CV0-004 Exam Dumps : CompTIA Cloud+ (V4)

Option C is the correct script for shutting down virtual machines that are currently running. It iterates through a list of VMs, checks if the status of each VM is 'running', and if so, proceeds to shut down the VM. The script then prints a message stating that the VM has been stopped. This approach ensures that only VMs that are actively running are targeted for shutdown, optimizing resource utilization and cost savings.

Performing a "docker pull" before executing "docker run" ensures that the latest version of the container base image is used, aligning with the objective of reducing vulnerabilities. This command fetches the latest image version from the repository, ensuring that the container runs the most up-to-date and secure version of the base image. This approach is efficient and requires minimal effort, as it automates the process of maintaining the latest image versions for container deployments.

Within the CompTIA Cloud+ examination scope, understanding management and technical operations in cloud environments, including container management and security, is critical. This includes best practices for maintaining up-to-date container images to minimize vulnerabilities.

Cloud flow logs are the most efficient way to identify suspected C2 activity over HTTPS because they provide network metadata (source/destination IPs, ports, protocol, bytes/packets, accept/deny decisions) at scale with low operational overhead. In the Cloud+ CV0-004 objectives, this aligns with implementing logging/monitoring to support threat detection, incident response, and continuous security validation. While HTTPS encrypts payload contents, flow logs still reveal high-value indicators such as repeated outbound connections to rare destinations, unusual session frequency, unexpected egress from sensitive subnets, and abnormal data transfer patterns—common traits of C2 beaconing.

An inline IPS can detect and block certain threats, but it adds latency, cost, and complexity, and it may be limited by encryption unless TLS inspection is used. Hourly cron jobs are ad hoc, incomplete, and not scalable compared with centralized telemetry. Traffic mirroring enables deep packet inspection, but it generates large volumes of data and is typically used selectively due to cost and performance impact. Therefore, flow logs provide the best efficiency-to-visibility balance for identifying HTTPS-based C2 patterns.