hardMultiple ChoiceObjective-mapped
CV0-004 Practice Question: During a penetration test, a cloud security…
During a penetration test, a cloud security engineer discovers that a storage bucket is publicly accessible because of a misconfigured block public access setting. The bucket contains encrypted data. Which of the following is the primary risk?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Unauthorized users can list and download objects, but encryption at rest protects content if the key is also not accessible.
Unauthorized users can list and download encrypted objects, even if the data is encrypted at rest. The primary risk is data exfiltration if the encryption key is compromised or the data is not properly encrypted.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The bucket name is exposed to enumeration.
Why it's wrong here
While true, this is a secondary risk.
- ✗
Data is unreadable because it is encrypted.
Why it's wrong here
Encryption does not prevent download; it only protects content if the key is secure.
- ✗
The encryption key is exposed.
Why it's wrong here
The key is not necessarily exposed; the bucket access does not imply key exposure.
- ✓
Unauthorized users can list and download objects, but encryption at rest protects content if the key is also not accessible.
Why this is correct
This accurately describes the primary risk: data exfiltration is possible, but encryption provides a layer of protection if the key is secure.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CV0-004 question from scratch — 977 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CV0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CV0-004 exam.