CompTIA Cloud+ (CV0-004) Study Guide: Format, Domains, Cost, and How to Pass

CompTIA Cloud+ (CV0-004) is a vendor-neutral certification that validates your ability to design, deploy, secure, operate, and troubleshoot cloud infrastructure — without tying you to AWS, Azure, or Google Cloud. The exam gives you 90 minutes to answer a maximum of 90 questions (a mix of multiple-choice and performance-based questions), and you need 750 on a 900-point scale to pass. The voucher costs $399 after CompTIA’s May 2026 price change, and you can sit the exam at a Pearson VUE test center or online through OnVUE. This guide walks through every domain, how to register, and a six-week plan that gets you to a passing score.

What the Cloud+ certification is (and who it’s for)

Cloud+ sits in an unusual and useful spot in the certification landscape. Fundamentals-level cloud certs (AZ-900, AWS Cloud Practitioner) test whether you can define cloud concepts. Vendor associate certs (AZ-104, AWS Solutions Architect Associate) test whether you can drive one provider’s console. Cloud+ tests something different: whether you can reason about cloud infrastructure as an engineering discipline — deployment strategies, resiliency design, security architecture, and systematic troubleshooting — in terms that apply to any provider.

CompTIA recommends 2–3 years of experience in systems administration or networking before attempting CV0-004. That’s a guideline, not a gate — nothing stops you from registering earlier — but the exam assumes you already know what a subnet, a hypervisor, and a load balancer are. If those are new words, do Network+ first. Cloud+ questions rarely ask “what is X?”; they describe an operational situation and ask which option best satisfies a requirement, which rewards people who have actually run infrastructure or trained hard on scenario-style practice.

The certification is a strong fit for cloud administrators, systems engineers moving into cloud roles, and network engineers whose environments are migrating off-premises. Because it’s vendor-neutral, it signals transferable judgment rather than product familiarity — valuable in multicloud shops and in government or DoD environments where CompTIA certifications carry formal weight.

CV0-004 exam format at a glance

Detail	CV0-004
Questions	Maximum of 90 (multiple-choice + performance-based)
Time limit	90 minutes
Passing score	750 on a scale of 100–900
Voucher price	$399 (raised in the May 2026 CompTIA price change)
Delivery	Pearson VUE test center or OnVUE online proctoring
Languages	English and Japanese
Recommended experience	2–3 years in systems administration or networking

Two format details matter for pacing. First, “maximum of 90 questions” means your form may have fewer — but plan for 90, which gives you exactly one minute per question. Second, performance-based questions (PBQs) — interactive items where you build a deployment order, complete a configuration table, or classify statements — usually appear at the front of the exam and eat far more than a minute each. The standard tactic: if a PBQ isn’t unfolding quickly, flag it, skip it, clear the multiple-choice items, and come back with the time you banked.

The six domains, in depth

CV0-004 spreads its objectives across six domains. Here they are with their official weights, plus what each one actually asks of you and where to focus.

Cloud Architecture — 23%

The heaviest domain covers the conceptual foundation: deployment models, service models, capacity and resiliency design, and evolving technologies.

You need the deployment models cold — not just definitions, but their operational consequences. Public cloud brings multitenancy, pay-as-you-go billing, and noisy-neighbor risk; the mechanics are covered in the public cloud deployment model. Private cloud trades elasticity for control and shifts spending toward capital expenditure; the decision framework — CapEx vs OpEx, compliance drivers, migration cost traps — is in private cloud vs public cloud. Hybrid and community models combine these building blocks, and the exam expects you to pick the right one from a scenario’s constraints.

Service models get the same scenario treatment. Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS) differ in where the responsibility line sits between you and the provider, and the exam loves asking which model fits a team’s constraints. The PaaS boundary — what the platform manages so your developers don’t have to — is the one candidates most often blur; what PaaS actually manages draws it precisely.

Architecture also owns the regulatory dimension: where data physically lives and which laws attach to it. Data sovereignty, residency requirements, and the way regions and backup placement interact with frameworks like the GDPR (General Data Protection Regulation) and PCI DSS (Payment Card Industry Data Security Standard) are covered in data sovereignty and compliance in the cloud. Finally, the “evolving technologies” objective pulls in artificial intelligence, machine learning, and generative AI risks — a small but reliably tested corner mapped out in AI in cloud computing.

