CompTIA Cloud+ (V4) CV0-004 Practice Questions

Answer : C

Non-relational (NoSQL) databases are best for storing different types of unstructured data that may change frequently. They are designed to handle a wide variety of data types and are not constrained by the fixed schema of relational databases, making them more flexible and scalable for unstructured data.

: The distinction between relational and non-relational databases and their use cases is part of the foundational knowledge for cloud databases discussed in the CompTIA Cloud+ certification.

Answer : D

To prevent proprietary code from being exposed to third parties, a cloud engineer should use private repositories for the containers. Private repositories ensure that access to container images is restricted and controlled, unlike public repositories where images are accessible to anyone.

: The concept of using private repositories for protecting proprietary code is part of cloud security best practices, which is covered under the Governance, Risk, Compliance, and Security domain of the CompTIA Cloud+ certification.

Answer : D

Containers are designed to be stateless and ephemeral, meaning their local filesystem is typically destroyed when the container stops or is recreated. In CompTIA Cloud+ (CV0-004) objectives related to containerization, storage management, and data persistence, workloads that must retain processed data beyond the container lifecycle should use persistent volumes. Persistent volumes provide external, durable storage that is mounted into the container at runtime. This allows data written by the container (logs, processed output files, reports, exports) to survive restarts, scaling events, or pod rescheduling in orchestrated environments such as Kubernetes.

Standard output (A) is commonly used for logging and streaming logs to monitoring systems, but it does not inherently retain structured files for long-term storage unless redirected elsewhere. Optical disk mounts (B) are irrelevant in cloud-native container environments. Ephemeral storage (C) is temporary and deleted when the container terminates, making it unsuitable for later review. Therefore, persistent volumes are the correct solution for durable file-based output from containers.

Answer : A

The output from the 'ps' command indicates there is a process running under the UID (User ID) of 0, which is the root user, and the command that was run is '/var/www/command.py'. Given that the normal Apache processes are running under their own UID (65535), this suggests that a command was executed with root privileges that typically should not have such high-level access. This is a strong indicator of privilege escalation, where an unauthorized user or process gains elevated access to resources that are normally protected from an application or user. References: CompTIA Cloud+ Certification Study Guide (Exam CV0-004) by Scott Wilson and Eric Vanderburg

Answer : A

Protected Git branches help reduce the risk of CI/CD pipelines leaking secrets by imposing restrictions on who can commit to the branches, enforce status checks before merging, and prevent unauthorized access or changes to sensitive information, such as API keys, passwords, and secret tokens. This ensures that only approved changes can be made to the codebase, and sensitive information is safeguarded.

Answer : A

A branch is the best option because it allows a development team to maintain separate lines of development from a shared codebase. In CompTIA Cloud+ (CV0-004) objectives related to DevOps practices, version control, and configuration management, branching strategies are used to support multiple feature sets, releases, and customer-specific customizations without disrupting the primary (main) code line. For example, a team can create a branch per client, per release version, or per feature set, enabling isolated development and testing while still inheriting common fixes and improvements from the main branch when appropriate. This is especially useful when different customers require different configurations or optional modules in the same product.

A commit is simply a recorded change to code within a branch; it doesn't provide separation for different client versions by itself. A push sends committed changes to a remote repository but also doesn't address parallel code management. A merge combines branches back together, which is often done after changes are validated, but it is not the mechanism for maintaining separate client-specific variations. Therefore, branching best meets the requirement.

Answer : D

Microservices architecture is a design approach to build a single application as a suite of small services, each running in its own process and communicating with lightweight mechanisms, often an HTTP resource API. This design is decentralized and each service is fully decoupled, allowing for easier maintenance and scaling. Each microservice is built around a specific business capability and can be deployed independently, unlike monolithic architectures that are typically centralized and less flexible. References: CompTIA Cloud+ Study Guide (Exam CV0-004) - Chapter on Designing a Cloud Environment