mediumMultiple ChoiceObjective-mapped
CV0-004 Practice Question: A company uses a configuration management tool to…
A company uses a configuration management tool to enforce desired state on cloud servers. During an audit, it is discovered that some servers have deviated from the baseline configuration. The administrator runs a report and finds that the configuration management agent was not running on those servers. Which of the following is the BEST solution to ensure continuous compliance?
⚠ Common exam trap
The trap here is that candidates focus on fixing the immediate deviation (options A, B, or C) rather than implementing a proactive, automated process to detect and correct future agent failures, which is the core of continuous compliance in cloud operations.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Implement a periodic compliance scan and auto-remediation job.
It automates the detection and correction of configuration drift without manual intervention. By implementing a periodic compliance scan (e.g., using AWS Config rules or Azure Policy) coupled with an auto-remediation action (e.g., a Lambda function or runbook), the system can restart the configuration management agent or reapply the desired state automatically, ensuring continuous compliance even if the agent stops temporarily.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Reinstall the configuration management agent on all servers.
Why it's wrong here
Reinstallation does not ensure the agent runs continuously.
- ✗
Remove the drifit servers from the environment and rebuild them.
Why it's wrong here
Rebuilding is costly and doesn't address the agent stability issue.
- ✗
Manually update the configuration on the deviated servers.
Why it's wrong here
Manual updates are not sustainable and do not prevent future drift.
- ✓
Implement a periodic compliance scan and auto-remediation job.
Why this is correct
Automated scans and remediation enforce continuous compliance.
Quick reference
Cloud Service Model Comparison
| Model | You Manage | Provider Manages | Examples |
|---|---|---|---|
| IaaS | OS, runtime, apps, data | Hardware, hypervisor, networking | EC2, Azure VMs, GCP Compute Engine |
| PaaS | Apps and data | OS, runtime, middleware, hardware | Elastic Beanstalk, Azure App Service |
| SaaS | Data and settings only | Everything else | Microsoft 365, Salesforce, Workday |
| FaaS / Serverless | Function code only | Infra, scaling, runtime | Lambda, Azure Functions, Cloud Run |
| CaaS | Containers and apps | Kubernetes, OS, hardware | EKS, AKS, GKE |
Go deeper
Related to this question
About these practice questions
Courseiva writes every CV0-004 question from scratch — 977 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CV0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CV0-004 exam.