Courseiva
← Back to CompTIA Cloud+ CV0-004 questions

Scenario-based practice

Refer to the Exhibit Practice Questions

Practise CompTIA Cloud+ CV0-004 practice questions — original exam-style scenarios covering every exam domain, with detailed explanations, wrong-answer analysis, and common exam traps.

Start full practice testRead exam guide
15
scenario questions
CV0-004
exam code
CompTIA
vendor

Scenario guide

How to approach refer to the exhibit practice questions

Practise exhibit-style questions that ask you to read a topology, table, command output or diagram before choosing the best answer.

Quick answer

Exhibit-style questions test whether you can read a topology, command output, diagram or table before choosing the best answer.

How to extract the relevant detail from an exhibit.

How topology, command output or routing information affects the answer.

How to avoid answering from memory before reading the evidence.

How to map the exhibit back to the exam objective.

Related practice questions

Related CV0-004 topic practice pages

Scenario questions usually connect to one or more exam topics. Use these links to review the underlying concepts behind the scenario.

Cloud Architecture and Design practice questions

Sharpen your CV0-004 knowledge of Cloud Architecture and Design.

Deployment practice questions

Work through CV0-004 questions on Deployment.

Security practice questions

Work through CV0-004 questions on Security.

Operations and Support practice questions

Operations and Support practice questions for CV0-004.

Troubleshooting practice questions

Practise CV0-004 questions linked to Troubleshooting.

CV0-004 fundamentals practice questions

Work through CV0-004 questions on CV0-004 fundamentals.

CV0-004 scenario practice questions

Practise CV0-004 questions linked to CV0-004 scenario.

CV0-004 troubleshooting practice questions

Practise CV0-004 questions linked to CV0-004 troubleshooting.

Practice set

Practice scenarios

Question 1hardmultiple choice
Full question →

Refer to the exhibit. A cloud administrator runs the above command on a Linux virtual machine. What is the effect of the current firewall rules?

Exhibit

Refer to the exhibit.
```
$ sudo iptables -L -n -v
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:22
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:80
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:443
    0     0 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:3389
```
Question 2easymultiple choice
Full question →

Refer to the exhibit. This log message is from a cloud security scanner. Which principle did the scanner likely detect?

Exhibit

Refer to the exhibit.
```
[critical] [security] [user_data] [user_data_1e3b] User credentials stored in user data where they are accessible to all users with read access.
```
Question 3mediummultiple choice
Full question →

Refer to the exhibit. A cloud engineer is reviewing logs from an EC2 instance. Which of the following is the MOST likely root cause of the application failure?

Exhibit

Refer to the exhibit.
```
CloudWatch Logs: /var/log/syslog
2024-03-15T10:00:00Z [ERROR] Disk space usage: 95%
2024-03-15T10:05:00Z [ERROR] Disk space usage: 97%
2024-03-15T10:10:00Z [WARN] Application X: unable to write log file
2024-03-15T10:11:00Z [CRITICAL] Application X: out of memory
2024-03-15T10:12:00Z [INFO] Instance i-12345: state changing to stopping
```
Question 4hardmultiple choice
Full question →

A cloud application is intermittently slow. Based on the exhibit, which of the following is the most likely cause?

Exhibit

Refer to the exhibit.

[2025-02-20 14:32:15] ERROR: Connection timeout to database endpoint db.example.com:3306
[2025-02-20 14:32:20] WARN: Retry attempt 1 of 3...
[2025-02-20 14:32:25] ERROR: All retries exhausted. Falling back to cached data.
Question 5hardmultiple choice
Full question →

Refer to the exhibit. A developer is trying to upload an object to S3 bucket 'example-bucket' using the IAM policy shown. The upload fails with an AccessDenied error. Which of the following is the MOST likely reason?

Exhibit

IAM Policy:
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "s3:PutObject",
      "Resource": "arn:aws:s3:::example-bucket/*",
      "Condition": {
        "StringEquals": {
          "s3:x-amz-server-side-encryption": "AES256"
        }
      }
    }
  ]
}

Bucket Policy:
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Deny",
      "Principal": "*",
      "Action": "s3:PutObject",
      "Resource": "arn:aws:s3:::example-bucket/*",
      "Condition": {
        "StringNotEquals": {
          "s3:x-amz-server-side-encryption": "aws:kms"
        }
      }
    }
  ]
}
Question 6mediummultiple choice
Full question →

Refer to the exhibit. What is the effect of this bucket policy?

Exhibit

Refer to the exhibit.
```
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": "*",
      "Action": "s3:GetObject",
      "Resource": "arn:aws:s3:::example-bucket/*",
      "Condition": {
        "IpAddress": {
          "aws:SourceIp": "203.0.113.0/24"
        }
      }
    }
  ]
}
```
Question 7mediummultiple choice
Full question →

Refer to the exhibit. An administrator created this policy and attached it to a user. When the user attempts to terminate an instance from an IP address outside the 10.0.0.0/8 range, what will happen?

Exhibit

Refer to the exhibit.

```json
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "ec2:TerminateInstances",
      "Resource": "*",
      "Condition": {
        "IpAddress": {"aws:SourceIp": "10.0.0.0/8"}
      }
    }
  ]
}
```
Question 8hardmultiple choice
Full question →

A cloud administrator is troubleshooting why a newly launched VM did not complete its initialization. According to the exhibit, what is the most likely cause?

