CV0-004 Security Practice Question
A cloud security team is reviewing audit logs and notices that a service account has been used to launch several high-risk API calls that are not part of its normal behavior. Which security control should be implemented to detect such anomalies in real time?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Implement an anomaly detection service
Anomaly detection tools use machine learning and behavioral analytics to identify unusual API activity in real time, providing early warning of potential security threats.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Enable API audit logging
Why it's wrong here
CloudTrail logs API calls but does not detect anomalies.
- ✓
Implement an anomaly detection service
Why this is correct
Anomaly detection services analyze logs for unusual patterns.
- ✗
Use a static IAM policy
Why it's wrong here
Static policies define permissions but don't detect anomalies.
- ✗
Configure a network ACL
Why it's wrong here
Network ACLs filter traffic at subnet level, not API behavior.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CV0-004 question from scratch — 977 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CV0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CV0-004 exam.