CompTIA CV0-004 Exam - Topic 6 Question 28 Discussion

Actual exam question for CompTIA's CV0-004 exam

Question #: 28
Topic #: 6

A cloud service provider just launched a new serverless service that is compliant with all security regulations. A company deployed its code using the service, and the company's application was hacked due to leaked credentials. Which of the following is responsible?

ACustomer

BCloud service provider

CHacker

DCode repository

Show Suggested Answer

Suggested Answer: A

Comprehensive and Detailed Step-by-Step

A . Customer: Under the shared responsibility model, customers are responsible for securing their code and credentials in cloud environments.

B . Cloud service provider: Responsible for securing the underlying infrastructure, not customer-deployed applications or credentials.

C . Hacker: Exploited the breach but isn't directly responsible for security lapses.

D . Code repository: Doesn't inherently cause the issue unless mismanaged by the customer.

CompTIA Cloud+ CV0-004 Study Guide, Objective 4.2: Understand the shared responsibility model in cloud security.

by Maynard at Jan 26, 2025, 07:24 AM

Limited Time Offer

25%

Off

Get Premium CV0-004 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Stephaine

3 months ago

It's all about how the customer manages their security, though.

upvoted 0 times

...

Moon

3 months ago

The hacker is the one who exploited the situation, right?

upvoted 0 times

...

Merilyn

3 months ago

Wait, how did the credentials even get leaked? That's surprising!

upvoted 0 times

...

Alexis

4 months ago

I think the cloud provider shares some responsibility too.

upvoted 0 times

...

Casey

4 months ago

Definitely the customer’s fault for leaking credentials.

upvoted 0 times

...

Giuseppe

4 months ago

I wonder if the code repository could be implicated if it was where the credentials were leaked from? That seems like a tricky part of the question.

upvoted 0 times

...

Celestina

4 months ago

This reminds me of a practice question where the focus was on credential management. I think it leans towards the customer being at fault here.

upvoted 0 times

...

Delsie

4 months ago

I'm not entirely sure, but I feel like the cloud service provider should have some responsibility too, especially since they handle security regulations.

upvoted 0 times

...

Mirta

5 months ago

I think the customer is responsible for managing their own credentials, right? I remember reading about shared responsibility models.

upvoted 0 times

...

Lelia

5 months ago

I'm a bit confused on this one. If the service is supposed to be secure, then how did the hacker get in? I'm not sure if I should blame the customer or the cloud provider. I'll have to review the details again before answering.

upvoted 0 times

...

Gretchen

5 months ago

Okay, let's see. The customer deployed the code, so they're responsible for securing their own credentials. But the cloud provider is the one who launched the new service, so they might have some liability too. I'm leaning towards A, but I'll double-check my reasoning.

upvoted 0 times

...

Veronique

5 months ago

Hmm, I'm not sure about this one. The question says the service is compliant with security regulations, so I'm wondering if the cloud provider might be responsible. I'll have to think this through a bit more.

upvoted 0 times

...

Fausto

5 months ago

This one seems pretty straightforward. The customer is responsible for securing their own credentials, so I'm going with A.

upvoted 0 times

...

Buffy

1 year ago

I believe it's a combination of the customer and the cloud service provider's responsibility.

upvoted 0 times

...

Desirae

1 year ago

I think the hacker is to blame for the security breach.

upvoted 0 times

...

Rickie

1 year ago

I disagree, I believe it's the cloud service provider's fault.

upvoted 0 times

...

Sophia

1 year ago

Definitely the hacker's fault. They're the ones who actually broke in and stole the credentials. The cloud service provider can't be held responsible for that.

upvoted 0 times