Cloud Applications

Network and Security· 3 CUs· D318

Certification examDue May 14, 2027

Lessons0 / 20

Cloud architecture (23%)

Service models, shared responsibility, availability

14 min

Model	Customer manages	Provider manages	Example
IaaS	OS, runtime, apps, data	Facilities, hardware, hypervisor	Amazon EC2, Azure VMs
PaaS	Code, data, app settings	Above plus OS, runtime, patching	Azure App Service, Google App Engine
SaaS	Users, data, settings	The whole application	Microsoft 365, Salesforce
FaaS (serverless)	Functions and their triggers	Servers, runtime, scaling; billed per execution	AWS Lambda, Azure Functions

Shared responsibility: the provider secures the cloud (facilities, hardware, hypervisor); the customer secures what it puts in the cloud. Data, identities and access are always the customer's.

A public storage bucket or a weak IAM policy is the customer's fault in every model, including SaaS.

Term	Meaning
Region	A geographic area with its own set of data centers
Availability zone (AZ)	One or more isolated data centers in a region; spread instances across AZs to survive a data-center failure
Cloud bursting	A private or on-premises workload overflows into public cloud at peak
Edge computing	Processing near the data source to cut latency
Multicloud tenancy	Workloads spread across two or more providers

DR term	Meaning
RPO	Maximum acceptable data loss, measured in time (how old the last good copy may be)
RTO	Maximum acceptable time to restore service
Hot site	Running and current; failover in minutes; highest cost
Warm site	Hardware ready, data somewhat behind; hours
Cold site	Space and power only; days; lowest cost

RPO looks back (data). RTO looks forward (downtime).

Word bank

All definitions →

RPO: Recovery point objective: how much data, in time, may be lost.
RTO: Recovery time objective: how long service may be down.
Shared responsibility model: Split of security duties between provider and customer, by service model.

Knowledge check

A team wants to deploy web code without managing an OS or patches. Which model?

A business can lose at most 15 minutes of transactions. Which value is 15 minutes?

Which is always the customer's responsibility?

Cloud networking

To pass

Pass CompTIA Cloud+ (CV0-004)

CV0-004 (V4) is current; V5 is in draft with no launch date.

Content

Cloud architecture23%
Deployment19%
Security19%
Operations17%
Troubleshooting12%
DevOps fundamentals10%

Exam details

Questions

Up to 90

Time

90 min

Pass

750 / 900

Format: Multiple choice + performance-based
Where: Pearson VUE, center or online
Cost/voucher: WGU voucher
Attempts: 2

Best tips

Tell deployment strategies apart: blue-green switches traffic to a full second environment, canary sends a small share first, rolling updates in batches, in-place updates live servers.
CompTIA CV0-004 objectives, 2.2
Migration strategies: rehost lifts and shifts unchanged, replatform makes small changes such as a managed database, refactor and re-architect redesign for cloud-native, retain keeps, retire shuts down.
CompTIA CV0-004 objectives, 2.3
RTO is how long a service may be down; RPO is how much data, measured in time, may be lost. Hot sites meet the tightest RTO, cold sites the loosest.
CompTIA CV0-004 objectives, 1.2
Full backs up everything; incremental copies changes since the last backup of any kind; differential copies changes since the last full, so restores need the full plus one differential.
CompTIA CV0-004 objectives, 3.3
Horizontal scaling adds instances (scale out); vertical scaling makes one instance bigger (scale up). Scaling triggers can be trending, load, event, scheduled or manual.
CompTIA CV0-004 objectives, 3.2
Object storage suits backups and media reached by API, block storage suits VM disks and databases, file storage suits shared folders; colder tiers cost less but retrieve slower.
CompTIA CV0-004 objectives, 1.4
Expect code-block questions: read JSON and YAML templates for variables, conditionals and data types, and know drift detection finds resources changed outside the code.
Reddit pass report, CV0-004, Jan 2026
Work CIDR math by hand: 10.0.0.0/16 already contains 10.0.5.0/24, and overlapping ranges cause the network overlap problems the troubleshooting domain tests.
Reddit pass report, CV0-004, Jan 2026

Certification exam

CompTIA Cloud+

CV0-004

Book the examFri, Apr 30
Start studyingTue, May 4
Certification examFri, May 14

Tips

Book only through WGU's voucher. WGU's IT certifications page: the voucher covers two attempts.
CompTIA retakes: no wait before the second attempt; 14 days before the third.
Use the CV0-004 objectives PDF as the checklist, acronym list included.
Questions are vendor-neutral: learn the generic term (VPC, security group, object storage) plus one provider's name for it.
Performance-based questions come first and take longest. Flag, answer the multiple-choice, return.
Review subnetting, ports and IAM from Network+ and Security+; Cloud+ assumes them.
Build once in a free-tier account: VPC with public and private subnets, VM behind a load balancer, bucket with a lifecycle rule, least-privilege role, budget alert. Then the same in Terraform. Delete everything after.
Troubleshooting questions: find what changed, then the least disruptive fix.
Confirm the exam version on the voucher before booking; V5 is in draft.

Competencies

The learner deploys cloud solutions for storage, networking, and security.
The learner designs cloud infrastructure and services.
The learner manages cloud operations with processes, procedures, and improvements.
The learner recommends cloud security solutions, policies, and procedures.
The learner troubleshoots cloud services issues in networking, security, and performance.

Resources

Study hours

90 h

Lessons

3 h 54 min

SourcesUpdated Nov 4, 2026