CV0-004 Operations and Support Practice Question
A cloud administrator needs to apply security patches to a group of Windows servers during a maintenance window to minimize disruption. Which type of service should be used?
⚠ Common exam trap
CV0-004 often tests the distinction between tools that identify issues (vulnerability assessment, configuration compliance) and those that remediate them (patch automation), so candidates may incorrectly choose a monitoring or assessment service when the requirement is to apply patches.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Patch automation service with maintenance window scheduling
The administrator needs to apply security patches to a group of Windows servers during a specific maintenance window to minimize disruption. A patch automation service with maintenance window scheduling is designed exactly for this purpose: it automates the deployment of patches and allows scheduling within defined windows, ensuring updates occur only during approved times. This directly addresses the requirement to apply patches while controlling when they happen to avoid service interruptions.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Vulnerability assessment service
Why it's wrong here
A vulnerability assessment service only scans for and reports missing patches; it cannot deploy them, so the maintenance window would pass with servers still unpatched. It is tempting because it identifies the very vulnerabilities patching addresses, and it would be the right choice when the task is discovering and prioritising exposures rather than remediating them.
- ✗
Configuration compliance service
Why it's wrong here
Configuration compliance services audit and report whether servers match a defined baseline; they detect missing patches but do not install them. Compliance scanning suits continuous drift reporting, whereas the scenario requires actual patch deployment during a window.
- ✗
Configuration management and automation service
Why it's wrong here
Configuration management and automation services enforce and deploy desired state across servers, but patching requires the dedicated update mechanism that schedules and installs missing patches within a maintenance window. Automation suits ongoing configuration drift control, not patch deployment.
- ✓
Patch automation service with maintenance window scheduling
Why this is correct
A patch automation service inventories missing OS patches and applies them to tagged Windows servers only within the defined maintenance window, preventing disruption outside approved hours. This satisfies the requirement to patch a server group while minimising disruption, unlike manual patching or always-on update schedules.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CV0-004 question from scratch — 834 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official CompTIA exam blueprint
This CV0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CV0-004 exam.