CompTIA Cloud+ CV0-004 Certification Cheat Sheet 2026 | Complete Study Guide - FlashGenius

Free comprehensive CompTIA Cloud+ CV0-004 cheat sheet covering all 6 domains: Cloud Architecture (23%), Deployment (19%), Security (19%), Operations (17%), DevOps Fundamentals (10%), and Troubleshooting (12%). Mobile-friendly swipable cards with service models, deployment patterns, security controls, and troubleshooting guides for CompTIA certification prep.

This free interactive cheat sheet from FlashGenius is a quick-reference study guide with swipeable cards you can review on any device — no signup required.

Cloud Architecture — Domain 1 - 23% of Exam (~21 Questions)

Service Models

• IaaS (Infrastructure as a Service): Virtual machines, storage, networks - highest customer control
• PaaS (Platform as a Service): Development platforms, databases, runtime environments
• SaaS (Software as a Service): Complete applications accessible via internet - lowest customer control
• XaaS (Anything as a Service): Emerging service models like FaaS, DaaS, BaaS

Deployment Models

• Public Cloud: Shared infrastructure, cost-effective, high scalability, less control
• Private Cloud: Dedicated infrastructure, higher security, compliance, higher cost
• Hybrid Cloud: Mix of public/private, workload flexibility, complex management
• Community Cloud: Shared by organizations with common requirements

Architecture Patterns

• High Availability: Multi-AZ deployments, load balancers, auto-scaling groups
• Fault Tolerance: Redundant components, failover mechanisms, disaster recovery
• Scalability: Horizontal scaling (scale-out), vertical scaling (scale-up)
• Elasticity: Dynamic resource allocation based on demand

Storage Types

• Object Storage: Web applications, content distribution, backup and archiving
• Block Storage: High-performance databases, file systems, boot volumes
• File Storage: Shared file systems, content repositories, web serving

Shared Responsibility

• IaaS: OS, applications, data, runtime, middleware — Infrastructure, virtualization, physical security
• PaaS: Applications and data — Runtime, middleware, OS, infrastructure
• SaaS: Data configuration and access controls — Everything else including applications

Availability Concepts

• Regions: Geographic locations with multiple availability zones
• Availability Zones: Isolated data centers within a region
• Edge Computing: Processing data closer to source for reduced latency
• Cloud Bursting: Scaling to public cloud when private resources are exhausted

Disaster Recovery

• RTO (Recovery Time Objective): Maximum acceptable downtime after a disaster
• RPO (Recovery Point Objective): Maximum acceptable data loss measured in time
• Hot Site: Fully operational backup site with real-time data replication
• Warm Site: Partially equipped site requiring some setup time
• Cold Site: Empty site with basic infrastructure requiring full setup

Networking Concepts

• VPC Peering: Direct network connection between two VPCs
• Transit Gateway: Central hub for connecting multiple VPCs and on-premises networks
• CDN: Distributed network of servers for content delivery
• Load Balancers: Application (Layer 7), Network (Layer 4)

Cost Considerations

• Pay-as-you-go: Pay only for resources consumed
• Reserved Instances: Upfront payment for discounted long-term usage
• Spot Instances: Bid on unused capacity at lower prices
• Resource Tagging: Organize and track costs by departments/projects

Deployment — Domain 2 - 19% of Exam (~17 Questions)

Automation Tools

• Infrastructure as Code (IaC): Terraform, AWS CloudFormation, Azure Resource Manager
• Configuration Management: Ansible, Chef, Puppet, SaltStack
• Container Orchestration: Kubernetes, Docker Swarm, Amazon ECS
• CI/CD Pipelines: Jenkins, GitLab CI, AWS CodePipeline, Azure DevOps

Migration Strategies

• Rehosting (Lift and Shift): Move applications as-is to cloud with minimal changes
• Replatforming: Make minimal cloud optimizations without changing core architecture
• Refactoring/Re-architecting: Redesign applications to be cloud-native
• Repurchasing: Move to cloud-based SaaS solutions
• Retiring: Decommission applications no longer needed
• Retaining: Keep applications on-premises for specific reasons

