CV0-004 Operations and Support Practice Question
A cloud engineer is investigating a sudden increase in egress charges. The engineer suspects that a misconfigured Amazon S3 bucket is being read frequently from the internet. Which tool should the engineer use to identify the source IP addresses and request patterns for that bucket?
⚠ Common exam trap
The trap here is relying on cost or usage dashboards that aggregate data when the scenario needs per-request attribution.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
S3 server access logging
S3 server access logging records each request to a bucket with fields including the requester's IP address, the operation performed, and the response. That request-level detail is what allows the engineer to trace the egress charges back to specific clients and patterns, which the aggregated cost and metrics tools cannot provide.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
AWS Budgets
Why it's wrong here
AWS Budgets tracks spending against thresholds and sends alerts when limits are approached or exceeded. It notifies you that costs are rising but provides no request-level detail, so it cannot identify which IP addresses are causing the egress traffic.
- ✓
S3 server access logging
Why this is correct
S3 server access logs capture detailed records for every request made to a bucket, including the requester's IP address, the operation, and the response code. Analyzing these logs lets the engineer identify which sources are generating the traffic that drives the egress charges.
- ✗
AWS Cost Explorer
Why it's wrong here
Cost Explorer shows spending trends and can break costs down by service or tag, but it reports aggregated charges. It cannot reveal the source IP addresses or individual request patterns behind the S3 egress, so it identifies the problem but not its origin.
- ✗
Amazon S3 Storage Lens
Why it's wrong here
Storage Lens provides aggregated metrics and trends about storage usage and activity across accounts, not per-request details such as source IP. It is useful for spotting overall anomalies but cannot pinpoint the specific clients reading the bucket.
Quick reference
AWS S3 Storage Class Comparison
| Storage Class | Min Duration | Retrieval | Use Case |
|---|---|---|---|
| S3 Standard | None | Immediate | Frequently accessed data |
| S3 Standard-IA | 30 days | Immediate | Infrequent access, rapid retrieval |
| S3 One Zone-IA | 30 days | Immediate | Non-critical infrequent data |
| S3 Intelligent-Tiering | None | Immediate–hours | Unknown or changing access patterns |
| S3 Glacier Instant | 90 days | Milliseconds | Archive with instant retrieval |
| S3 Glacier Flexible | 90 days | Minutes–hours | Archive, flexible retrieval |
| S3 Glacier Deep Archive | 180 days | Hours | Long-term compliance archive |
Go deeper
Related to this question
About these practice questions
This CV0-004 question is part of Courseiva's 834-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official CompTIA exam blueprint
This CV0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CV0-004 exam.