A company wants to run a workload where the cloud provider manages the operating system and runtime, but the company still writes and deploys its own application code. Which service model best fits this requirement?

Infrastructure as a Service (IaaS)

During capacity planning for a new deployment, which metric pair is most relevant when choosing an appropriately sized compute instance?

Expected vCPU and memory utilization

Data center latitude and longitude

The provider's stock ticker and market cap

The color of the management console theme

Which practice best supports a reliable backup strategy in the cloud?

Periodically testing restores to verify backups are usable

Storing backups only on the same volume as the production data

Never testing restores to save time

Keeping a single backup copy indefinitely

A cloud security team wants to require a second authentication factor for all administrative logins. Which control should they implement?

Multi-factor authentication (MFA)

Single sign-on with no additional factors

A shared administrator password

In a CI/CD pipeline, what is the primary purpose of the continuous integration stage?

To automatically build and test code changes as they are merged

To provision the production database for the first time

To manually approve every line of code by email

To archive old log files from production servers

CompTIA Cloud+ (CV0-004) Practice Test

Frequently asked questions

How many CompTIA Cloud+ (CV0-004) practice questions are here?+

A full bank of original CompTIA Cloud+ (CV0-004) practice questions across the official content areas, weighted like the real exam, with explanations. Free, no signup.

What is the CompTIA Cloud+ (CV0-004) exam like?+

A multiple-choice exam, 90 minutes, and you need 720/900% to pass. Practice by topic here, then take the full timed mock exam to gauge readiness.

Are these the real exam questions?+

No. Every question is 100% original, written from public primary sources with explanations. We never copy real exam questions or paid prep material.

Can I study in Chinese or Spanish?+

PrepPass practice is in English, 中文 and Español. The official exam is in English — switch the question language to English any time to rehearse the exact terminology you'll see on test day.

Sample practice questions

A few real questions from this free bank, with full explanations. Use the practice tool above for the whole set.

1. Cloud Architecture
A company wants to run a workload where the cloud provider manages the operating system and runtime, but the company still writes and deploys its own application code. Which service model best fits this requirement?
- a.Infrastructure as a Service (IaaS)
- b.Platform as a Service (PaaS)
- c.Software as a Service (SaaS)
- d.Bare-metal hosting
Answer: b
Explanation: PaaS gives developers a managed platform, including the operating system, runtime, and middleware, so they only supply and deploy application code. IaaS would leave the OS to the customer, and SaaS delivers a finished application with no custom code to deploy.
2. Cloud Architecture
An organization keeps sensitive workloads on infrastructure it owns while bursting less-sensitive workloads to a public cloud during peak periods. Which deployment model is this?
- a.Hybrid cloud
- b.Community cloud
- c.Public cloud
- d.Private cloud
Answer: a
Explanation: A hybrid cloud combines private (owned) infrastructure with public cloud, often to keep sensitive data in-house while using public capacity for elastic bursting. A community cloud is shared by organizations with common concerns, and public or private alone would not describe the combination.
3. Cloud Architecture
A design calls for storing large volumes of unstructured media files that are accessed over HTTP with metadata but rarely modified in place. Which storage type is the best fit?
- a.Block storage
- b.Object storage
- c.File storage
- d.Local ephemeral disk
Answer: b
Explanation: Object storage is ideal for large, unstructured data such as media, storing each item with metadata and a unique identifier accessible over HTTP. Block storage suits databases and boot volumes, and file storage suits shared file systems; neither is optimized for massive web-accessible object retrieval.
4. Deployment
A company moves an existing application to the cloud with no changes to its architecture, simply relocating the VMs. Which migration strategy is this?
- a.Lift-and-shift (rehost)
- b.Refactor (re-architect)
- c.Replatform
- d.Retire
Answer: a
Explanation: Lift-and-shift, or rehosting, moves a workload to the cloud as-is with minimal changes, which is fast but does not gain cloud-native benefits. Replatforming makes small optimizations, refactoring redesigns the application, and retiring removes it entirely.
5. Deployment
During capacity planning for a new deployment, which metric pair is most relevant when choosing an appropriately sized compute instance?
- a.Data center latitude and longitude
- b.Expected vCPU and memory utilization
- c.The provider's stock ticker and market cap
- d.The color of the management console theme
Answer: b
Explanation: Right-sizing an instance requires matching its vCPU and memory to the workload's expected utilization to avoid over-provisioning cost or under-provisioning performance. The other options have no bearing on instance sizing.
6. Operations
Which practice best supports a reliable backup strategy in the cloud?
- a.Storing backups only on the same volume as the production data
- b.Never testing restores to save time
- c.Keeping a single backup copy indefinitely
- d.Periodically testing restores to verify backups are usable
Answer: d
Explanation: A backup is only valuable if it can be restored, so periodic restore testing verifies integrity and process. Co-locating backups with production data, skipping tests, or relying on a single copy all undermine recoverability.
7. Security
Which principle states that a user or service should be granted only the permissions required to perform its function and nothing more?
- a.Defense in depth
- b.Separation of duties
- c.Least privilege
- d.Non-repudiation
Answer: c
Explanation: Least privilege limits each identity to the minimum access needed, shrinking the attack surface if credentials are compromised. Defense in depth layers controls, separation of duties splits responsibilities, and non-repudiation ensures actions cannot be denied.
8. Security
A cloud security team wants to require a second authentication factor for all administrative logins. Which control should they implement?
- a.Single sign-on with no additional factors
- b.Multi-factor authentication (MFA)
- c.A shared administrator password
- d.IP allow-listing only
Answer: b
Explanation: Multi-factor authentication requires an additional factor beyond the password, greatly reducing the impact of stolen credentials. Shared passwords remove accountability, and IP allow-listing alone does not verify the identity of the person logging in.
9. DevOps Fundamentals
In a CI/CD pipeline, what is the primary purpose of the continuous integration stage?
- a.To automatically build and test code changes as they are merged
- b.To provision the production database for the first time
- c.To manually approve every line of code by email
- d.To archive old log files from production servers
Answer: a
Explanation: Continuous integration automatically builds and runs tests against changes as they are merged, catching defects early and keeping the mainline healthy. It is distinct from provisioning, manual approvals, or log archival.
10. DevOps Fundamentals
Which technology packages an application with its dependencies into a lightweight, portable unit that shares the host operating system kernel?
- a.A traditional virtual machine
- b.A container
- c.A dedicated bare-metal server
- d.A SAN volume
Answer: b
Explanation: Containers package an application and its dependencies into a portable unit that shares the host kernel, making them lighter and faster to start than full virtual machines. VMs virtualize entire operating systems, and bare-metal and SAN concepts are unrelated to this packaging model.