mediumMultiple ChoiceObjective-mapped
CV0-004 Practice Question: A security team wants to implement host-based…
A security team wants to implement host-based intrusion detection on their virtual machines in a public cloud. Which approach provides the most effective detection while minimizing performance impact?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use a cloud-native security service that deploys an agent to monitor system logs and file integrity.
Cloud-native security services that deploy agents on each VM provide host-based intrusion detection by monitoring system logs and file integrity, which is the most effective method for host-level threats. Options A, B, and C are incorrect: A (antivirus) focuses on malware, not intrusion detection; B and C are network-based, not host-based, and may not capture host-level events.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Install an antivirus agent on each VM.
Why it's wrong here
Antivirus is not sufficient for intrusion detection.
- ✗
Enable network traffic logging at the hypervisor level.
Why it's wrong here
This is network-based, not host-based.
- ✗
Enable VPC flow logs and analyze them.
Why it's wrong here
Flow logs provide network metadata, not host-level detection.
- ✓
Use a cloud-native security service that deploys an agent to monitor system logs and file integrity.
Why this is correct
These services are purpose-built for host-based intrusion detection and are optimized for cloud environments.
Go deeper
Related to this question
About these practice questions
This CV0-004 question is part of Courseiva's 977-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CV0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CV0-004 exam.