Virtualization

• Type 1 Hypervisor (Bare Metal): VMware vSphere, Microsoft Hyper-V, Xen
• Type 2 Hypervisor (Hosted): VMware Workstation, Oracle VirtualBox
• Container Technology: Docker, lightweight virtualization, shared OS kernel
• Serverless Computing: Function as a Service (FaaS), AWS Lambda, Azure Functions

Template Management

• Golden images for consistent deployments
• Version control for infrastructure templates
• Automated testing of deployment templates
• Template libraries and reusable components

Deployment Strategies

• Blue-Green: Switch between two identical environments instantly
• Canary: Gradually route traffic to new version
• Rolling: Incrementally update instances with zero downtime
• In-Place: Update existing instances directly (causes downtime)

Container Concepts

• Orchestration: Kubernetes, Docker Swarm, Amazon ECS
• Port Mapping: Map container ports to host ports
• Persistent Volumes: Storage that survives container restarts
• Image Registries: Docker Hub, AWS ECR, Azure ACR

Cloud Native Design

• Microservices: Decompose applications into small, independent services
• Loosely Coupled: Services communicate through APIs, not direct calls
• Service Discovery: Automatic detection and connection to services
• Managed Services: AWS RDS, Azure SQL, Google Cloud SQL

Security — Domain 3 - 19% of Exam (~17 Questions)

Identity Access

• Identity and Access Management (IAM): Users, groups, roles, policies, permissions
• Multi-Factor Authentication (MFA): Something you know, have, are - TOTP, SMS, biometrics
• Single Sign-On (SSO): SAML, OAuth 2.0, OpenID Connect
• Role-Based Access Control (RBAC): Least privilege access based on job functions

Encryption

• Data at Rest: AES-256, database encryption, encrypted storage volumes
• Data in Transit: TLS/SSL, VPN, encrypted API communications
• Data in Processing: Homomorphic encryption, secure enclaves
• Key Management: HSM, KMS, key rotation, key escrow

Network Security

• Virtual Private Cloud (VPC): Network isolation, subnets, route tables
• Security Groups: Instance-level firewall rules, stateful filtering
• Network ACLs: Subnet-level firewall rules, stateless filtering
• VPN and Direct Connect: Secure hybrid cloud connectivity

Compliance

• SOC 2: Security, availability, processing integrity, confidentiality
• ISO 27001: Information security management systems
• GDPR: Data privacy and protection regulations
• HIPAA: Healthcare data protection requirements
• PCI DSS: Payment card industry data security

Security Controls

• WAF (Web Application Firewall): Filter and monitor HTTP traffic to applications
• DLP (Data Loss Prevention): Monitor and prevent unauthorized data exfiltration
• IPS/IDS: Intrusion Prevention/Detection for network monitoring
• Endpoint Protection: Antimalware and behavioral analysis on devices

Vulnerability Management

• Scanning Scope: Define what systems and assets to scan
• Identification: Discover vulnerabilities using automated tools
• Assessment: Analyze risk level and potential impact
• Remediation: Apply patches, updates, or mitigating controls

Common Attacks

• Cryptojacking: Unauthorized cryptocurrency mining on cloud resources
• Zombie Instances: Compromised instances used for botnets or attacks
• Metadata Service Attacks: Exploitation of cloud instance metadata for credentials
• DDoS: Distributed denial of service overwhelming resources

Zero Trust

• Never Trust, Always Verify: Continuous authentication and authorization
• Least Privilege: Minimal access rights for users and systems
• Assume Breach: Monitor and detect malicious activity continuously
• Micro-segmentation: Isolate workloads and limit lateral movement

Operations — Domain 4 - 17% of Exam (~15 Questions)

Lifecycle

• Planning: Capacity planning, resource forecasting, architecture design
• Provisioning: Resource allocation, configuration deployment, service activation
• Monitoring: Performance tracking, health checks, alerting systems
• Optimization: Performance tuning, cost optimization, right-sizing
• Deprovisioning: Resource cleanup, data archival, cost savings

Monitoring

• Performance Metrics: CPU, memory, disk I/O, network throughput
• Availability Metrics: Uptime, response time, error rates
• Cost Metrics: Resource utilization, spend analysis, budget alerts
• Security Metrics: Failed login attempts, security events, compliance status