Deployment — 19%

Deployment is where CV0-004 gets genuinely opinionated, and in the current exam it leans hard on release strategies — how you push new versions of a workload into production while managing risk, cost, and downtime. Four named strategies carry the weight:

• Blue-green runs two identical production environments and cuts all traffic over at once, giving near-zero downtime and instant rollback at the price of doubled infrastructure — with a well-known trap around shared databases. Full mechanics in blue-green deployment.
• Canary releases the new version to a small slice of real users first, watches monitoring for regressions, then progressively widens exposure — the small-blast-radius option, detailed in canary deployment.
• Rolling updates servers in batches within the existing fleet, avoiding doubled infrastructure but accepting a window where two versions serve traffic side by side; see rolling deployment.
• In-place overwrites the running environment directly, accepting downtime and relying on backups or snapshots as the rollback path — cheapest and simplest, appropriate more often than its reputation suggests, as in-place deployment explains.

The exam’s favorite move is making you choose among all four given a scenario’s risk tolerance, budget, and downtime constraints — the comparison logic is consolidated in choosing a deployment strategy. Beyond release strategies, this domain covers provisioning compute, storage, and network resources, and migration types (physical-to-virtual, storage migrations, database migrations).

Operations — 17%

Operations covers the day-2 work: monitoring, logging, alerting, lifecycle management, patching, backup and restore, and cost optimization. Expect questions about right-sizing instances against utilization data, configuring alert thresholds that catch problems without flooding the on-call rotation, backup types (full, incremental, differential, snapshots) and how RPO (recovery point objective) and RTO (recovery time objective) drive backup design, and scheduled maintenance practices like patch windows and change management. The math here is light but real — you should be able to reason about how often backups must run to meet a stated RPO.

Security — 19%

Cloud+ security is infrastructure-flavored rather than policy-flavored. Core territory: identity and access management (least privilege, role-based access control, federation, multifactor authentication), encryption at rest and in transit, network security controls (security groups, network ACLs, microsegmentation), and the shared responsibility model — which security tasks stay yours under IaaS vs PaaS vs SaaS.

Detection and prevention systems get specific attention: the difference between an intrusion detection system (IDS) and an intrusion prevention system (IPS), host-based vs network-based sensor placement, signature vs anomaly detection, and the latency and failure trade-offs of putting a device inline with traffic. Those distinctions — which the exam tests with placement scenarios — are worked through in IDS and IPS in the cloud. Round it out with hardening basics: disabling unused services, key rotation, and vulnerability scanning vs penetration testing.

DevOps Fundamentals — 10%

The newest domain, added in CV0-004, covers infrastructure as code (IaC), continuous integration and continuous delivery/deployment (CI/CD), version control concepts, and pipeline design. The smallest weight, but don’t skip it: its questions interlock with the Deployment domain. A CI/CD pipeline is the machinery that executes a blue-green cutover or advances a canary, and automated rollback triggered by failed health checks is a favorite test point that lives at the intersection of both domains. Know what declarative IaC means, why idempotency matters, and what each pipeline stage (build, test, deploy) contributes.

Troubleshooting — 12%

Troubleshooting questions present a broken system — instances that won’t reach the internet, TLS handshake failures, exhausted storage, misapplied security group rules — and ask for the most likely cause or the correct next diagnostic step. The domain rewards methodology: identify the problem, establish a theory, test it, then implement and verify. Connectivity chains (DNS resolution → routing → security rules → service state) are the most common skeleton. Compliance-adjacent failures show up too, like a payment workload failing an audit because a deprecated TLS version is still accepted.

How to register for CV0-004

Registration is straightforward but has a few decision points:

1. Buy the voucher. Purchase directly from the CompTIA store or through a training partner. The retail price is $399 as of the May 2026 price change — budget for a retake voucher only if your practice scores are borderline (more on that below). Bundles that include a retake or training materials exist at higher price points.
2. Create a Pearson VUE account and link it to your CompTIA candidate record. Your legal name must exactly match the ID you’ll present on exam day.
3. Choose your delivery mode. A Pearson VUE test center gives you a controlled environment and zero responsibility for technical conditions. OnVUE online proctoring lets you test from home but makes you responsible for a stable connection, a webcam, and a room that passes the proctor’s scan — no second monitors, no papers, no interruptions. If your home setup is questionable, the test center is the safer choice.
4. Schedule the slot. Pick a date far enough out to finish your study plan, close enough to create urgency. Rescheduling is free if you do it more than 24 hours ahead.
5. On exam day, arrive 30 minutes early (test center) or start check-in 30 minutes early (OnVUE) with a valid government-issued photo ID.

A six-week study plan

This plan assumes roughly 8–10 hours per week and some existing IT experience. Compress it if you’re already working in cloud operations; stretch it if the fundamentals are shaky.

Week 1 — Cloud Architecture I. Deployment models and service models. Learn public, private, hybrid, and community models by their consequences (billing model, tenancy, control), not their definitions. Nail the IaaS/PaaS/SaaS responsibility boundaries. Do a short practice set at week’s end and log every miss.

