is the most likely reason?
• A quick, targeted software update aimed at fixing a specific issue or security flaw is called a?
• What mechanisms ensure data integrity and durability in cloud storage?
• Which technology is designed to monitor a single server for malicious activity and can stop it on the host if detected?
• Which approach has a goal of ensuring that a given workload can be moved with minimal changes between cloud providers?
• Which statement best describes fault tolerance?
• Which factors influence cloud capacity planning and autoscaling thresholds?
• Which statement best describes effective cloud security monitoring and governance practices?
• Ann wants to add an extra layer of security to inspect packet contents as they move between her data center and the private cloud. What should she install?
• In IPv4 subnet notation, what does '/27' specify in 10.3.3.128/27?
• To avoid vendor lock-in and enable easier migration between cloud providers, which approach should be used to package applications?
• What is the significance of data residency and data sovereignty in cloud deployments?
• During deprovisioning of an application, which firewall-related action is typically required?
• Which cloud characteristic allows provisioning the minimum necessary disk space with automatic expansion when needed?
• Which term describes the practice of running multiple workloads in isolated environments on a single host, sharing the host's OS kernel?
• What is the primary role of SIEM in cloud security?
• Which practice improves audit trails by capturing exact deployment artifacts and times rather than making in-place changes?
• After provisioning a Linux VM, what is the first security hardening step you should perform?
• Fictional Corp has two data centers in the United States with private clouds. They want to connect them via the Internet using GRE, but GRE lacks encryption. Which option should they combine with GRE to provide encryption?
• What plan focuses on restoring IT infrastructure after a disaster to minimize downtime?
• Which deployment approach uses a duplicate production environment to validate changes before directing traffic to it?
• What is cloud-native continuous integration/continuous deployment (CI/CD) and how does it differ from traditional pipelines?
• What is the first step in implementing a formalized process for changes to functions, processes, or systems?
• What is a key benefit of automating cloud patch management?
• Which cloud service model offers a managed runtime and platform, while the customer manages applications and data?
• Why is tagging important in cloud cost management and governance, and what are common best practices?
• Which technology described in the material analyzes logs and baselines to learn from data and make decisions automatically?
• In a backup strategy where a weekly full backup is performed and daily backups minimize disk usage, which backup type uses the least additional disk space for daily backups?
• An IDS failed to detect an event. Which of the following should you determine next?
• What is Infrastructure as Code (IaC) and how does it improve cloud operations?
• During legal review of cloud provider contracts, which clause is critical to ensure data resides in specific geographic regions?
• Which storage deployment is typically used to provide storage for an entire private cloud in the data center?
• What best describes cloudbursting in a hybrid cloud environment?
• Startup with limited capital wants to participate in a private cloud approach without purchasing extensive hardware. What is the next best option?
• Which set of techniques is commonly used to optimize cloud costs?
• In a community cloud, which security control is often the most challenging to manage across organizations?
• What is the primary purpose of logging and monitoring in cloud operations?
• In cloud observability, which combination of artifacts constitutes the three pillars used to understand system state?
• Which statement best describes the encryption keys lifecycle, including rotation, revocation, and separation of duties?
• Which approach is commonly used to provide single sign-on (SSO) between on-premises Active Directory and cloud identities?
• Frank created a new virtual machine and tries to ping it, but the request times out. What is the most likely reason?
• Which of the following are typical tools used for logging and monitoring in cloud environments?
• Immutable infrastructure replaces components rather than modifying them; what is a primary benefit of this approach in cloud operations?
• Which backup type backs up only data that has changed since the last backup of any type?
• Which tool would you use to capture and inspect network traffic to verify inbound XML data is reaching the VM?
• Which statement best distinguishes archiving from backup and disaster recovery in cloud data management?
• In ITIL lifecycle management for applications, what is the primary purpose?