CV0-004 Security Practice Question
An organization uses multiple cloud providers and wants to centralize secrets management. Which solution would best meet this requirement?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
HashiCorp Vault
HashiCorp Vault is a multi-cloud secrets management solution that can store and rotate secrets across different providers.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Azure Key Vault
Why it's wrong here
Azure Key Vault stores secrets within a single Azure tenant, so it cannot serve as the central store for AWS or GCP workloads without cross-cloud federation. It is tempting because it is Microsoft's native secrets service, and it would be correct where all workloads already run on Azure.
- ✗
AWS Secrets Manager
Why it's wrong here
AWS Secrets Manager stores and rotates secrets only within AWS, so workloads on other clouds must call AWS APIs and manage cross-cloud identity, which is not centralised. It is the right choice for secrets consumed exclusively by AWS services and IAM principals.
- ✓
HashiCorp Vault
Why this is correct
HashiCorp Vault is cloud-agnostic, running centrally to issue and audit secrets across AWS, Azure and Google Cloud through one API. This satisfies the multi-cloud centralisation constraint, whereas native secret managers such as Azure Key Vault remain scoped to their own provider.
- ✗
Google Cloud Secret Manager
Why it's wrong here
Google Cloud Secret Manager scopes secrets to a Google Cloud project and IAM, so Azure and AWS workloads need cross-cloud authentication and cannot manage them natively. It suits organisations standardising secrets within Google Cloud alone.
About these practice questions
Courseiva writes every CV0-004 question from scratch — 834 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CV0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CV0-004 exam.