hardMultiple SelectObjective-mapped
CV0-004 Practice Question: Which THREE elements are required for a complete…
Which THREE elements are required for a complete key lifecycle management strategy in a cloud environment? (Choose three.)
⚠ Common exam trap
CompTIA often tests the distinction between the mandatory lifecycle phases (generation, rotation, destruction) and supporting security controls (access control, backup) to trap candidates who confuse operational best practices with the required lifecycle stages.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Secure key generation
Secure key generation is the foundational first step in a key lifecycle management strategy. In a cloud environment, keys must be generated using a FIPS 140-2 validated hardware security module (HSM) or a cloud provider's equivalent (e.g., AWS CloudHSM, Azure Key Vault Premium) to ensure cryptographic strength and prevent exposure of the private key material during creation.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Secure key generation
Why this is correct
Keys must be generated securely, often from a hardware security module or using cryptographically sound methods.
- ✓
Key destruction
Why this is correct
Securely destroying keys when no longer needed is crucial to prevent future compromise.
- ✗
Key backup and recovery
Why it's wrong here
Backup is a contingency measure, not a lifecycle stage.
- ✓
Key rotation
Why this is correct
Rotating keys regularly limits the impact of a compromised key.
- ✗
Key access control
Why it's wrong here
Access control is part of IAM, not the key lifecycle itself.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CV0-004 question from scratch — 977 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CV0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CV0-004 exam.