CompTIA CV0-004 Practice Test

CV0-004 practice test: what's covered

• Cloud+ CV0-004
• Vendor-Neutral Cloud Administration

Free CV0-004 sample questions

1. A pharmaceutical company must run a clinical-trial analytics workload that processes regulated patient data. Latency is not a concern but data residency and isolation are mandatory. Which cloud deployment model BEST fits?

   • A. Public cloud with regional storage selection
   • B. Private cloud (single-tenant) with on-prem or hosted dedicated infrastructure
   • C. Community cloud shared with other research institutes
   • D. Hybrid cloud with public-cloud burst
   Show answer

   Correct: B. Private cloud gives single-tenant isolation and full control over residency — the canonical CompTIA answer when regulation/PHI/PCI-style sensitivity is the dominant constraint. Public-cloud regional pinning helps but the infrastructure is still multi-tenant. Community cloud is a niche fit when peers share the SAME compliance bar — not stated here. Hybrid is over-engineering when the workload itself never needs to leave the controlled zone.

2. A SaaS startup wants to focus on writing code and not manage OS patching, runtime upgrades, or scaling. Which service model is the BEST fit?

   • A. IaaS — full VM control
   • B. PaaS — managed runtime and platform, deploy code only
   • C. SaaS — they consume software but cannot deploy custom code
   • D. On-premises bare-metal
   Show answer

   Correct: B. PaaS (App Service, Elastic Beanstalk, App Engine) abstracts the OS and runtime — the customer pushes code, the platform handles patching and scaling. IaaS still requires OS/runtime ownership. SaaS is consumption-only; the company writes its own software, so SaaS is wrong. Bare-metal contradicts the "no patching" requirement.

3. Using the AWS/Azure/GCP shared responsibility model for IaaS, which task is ALWAYS the CUSTOMER'S responsibility?

   • A. Physical security of the data centre
   • B. Hypervisor patching
   • C. Guest OS patching and configuration of the EC2/VM instance
   • D. Redundant power to the rack
   Show answer

   Correct: C. In IaaS the provider owns everything UP TO the hypervisor; the customer owns the guest OS, runtime, app, data, and identity config. Physical security, hypervisor, and power are always provider-side. The most common trap is assuming "the cloud" patches your VM — it does not in IaaS (PaaS is a different story).

4. Which TWO statements correctly describe the shared responsibility model differences between IaaS and PaaS? (Choose 2)

   • A. IaaS customer patches the guest OS; PaaS provider patches the OS and runtime
   • B. PaaS customer owns the underlying hypervisor
   • C. Both IaaS and PaaS leave application-level security to the customer
   • D. In PaaS, the provider owns the customer's application code
   • E. In IaaS, the provider patches the database engine
   Show answer

   Correct: A and C. IaaS — customer patches the guest OS, runtime, and app. PaaS — provider patches OS + runtime; customer still owns the app code and its security (authn, input validation, secrets). The hypervisor is always the provider in both models. Provider never owns customer code. IaaS providers do not patch databases — that is RDS/PaaS territory.

5. A bank has an existing on-prem mainframe for core banking but wants to add a customer-facing mobile app hosted in the public cloud, integrating with the mainframe via APIs. Which deployment model BEST describes this?

   • A. Public cloud
   • B. Private cloud
   • C. Hybrid cloud
   • D. Multi-cloud
   Show answer

   Correct: C. Hybrid = mix of on-prem (or private cloud) AND public cloud, with workloads integrating across the boundary. Multi-cloud means more than one public provider (AWS + Azure) — only one is used here. Pure public or pure private would not capture the on-prem mainframe integration.

Last updated: 2026-10-19

CV0-004 practice test FAQ

Related practice tests

• CompTIA A+ 220-1101 / 220-1102 practice test
• CompTIA CAS-005 practice test
• CompTIA CLO-002 practice test
• CySA+ CS0-003 practice test
• CompTIA A+ DA0-001 practice test
• CompTIA DY0-001 practice test