Week 2 — Cloud Architecture II + DevOps Fundamentals. Capacity planning, high availability and resiliency concepts, data sovereignty and compliance, and evolving technologies (AI/ML). Then cover IaC, CI/CD, and version control. Pairing these works because DevOps material is compact and architectural context makes it stick.

Week 3 — Deployment. The heart of the exam’s scenario questions. Master all four release strategies until you can produce, from memory, each one’s rollback mechanism, cost profile, downtime profile, and failure blast radius. Then drill choice scenarios: given constraints, which strategy fits? Cover migrations and provisioning after the strategies are solid.

Week 4 — Security. IAM, encryption, network controls, shared responsibility, IDS/IPS placement and detection methods, hardening. Practice mapping every control to the threat it addresses — the exam asks “which control satisfies this requirement,” and matching by purpose beats memorizing lists.

Week 5 — Operations + Troubleshooting. Monitoring, alerting, backup types, RPO/RTO math, cost optimization, patching. Then troubleshooting methodology and connectivity chains. Take a full-length timed practice exam at the end of this week and break the results down by domain.

Week 6 — Targeted remediation + test conditions. Spend the first half of the week exclusively on your two weakest domains from the week-5 exam. Take a second full-length timed exam mid-week. If you’re consistently scoring in the low 80s percent or better across domains, you’re ready; if one domain lags badly, spend the remaining days there. The final two days are for light review only — flashcards, your error log, and sleep.

Throughout all six weeks, keep an error log: every practice question you miss, the concept it tested, and the reasoning that would have gotten it right. Reviewing that log is the highest-yield 20 minutes of any study day.

Exam-day tips

• Triage PBQs ruthlessly. They typically appear first and burn multiple minutes each. Attempt each one briefly; if it isn’t yielding, flag it and return after the multiple-choice section. Unanswered questions score zero, so never leave anything blank.
• One minute per question is the budget. With up to 90 questions in 90 minutes, any question that takes three minutes is borrowing from three others. Answer, flag if unsure, move.
• Read for the constraint. CV0-004 scenarios embed the deciding requirement in a phrase like “minimal downtime,” “lowest cost,” “limited to a small group of users,” or “must remain within the country.” Two answers will be plausible; the constraint phrase picks the winner.
• Watch for “MOST” and “FIRST.” Several options may be technically valid actions; the exam wants the best one or the correct sequence per troubleshooting methodology.
• Don’t churn on flagged questions. On review, change an answer only when you can articulate why the new one is right. First instincts on scenario questions are correct more often than second-guessing.
• For OnVUE takers: test your equipment with Pearson’s system check days in advance, clear the room completely, and use a wired connection if possible. A dropped session is a bad way to spend a $399 voucher.

Results appear on screen at the end of the exam, with a printed or emailed score report breaking down performance by domain. If it doesn’t go your way, there’s no waiting period before the first retake — review the domain breakdown, patch the gaps, and rebook.

After you pass: keeping Cloud+ current

Cloud+ is good for three years from the date you pass. You keep it active through CompTIA’s Continuing Education (CE) program by earning continuing education units (CEUs) — through activities like completing relevant training, earning a higher-level certification that automatically renews the ones beneath it, or documenting qualifying work experience — or by passing the newest version of the exam before your window closes. Plan for this early: a higher cert earned in year two renews Cloud+ as a side effect, which is usually the most efficient path if you intend to keep climbing.

It’s also worth deciding where Cloud+ fits in your sequence before you spend the study time. If your target role is single-vendor (an Azure shop, an AWS shop), a vendor associate certification may pay off faster, and Cloud+ becomes the complement that proves your judgment transfers. If you work in consulting, government, or a genuinely multicloud environment, Cloud+ first is the stronger order — the concepts it certifies are the ones every provider’s documentation assumes you already have.

Quick reference

• CV0-004 = maximum 90 questions (MCQ + PBQ), 90 minutes, passing score 750/900.
• Voucher: $399 retail after the May 2026 CompTIA price change; delivery via Pearson VUE test center or OnVUE.
• Six domains: Cloud Architecture 23%, Deployment 19%, Security 19%, Operations 17%, Troubleshooting 12%, DevOps Fundamentals 10%.
• Cloud Architecture + Deployment together are 42% of the exam — deployment models, service models, and release strategies are the core of your prep.
• Know all four release strategies (blue-green, canary, rolling, in-place) by rollback path, cost, downtime, and blast radius.
• Recommended background: 2–3 years of systems administration or networking; offered in English and Japanese.
• PBQs come first and are slow — flag, skip, and return after clearing the multiple-choice items.
• No waiting period for a first retake; the score report’s domain breakdown tells you exactly where to focus.