CV0-004 Operations and Support Practice Question
A company uses a multi-cloud strategy with workloads in AWS and Azure. The cloud team wants a centralized log management solution to correlate security events across both platforms. Which approach is most suitable?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Deploy a third-party SIEM solution such as Splunk
Azure Log Analytics, AWS CloudWatch Logs, and GCP Cloud Logging each work only within their own cloud. A third-party SIEM like Splunk can aggregate logs from multiple clouds.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use AWS CloudWatch Logs with cross-account log groups
Why it's wrong here
CloudWatch Logs is AWS-only.
- ✓
Deploy a third-party SIEM solution such as Splunk
Why this is correct
A third-party SIEM can ingest logs from multiple cloud providers for centralized analysis.
- ✗
Use GCP Cloud Logging with a log sink to BigQuery
Why it's wrong here
GCP Cloud Logging is GCP-only.
- ✗
Use Azure Log Analytics and forward AWS logs to it via an agent
Why it's wrong here
While possible, Azure Log Analytics is primarily for Azure; cross-cloud integration is not native.
Go deeper
Related to this question
About these practice questions
This CV0-004 question is part of Courseiva's 977-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CV0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CV0-004 exam.