CompTIA Cloud+ Certification Exam Practice Test
Cloud operations involve deploying and maintaining workloads across virtualized infrastructure and cloud services. This practice page addresses practical decisions around operating-system patch responsibility, resource approvals, configuration history, identity controls, audit records, application telemetry, traffic handling, caching, and network access. The questions focus on recognizing which control or design choice fits a stated operational need.
Exam overview
About the CompTIA Cloud+ Certification Exam
Cloud administrators must distinguish provider-managed services from workloads where the customer retains tasks such as guest operating-system maintenance. Operational governance also depends on approval gates, configuration tracking, and audit logs that connect a change to the responsible identity and time. For distributed services, troubleshooting can require tracing a request across components rather than relying on isolated error messages. Availability decisions include directing traffic only to instances that pass health checks, while application resilience can involve respecting API rate limits through controlled retries and backoff. Performance choices include caching frequently accessed, slowly changing data to reduce pressure on primary storage. Network design requires separating public application access from administrative access through appropriate security rules and network boundaries. Together, these topics exercise the judgment used to maintain cloud workloads, investigate incidents, and limit unintended exposure.
Sample Practice Questions
Review a selection from this exam's published US Practice Tests practice bank.
A workload is moved to a cloud provider, but the organization still manages the operating system patches on its virtual machines. Which statement best describes this arrangement?
Show answer
Correct answer: BCloud responsibilities are shared and depend on the service model. With customer-managed virtual machines, the customer typically handles guest operating system maintenance, while the provider manages underlying infrastructure.
An organization needs a cloud resource to be created only after a required approval has been recorded. Which control most directly enforces this process?
Show answer
Correct answer: AAn approval gate in the provisioning workflow can prevent creation until the required authorization is recorded. The other choices do not enforce an approval requirement.
A company needs to keep a record of how cloud resources are configured over time so that an unintended change can be identified and corrected. Which practice best supports this goal?
Show answer
Correct answer: AVersioned configuration definitions provide a history of intended infrastructure settings and changes. Comparing versions can help identify unintended drift and support a controlled correction.
An organization wants to reduce the risk that a cloud account credential stolen from a user can be used by itself to access the account. Which control most directly helps?
Show answer
Correct answer: AMulti-factor authentication requires an additional verification factor beyond the password, making a stolen password alone less likely to grant access. It is a foundational identity security control.
A cloud administrator wants to determine which user changed a firewall rule and when the change occurred. Which record is most useful?
Show answer
Correct answer: CAudit logs record administrative actions and commonly include the actor, action, resource, and time. Metrics describe system behavior rather than who made a configuration change.
A team needs to diagnose intermittent failures in a distributed application by following a single request across several services. Which telemetry is most useful for this purpose?
Show answer
Correct answer: ADistributed traces can show the path and timing of a request across service boundaries. Correlation identifiers help connect related spans and logs for the same request.
A company runs a stateful application across multiple virtual machines. During a rolling update, users should not be sent to instances that are still starting or have failed startup checks. Which mechanism addresses this need?
Show answer
Correct answer: AHealth checks let a traffic distribution service determine whether an instance is ready to serve requests. Unhealthy or not-yet-ready instances can be withheld from traffic during startup and maintenance.
How to use this practice test
The free US Practice Tests bank contains 50 published questions; each session presents up to 20 at random. Complete a session to see your results, then use missed or uncertain answers to identify concepts to revisit, such as audit evidence, health checks, or access restrictions.
Preparation tips
- For each service model scenario, identify which party manages the guest operating system, application, and underlying infrastructure.
- Practice matching operational goals to controls: approvals for resource creation, configuration records for drift detection, and audit logs for change attribution.
- Compare logs, metrics, and distributed traces; identify when tracing a request across services is more useful than inspecting one component.
- Review availability and performance patterns, including health-check-based traffic routing, backoff for rate-limited APIs, and caching for frequently read data.
- Sketch network rules that permit public HTTPS while restricting administrative interfaces to trusted corporate access.