Cloud+ level · Domain 4.0 Security · 19% of the mapped exam

4.1 Explain vulnerability management concepts.

5 topics · 3 quiz questions

In the cloud, vulnerabilities live in VMs, container images, functions and managed-service configurations. The process is the same: scope, find, assess, fix.

Steps

Scanning scope: Deciding what to scan: accounts, VMs, images, functions, IaC templates. Check provider rules on what you may scan.
Identification: Finding vulnerabilities with agent-based, agentless or image scanners.
Assessment: Rating severity in context: exposure to the internet, data sensitivity, exploit availability.
Remediation: Patching, rebuilding images, changing configuration or applying compensating controls.

Common Vulnerabilities and Exposures (CVEs)

Common Vulnerabilities and Exposures (CVEs): Public identifiers for known vulnerabilities that scanners and advisories reference.

Check your understanding

Loading quiz…

< 3.4 previous 4.2 next >

Original CoreQ Academy material, mapped to objective 4.1 of the publicly available CompTIA Cloud+ CV0-004 exam objectives (Exam objectives V4, document version 5.0). Not affiliated with or endorsed by CompTIA. Contains no exam questions.