Backup

• Full Backup: Complete data copy, longest time, highest storage
• Incremental Backup: Only changed data since last backup
• Differential Backup: Changed data since last full backup
• Snapshot Backup: Point-in-time copy, fast creation and recovery

Cost Optimization

• Right-sizing instances based on actual usage
• Reserved instances for predictable workloads
• Spot instances for fault-tolerant applications
• Automated scaling policies and scheduling
• Storage lifecycle management and archiving

DevOps Fundamentals — Domain 5 - 10% of Exam (~9 Questions)

Cicd Pipeline

• Source Control: Git, SVN, centralized version control systems
• Build: Code compilation, dependency management, artifact creation
• Test: Unit testing, integration testing, security scanning
• Deploy: Blue-green, rolling, canary deployments
• Monitor: Application performance, user experience, error tracking

Testing

• Unit Testing: Individual components or functions
• Integration Testing: Component interactions and interfaces
• System Testing: Complete application functionality
• Performance Testing: Load, stress, and scalability testing
• Security Testing: Vulnerability scanning, penetration testing

Culture

• Collaboration: Cross-functional teams, shared responsibilities
• Automation: Minimize manual processes, reduce human error
• Continuous Improvement: Iterative development, feedback loops
• Monitoring & Logging: Observability, proactive issue detection

Agile Methodologies

• Scrum framework with sprints and ceremonies
• Kanban boards for workflow visualization
• Lean principles for waste elimination
• Continuous integration and delivery practices

Dev Ops Tools

• Ansible: Configuration management and automation
• Docker: Containerization and application packaging
• Kubernetes: Container orchestration and management
• Terraform: Infrastructure as Code (IaC)
• Jenkins: CI/CD pipeline automation
• Git: Version control and source code management
• ELK Stack: Logging and monitoring (Elasticsearch, Logstash, Kibana)
• Grafana: Metrics visualization and dashboards

Integration Concepts

• REST APIs: Representational State Transfer for web services
• SOAP: Simple Object Access Protocol for structured data exchange
• GraphQL: Query language for APIs with flexible data fetching
• WebSockets: Real-time bidirectional communication
• Event-Driven Architecture: Loose coupling through event publishing/consuming

Troubleshooting — Domain 6 - 12% of Exam (~11 Questions)

Methodology

• Identify the Problem: Gather information, define scope, understand impact
• Establish Theory: Probable cause analysis, hypothesis formation
• Test the Theory: Validate hypothesis, gather evidence
• Create Action Plan: Document solution, identify required resources
• Implement Solution: Execute plan, monitor implementation
• Verify Functionality: Test resolution, confirm system operation
• Document Findings: Record solution, update knowledge base

Common Issues

• Performance: Slow response, high latency, resource exhaustion
• Connectivity: Network timeouts, DNS resolution, firewall blocks
• Authentication: Login failures, permission denied, token expiration
• Application: Service crashes, dependency failures, configuration errors

Tools And Techniques

• Log Analysis: Application logs, system logs, audit trails
• Network Tools: ping, traceroute, nslookup, netstat, wireshark
• Performance Monitoring: CloudWatch, Azure Monitor, application metrics
• Security Scanning: Vulnerability scanners, penetration testing tools

Escalation

• Document all troubleshooting steps taken
• Escalate to appropriate technical teams
• Provide detailed problem description and impact
• Follow established incident management procedures
• Maintain communication with stakeholders

Network Troubleshooting

• DNS Resolution: Domain name lookup failures, slow website loading
• DHCP Problems: IP address assignment failures, network connectivity loss
• Routing Issues: Network unreachable, incorrect packet paths
• Bandwidth/Latency: Slow data transfer, high response times

Deployment Troubleshooting

• Resource Limits: Out of memory, CPU throttling, disk space full
• API Throttling: Rate limit exceeded, service unavailable errors
• Permission Issues: Access denied, unauthorized operation errors
• Compatibility: Version conflicts, deprecated API usage

Security Troubleshooting

• Authentication Failures: Login rejected, credential validation errors
• Cipher Suite Issues: SSL/TLS handshake failures, weak encryption
• Privilege Escalation: Unauthorized access, elevated permissions gained
• Certificate Problems: Expired certificates, trust chain errors

Open the interactive cheat sheet | All 50+ Free Certification Cheat Sheets | Free Practice Tests