CV0-004 Security Practice Question
During a security audit, it is discovered that a cloud storage bucket contains sensitive data that should have been encrypted at rest. The bucket was created with default settings. Which step must be taken to encrypt the data that is already stored?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Copy the objects to a new bucket that has default encryption enabled, then delete the original bucket
Enabling default encryption only affects new objects. Existing objects must be re-encrypted by copying them, which applies the new encryption settings.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Encrypt the objects using client-side encryption before upload
Why it's wrong here
Objects are already stored; client-side encryption would require re-upload.
- ✓
Copy the objects to a new bucket that has default encryption enabled, then delete the original bucket
Why this is correct
Copying objects applies the new bucket's encryption settings.
- ✗
Use a server-side encryption with customer-provided keys (SSE-C) on each existing object
Why it's wrong here
This is possible but not automatic; still requires action per object.
- ✗
Enable default encryption on the bucket; all existing objects will be automatically encrypted
Why it's wrong here
Default encryption applies only to new objects, not existing ones.
Go deeper
Related to this question
About these practice questions
One of 977 original CV0-004 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CV0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CV0-004 exam.