Incident Detection And Response →mediumMultiple ChoiceObjective-mapped

CCOA Incident Detection And Response Practice Question

You are reviewing AWS CloudTrail logs to investigate an unauthorized modification of an S3 bucket policy. Which event name should you search for?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

PutBucketPolicy

'PutBucketPolicy' is the specific API call recorded in CloudTrail when an IAM identity modifies the bucket policy of an S3 bucket.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
UpdatePolicy
Why it's wrong here
Too generic, does not target S3 specifically.
✗
ModifyBucketPolicy
Why it's wrong here
This is not a standard AWS API call.
✗
DescribeBucketPolicy
Why it's wrong here
This is a read-only event, not a modification.
✓
PutBucketPolicy
Why this is correct
The correct API call for modifying S3 bucket policies.

Quick reference

AWS S3 Storage Class Comparison

Storage Class	Min Duration	Retrieval	Use Case
S3 Standard	None	Immediate	Frequently accessed data
S3 Standard-IA	30 days	Immediate	Infrequent access, rapid retrieval
S3 One Zone-IA	30 days	Immediate	Non-critical infrequent data
S3 Intelligent-Tiering	None	Immediate–hours	Unknown or changing access patterns
S3 Glacier Instant	90 days	Milliseconds	Archive with instant retrieval
S3 Glacier Flexible	90 days	Minutes–hours	Archive, flexible retrieval
S3 Glacier Deep Archive	180 days	Hours	Long-term compliance archive

About these practice questions

One of 203 original CCOA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

Written and reviewed by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

Last reviewed August 2026 · checked against the official ISACA exam blueprint

Ready to practise?

Put this into practice with a full scored session.

Start practice session

Practice tests

Short scored sets — answer, get feedback, read the explanation, move on.

CCOA Practice Test 4 — 25 Questions→CCOA Practice Test 2 — 25 Questions→

Practice by domain

Drill one exam section at a time instead of jumping between unrelated topics.

Incident Detection And Response Adversarial Tactics Cybersecurity Principles And Risk

Filter by question format

Pick a question style and work only that format until it feels routine.

Browse scenarios

Topic-level practice

One concept per page — questions, worked explanations, and a short concept guide.

Incident Detection And Response practice questions Securing Assets practice questions Technology Essentials practice questions CCOA troubleshooting practice questions

Continue studying

CCOA practice test All ISACA practice questions Exam domains

This CCOA practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCOA exam.