CV0-004 Exam Dumps : CompTIA Cloud+ (2025)

Discretionary Access Control (DAC) and Role-Based Access Control (RBAC) are effective methods for granting authorization based on system classification levels. DAC allows resource owners to grant access rights, making it flexible for environments with varying classification levels. RBAC assigns permissions based on roles within an organization, aligning access rights with the user's job functions and ensuring that users access only what is necessary for their role, which can be mapped to system classifications.

CompTIA Cloud+ content covers various access control models, emphasizing the importance of implementing appropriate security measures that align with organizational policies and classification levels to ensure secure and authorized access to cloud systems.

Using CIS-hardened images (A): Center for Internet Security (CIS) images are pre-hardened and configured for best practices, reducing vulnerabilities.

Using watermarked images (B): Watermarking does not contribute to security hardening.

Using digitally signed images (C): Verifies authenticity but does not address vulnerabilities within the container.

Using images that have an application firewall (D): Firewalls offer runtime protection but don’t secure the container image itself.

When unable to modify a protected branch directly, the recommended approach is to create a pull request. This allows changes to be reviewed and approved by authorized personnel before being merged into the protected branch, maintaining code integrity and compliance with the project's workflow and policies.