mediumMultiple ChoiceObjective-mapped
CV0-004 Practice Question: A company's compliance policy requires that all…
A company's compliance policy requires that all virtual machine (VM) instances must have security patches applied within 30 days of release. The cloud environment automatically deploys VMs from a golden image. Which strategy would BEST ensure compliance without manual intervention?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Update the golden image with the latest patches and redeploy all VMs from it.
Regularly updating the golden image and using it to create new VMs ensures that all new instances are patched within the required timeframe. Automated patch scanning per instance is reactive and may not enforce the golden image. Using a configuration management tool to apply patches after VM creation can work but may cause a delay; updating the golden image is proactive and ensures consistency. A patch management server is good but not as comprehensive as updating the baseline.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use a configuration management tool like Ansible to apply patches on boot.
Why it's wrong here
While good, this may not meet the timeline if the golden image is not also updated; it also adds management overhead.
- ✗
Schedule a nightly job to scan each VM for missing patches and apply them.
Why it's wrong here
This is reactive and may not guarantee that new VMs from an old image are patched immediately.
- ✓
Update the golden image with the latest patches and redeploy all VMs from it.
Why this is correct
This ensures that any VM provisioned from the image is compliant at launch, meeting the 30-day requirement.
- ✗
Install a patch management server and configure VMs to update from it on startup.
Why it's wrong here
Similar to C, but still relies on the VM to update after deployment; the golden image itself may become outdated.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CV0-004 question from scratch — 977 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CV0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CV0-004 exam.