Question 4 of 977
mediumMultiple ChoiceObjective-mapped
CV0-004 Practice Question: A cloud administrator is configuring a web…
A cloud administrator is configuring a web application hosted on a public cloud VM. The application must be accessible over HTTPS, and the administrator needs to ensure that all traffic between the client and the server is encrypted. The cloud provider offers a managed certificate service. Which of the following is the BEST practice for securing the application?
⚠ Common exam trap
Many candidates think manually installing a certificate from a public CA (Option D) is more secure or gives more control, but the cloud provider's managed service is the best practice because it automates lifecycle management and offloads TLS termination to the load balancer, reducing attack surface and operational burden.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use the cloud provider's managed certificate service to provision and attach the certificate to the load balancer.
The cloud provider's managed certificate service automatically handles certificate provisioning, renewal, and attachment to the load balancer, ensuring HTTPS traffic is encrypted with a trusted certificate from a public CA. This is the best practice because it offloads TLS termination to the load balancer, reducing the VM's CPU overhead and centralizing certificate management. It also ensures the certificate is automatically renewed before expiry, preventing service disruptions.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Use the cloud provider's managed certificate service to provision and attach the certificate to the load balancer.
Why this is correct
The managed service automates certificate lifecycle, reducing administrative overhead and risk.
- ✗
Generate a self-signed certificate and configure the web server to use it.
Why it's wrong here
Self-signed certificates are not trusted by browsers and would cause security warnings.
- ✗
Disable HTTPS and rely on network-level encryption provided by the cloud provider.
Why it's wrong here
Disabling HTTPS eliminates end-to-end encryption, leaving data vulnerable.
- ✗
Create a certificate signing request (CSR) and submit it to a public CA, then install the certificate and private key on the VM.
Why it's wrong here
Storing the private key on the VM increases the risk of exposure; managed services handle key storage securely.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Last reviewed: Jun 11, 2026
This CV0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CV0-004 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.