CV0-004 Operations and Support Practice Question
A cloud administrator needs to centrally collect, search, and retain application and system logs from hundreds of Amazon EC2 instances and AWS services for troubleshooting and compliance. The administrator wants a managed service that stores logs in durable storage and allows ad hoc queries using a query language. Which AWS service should the administrator use?
⚠ Common exam trap
Candidates often confuse CloudTrail, which records API calls for auditing, with a service that ingests and queries application and operating system logs.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Amazon CloudWatch Logs
Amazon CloudWatch Logs is the managed AWS service for centralizing log data from EC2 instances and AWS services. The CloudWatch agent ships instance logs to log groups, and CloudWatch Logs Insights provides a purpose-built query language to search and analyze events. CloudTrail captures API activity, Config tracks resource configuration, and Trusted Advisor offers recommendations, none of which provide general log ingestion and querying.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
AWS CloudTrail
Why it's wrong here
AWS CloudTrail records API activity and management events for auditing who did what in the account, but it is not designed to ingest and query arbitrary application or operating system logs from EC2 instances. Using CloudTrail for this purpose would not capture application log content or provide the ad hoc log querying the administrator requires.
- ✗
AWS Trusted Advisor
Why it's wrong here
AWS Trusted Advisor inspects an account and provides recommendations across cost, security, fault tolerance, performance, and service quotas. It does not collect or store application or system logs from EC2 instances and provides no mechanism to query log data, so it is unrelated to the centralized logging requirement.
- ✗
AWS Config
Why it's wrong here
AWS Config evaluates and records resource configuration changes against desired rules, helping with compliance of resource state. It does not ingest application or system log streams from EC2 instances, and it lacks a general-purpose log query language for troubleshooting application events, so it cannot fulfill the log aggregation requirement.
- ✓
Amazon CloudWatch Logs
Why this is correct
Amazon CloudWatch Logs is a managed service that ingests log data from EC2 instances via the CloudWatch agent, from AWS services, and from custom sources. It stores logs durably in log groups and supports querying with CloudWatch Logs Insights, a query language for searching and analyzing log events, which matches the central collection and ad hoc query requirements.
Quick reference
AWS S3 Storage Class Comparison
| Storage Class | Min Duration | Retrieval | Use Case |
|---|---|---|---|
| S3 Standard | None | Immediate | Frequently accessed data |
| S3 Standard-IA | 30 days | Immediate | Infrequent access, rapid retrieval |
| S3 One Zone-IA | 30 days | Immediate | Non-critical infrequent data |
| S3 Intelligent-Tiering | None | Immediate–hours | Unknown or changing access patterns |
| S3 Glacier Instant | 90 days | Milliseconds | Archive with instant retrieval |
| S3 Glacier Flexible | 90 days | Minutes–hours | Archive, flexible retrieval |
| S3 Glacier Deep Archive | 180 days | Hours | Long-term compliance archive |
Go deeper
Related to this question
About these practice questions
One of 834 original CV0-004 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official CompTIA exam blueprint
This CV0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CV0-004 exam.