mediumMultiple ChoiceObjective-mapped
CV0-004 Practice Question: Refer to the exhibit
Exhibit
Refer to the exhibit.
```
$ cloud-cli storage policies list --bucket-name prod-backup
{
"Id": "Policy1",
"Version": "2012-10-17",
"Statement": [
{
"Sid": "DenyInsecureConnections",
"Effect": "Deny",
"Principal": "*",
"Action": "s3:*",
"Resource": "arn:aws:s3:::prod-backup/*",
"Condition": {
"Bool": {
"aws:SecureTransport": "false"
}
}
}
]
}
```Refer to the exhibit. A cloud administrator applies the bucket policy shown. After applying, users report that they can no longer access the prod-backup bucket using their applications. The applications use the AWS SDK with default configuration. What is the most likely reason?
⚠ Common exam trap
An explicit Deny with a condition can override an Allow, and default SDK configurations may not enforce HTTPS, leading candidates to overlook the transport protocol requirement.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The applications are using HTTP instead of HTTPS.
The bucket policy explicitly denies access unless the request uses HTTPS (aws:SecureTransport is false). The applications use the AWS SDK with default configuration, which typically does not enforce HTTPS; many SDKs default to HTTP for performance or legacy reasons. Since the policy denies HTTP requests, the applications are blocked, making C the correct answer.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The policy does not include an Allow statement.
Why it's wrong here
An Allow statement is not required; the default IAM behavior allows access, and this Deny only overrides for non-HTTPS.
- ✗
The policy has a syntax error in the condition.
Why it's wrong here
The condition syntax is valid; it correctly uses the Bool condition key.
- ✓
The applications are using HTTP instead of HTTPS.
Why this is correct
Correct. The policy denies non-HTTPS requests, so if the SDK uses HTTP, access is denied.
- ✗
The policy's principal "*" blocks all users.
Why it's wrong here
Principal "*" allows all principals; it only denies under the condition, so it does not block all.
Go deeper
Related to this question
About these practice questions
This CV0-004 question is part of Courseiva's 977-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CV0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CV0-004 exam.