CompTIA Cloud+ Practice Exam: Test Your Knowledge 2025

A cloud administrator needs to design a solution that ensures application availability across multiple geographic regions. The application must remain accessible even if an entire region becomes unavailable. Which cloud architecture concept should be implemented?

An organization is migrating legacy applications to the cloud and wants to minimize changes to existing code while gaining cloud benefits. Which cloud service model would be MOST appropriate?

A company is designing a microservices architecture for a cloud-native application. The architecture requires service discovery, load balancing, and automated scaling. Which combination of technologies would BEST support this requirement?

A cloud security team needs to implement a defense-in-depth strategy for protecting sensitive data. Which approach represents the BEST implementation of this security principle?

An administrator discovers that an S3-compatible object storage bucket containing customer data has been accidentally configured with public read access. What should be the FIRST action taken to remediate this security incident?

A company must comply with regulations requiring encryption key management where the cloud provider cannot access the encryption keys. Which key management approach satisfies this requirement?

A security audit reveals that several cloud resources are not compliant with the organization's tagging policy, making cost allocation difficult. What is the MOST effective preventive control to enforce tagging compliance going forward?

A development team is deploying a containerized application using an infrastructure-as-code approach. The deployment must be repeatable, version-controlled, and support rollback capabilities. Which deployment methodology BEST meets these requirements?

An organization needs to deploy a three-tier web application consisting of a web layer, application layer, and database layer. Which network design provides the BEST security posture?

A company is implementing a CI/CD pipeline for cloud deployments. The pipeline must automatically test infrastructure changes before applying them to production. Which approach should be implemented?

An application deployment requires specific compute instances with GPU capabilities for machine learning workloads. During deployment, the provisioning fails with an error indicating insufficient capacity. What is the MOST likely cause and solution?

A company needs to migrate a 50TB database to the cloud with minimal downtime. The network connection provides 100Mbps bandwidth. Which migration strategy would be MOST efficient?

A development team wants to implement immutable infrastructure for their cloud deployments. What does this approach entail?

A cloud administrator notices that several virtual machines are consistently running at 10% CPU utilization and 20% memory utilization. What optimization should be implemented?

An organization's cloud bill has increased by 200% over the past month. Which approach should be used to investigate and address this cost increase?

A company needs to implement a backup strategy for critical cloud-based virtual machines. Compliance requirements mandate 7-year retention for some data. Which backup approach BEST balances cost and compliance?

A cloud environment uses multiple accounts for different departments. The security team needs centralized visibility into all security events across accounts. What solution should be implemented?

Users report that a web application is intermittently returning 504 Gateway Timeout errors during peak hours. The application runs behind a load balancer with multiple backend instances. What is the MOST likely cause?

A newly deployed cloud application cannot connect to a managed database service. The application and database are in the same virtual private cloud but different subnets. What should be checked FIRST?

An application deployed across multiple availability zones experiences a complete outage. Investigation reveals that a recent configuration change was deployed simultaneously to all zones. What architectural principle was violated, and what should be implemented?