CV0-004 Domain 2: Cloud Security

Two designs were proposed. Design A would scan images for vulnerabilities. Design B would manage API keys securely. The team must pick the approach aligned with vendor best practices. Which choice is correct?

Multiple choice — select one answer

Answer choices

  1. a. VPC/VNet subnets and security groups
  2. b. Pipeline scanning before deploy
  3. c. Provider-managed encryption and customer keys
  4. d. Secrets vault with rotation

Architectural breakdown & explanation

Image scanning catches known issues. Compare with Secrets vault with rotation: Secrets management reduces exposure.

Correct answer(s): b. Pipeline scanning before deploy

Exam domain: Domain 2: Cloud Security (25% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the CompTIA Cloud+ bank. Run a full timed practice exam with domain-weighted random questions in your browser.