Network Topology
force-confold'option=Dpkg::Options::=force-unsafe-io'assume-yes'quiet'Refer to the exhibit.```$ cat /var/log/cloud-init-output.log...
Question 9mediummultiple choice
Full question →

A cloud administrator is debugging a failed CloudFormation stack creation. The exhibit shows the stack events. What is the most likely cause of the failure?

Network Topology
$ aws cloudformation describe-stack-eventsstack-name WebAppRefer to the exhibit.```"StackEvents": ["StackId": "arn:aws:cloudformation:us-east-1:123456789012:stack/WebApp/...","EventId": "Event-1","StackName": "WebApp","LogicalResourceId": "WebApp","PhysicalResourceId": "arn:aws:cloudformation:us-east-1:123456789012:stack/WebApp/...","ResourceType": "AWS::CloudFormation::Stack","Timestamp": "2023-03-01T12:00:00.000Z","ResourceStatus": "CREATE_IN_PROGRESS","ResourceProperties": "..."},"LogicalResourceId": "WebServerInstance","ResourceType": "AWS::EC2::Instance","ResourceStatus": "CREATE_FAILED",Status Code: 400Error Code: InvalidGroup.NotFound)","Timestamp": "2023-03-01T12:05:00.000Z"
Question 10mediummultiple choice
Full question →

Refer to the exhibit. A cloud administrator launched a CloudFormation stack to deploy an EC2 instance, but the stack is rolling back. What is the MOST likely cause?

Exhibit

StackStatus: "ROLLBACK_IN_PROGRESS"
StackEvents:
  - ResourceStatus: "CREATE_FAILED"
    ResourceType: "AWS::EC2::Instance"
    ResourceStatusReason: "Value of property ImageId is invalid. Please use a valid AMI."
Question 11mediummultiple choice
Full question →

The exhibit shows the health check status for targets in an application load balancer's target group. The target group has a health check on port 80. An administrator notices that one target is unhealthy on port 80 but healthy on port 443. What is the most likely cause?

Network Topology
aws elbv2 describe-target-healthtarget-group-arn arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/MyTargets/12345678Refer to the exhibit.Health Check Configuration (AWS CLI):Output:"TargetHealthDescriptions": ["Target": {"Id": "i-0a1b2c3d4e5f6g7h8","Port": 80},"HealthCheckPort": "80","TargetHealth": {"State": "unhealthy","Description": "Health checks failed""Port": 443"HealthCheckPort": "443","State": "healthy","Description": ""
Question 12easymultiple choice
Full question →

A company hosts its critical applications on a cloud provider's virtual machines within a virtual private cloud. The security team receives an alert from the intrusion detection system indicating that one of the VMs is exhibiting signs of a ransomware infection. The administrator connects to the VM via a bastion host and observes that several important files have been encrypted and a ransom note has been left. The incident response plan is still being developed, but the administrator knows the immediate priority is to contain the threat and prevent it from spreading to other VMs and storage resources. The company has daily backups stored in a separate cloud storage service that is not directly accessible from the production network. Which of the following actions should the administrator take FIRST to contain the incident and minimize further damage?

Question 13hardmultiple choice
Full question →

Refer to the exhibit. What action should the administrator take to bring the environment into compliance?

Exhibit

[admin@controller ~]$ cldctl config verify --icm policy.json
Policy: policy.json
Check: vm-sizes
Result: 2 out of 10 VMs do not comply: vm-01 (t2.large), vm-07 (t2.xlarge)
Expected size: t2.medium
Question 14mediummultiple choice
Full question →

A cloud administrator runs the command shown in the exhibit on a storage node in a hyper-converged cluster. The node is experiencing intermittent I/O errors and degraded performance. Based on the SMART data, what is the most likely cause of the issue?

Exhibit

Refer to the exhibit.

$ sudo smartctl -a /dev/sda | grep -E "Reallocated_Sector_Ct|Current_Pending_Sector|Offline_Uncorrectable"
Reallocated_Sector_Ct   0x0033   100   100   010    Pre-fail  Always       -       15
Current_Pending_Sector  0x0012   100   100   000    Old_age   Always       -       5
Offline_Uncorrectable   0x0010   100   100   000    Old_age   Offline      -       3
Question 15hardmultiple choice
Full question →

Refer to the exhibit. An application in a cloud environment logs multiple database connection errors. The database is a managed MySQL instance in the same VPC. The timeouts and connection refused errors occur intermittently. Which of the following is the most likely cause?

Exhibit

Refer to the exhibit.
```
2019-08-21 14:32:10 ERROR [main] com.example.service.DatabaseConnector - Connection to database failed: java.sql.SQLTimeoutException: Timeout trying to connect to database at jdbc:mysql://db-prod.internal.example.com:3306/appdb
2019-08-21 14:33:15 ERROR [main] com.example.service.DatabaseConnector - Connection to database failed: com.mysql.jdbc.exceptions.jdbc4.CommunicationsException: Communications link failure
2019-08-21 14:34:20 ERROR [main] com.example.service.DatabaseConnector - Connection to database failed: java.net.ConnectException: Connection refused (Connection refused)
2019-08-21 14:35:25 ERROR [main] com.example.service.DatabaseConnector - Connection to database failed: java.sql.SQLTimeoutException: Timeout trying to connect to database at jdbc:mysql://db-prod.internal.example.com:3306/appdb
```

These CV0-004 practice questions are part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style CV0-004 questions with detailed explanations, topic-based practice, mock exams, readiness tracking, and study analytics.