Study Hub / CompTIA Cloud+ (CV0-004) / Domain 1.0
CompTIA Cloud+ (CV0-004) Domain 1.0: Cloud Architecture — Explained
Domain 1.0 is the foundation every cloud question stands on: the deployment and service models, the virtualization underneath, and how cloud networks are built. Get the vocabulary right and the rest of the exam reads fluently.
Deployment and service models
- Deployment models — public (shared provider infrastructure, pay-as-you-go), private (dedicated to one org, on-prem or hosted), hybrid (both, integrated — burst to public, keep sensitive private), community (shared by orgs with common needs).
- Service models — IaaS (rent the infrastructure: VMs, networks, storage — you manage OS up), PaaS (rent the platform: runtime + middleware — you bring code), SaaS (rent the software: you just use it). XaaS extends the pattern to everything.
- The shared responsibility line — moves with the model: IaaS, you own the OS and up; PaaS, the provider owns the runtime; SaaS, you own your data and access. "Who patches the OS?" is the classic model question — the answer depends on the model.
- Cloud characteristics (NIST) — on-demand self-service, broad network access, resource pooling, rapid elasticity, measured service. If a scenario describes these, it's describing cloud.
Virtualization: the engine room
- Hypervisors — Type 1 (bare metal: runs directly on hardware — ESXi, Hyper-V) vs. Type 2 (hosted: runs on an OS — VirtualBox, Workstation). Production cloud is Type 1.
- VM components — virtual CPU, vRAM, virtual disks, virtual NICs — all carved from physical resources by the hypervisor. Overcommit (allocating more virtual than physical) works until everyone needs it at once.
- Containers vs. VMs — VMs virtualize hardware (each has a full OS); containers virtualize the OS (shared kernel, isolated processes). Containers are lighter and faster; VMs isolate more strongly.
- Templates, snapshots, cloning — templates are golden images for new VMs; snapshots are point-in-time states for rollback (not backups!); cloning duplicates a VM. Snapshot chains degrade performance — consolidate them.
Cloud networking
- Virtual networks — VPCs/VNets: your isolated network slice with subnets, route tables, and gateways. Public subnets (internet-facing) vs. private subnets (internal only) is the standard topology.
- Connectivity — VPN (encrypted tunnel over the internet), Direct Connect / ExpressRoute (private dedicated line — consistent performance, higher cost), peering (connect VPCs privately without the internet).
- Load balancing — distribute traffic across instances: Layer 4 (TCP/UDP, fast) vs. Layer 7 (HTTP-aware: path/host routing, TLS termination). Health checks pull failed instances out automatically.
- DNS and CDN — managed DNS (Route 53, Cloud DNS) for naming; CDNs cache content at edge locations for global speed. Together they're the "fast everywhere" combo.
- Network security — security groups (instance-level firewall, stateful), NACLs (subnet-level, stateless), WAF (application-layer attack filtering). Defense in depth, cloud edition.
The must-memorize table: service models
Who manages what in each model.
| Model | You manage | Provider manages | Example |
|---|---|---|---|
| IaaS | OS, middleware, apps, data | Hardware, virtualization, network | EC2 VMs |
| PaaS | Apps and data | Runtime, middleware, OS, hardware | App Service, Cloud Run |
| SaaS | Your data and access | Everything else | Microsoft 365, Salesforce |
Try it: 4 sample questions
Sample questions to check your understanding of this domain. Answers and full reasoning are tucked under each one.
1. A startup wants to deploy a web app without managing servers, runtimes, or patching — they just push code. Which service model fits?
- A. A. IaaS — full control over VMs
- B. B. PaaS — the provider manages runtime and OS; the team ships code
- C. C. SaaS — buy an existing app instead
- D. D. Bare metal colocation
Show answer & reasoning
B. PaaS draws the line at the code: the platform handles runtime, OS, patching, and scaling; developers deploy applications. IaaS (A) would leave them managing servers — the opposite of the ask. "Just push code" → PaaS.
2. A company keeps sensitive data on-premises but bursts web traffic to the public cloud during sales events. Which deployment model is this?
- A. A. Public cloud only
- B. B. Private cloud only
- C. C. Hybrid — integrated private + public, each for what it suits
- D. D. Community cloud
Show answer & reasoning
C. Hybrid = private for the sensitive steady-state, public for elastic burst — integrated, not either/or. The scenario describes exactly the hybrid value proposition: control where it matters, elasticity where it pays.
3. Why are VM snapshots not a backup strategy?
- A. A. Snapshots are too fast to be reliable
- B. B. Snapshots depend on the original VM's disks and chain — lose the base and the chain is worthless; backups are independent copies
- C. C. Snapshots can't be automated
- D. D. Backups are slower
Show answer & reasoning
B. A snapshot is a delta against the original disks, not an independent copy: it's for quick rollback, and long chains hurt performance. True backups are self-contained copies stored separately. "We have snapshots" ≠ "we have backups" — this distinction matters in practice.
4. Traffic to a web tier must be spread across healthy instances, with failed ones automatically removed, routing by URL path. Which solution?
- A. A. A Layer 4 load balancer
- B. B. A Layer 7 (application) load balancer — HTTP-aware routing with health checks
- C. C. A VPN concentrator
- D. D. A NAT gateway
Show answer & reasoning
B. Path-based routing is Layer 7 (HTTP) — only an application load balancer sees URLs. Health checks (all proper LBs) pull dead instances out. L4 (A) balances TCP/UDP blindly; VPN (C) and NAT (D) solve different problems entirely. "Route by path" → L7.
This was one domain. The simulator drills all 6.
This free preview covered Cloud Architecture (Domain 1.0, 23%). Not covered here: Operations (Domain 3.0, 17%); Troubleshooting (Domain 6.0, 12%). Cloud operations and scenario troubleshooting stay in the paid guide and practice bank. The ByteBar Practice Exam Simulator drills every domain with 1,000 exam-style questions — $9.99 one-time unlocks all 28 exams. Prefer to read? The full Cloud+ Study Guide is in the ByteBar shop on Etsy.
Practice Exam Simulator — $9.99 one-time, all 28 exams Full Study Guides on Etsy