CV0-004 Deployment Practice Question
A company uses CloudFormation to manage infrastructure across multiple AWS accounts. They want to deploy a common set of resources (e.g., VPC, IAM roles) to all accounts in their organization. Which CloudFormation feature should they use?
⚠ Common exam trap
CV0-004 often tests the confusion between nested stacks (modularization within one account) and StackSets (multi-account/multi-region deployment), so candidates who see 'common set of resources' and pick nested stacks miss the multi-account requirement.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Stack sets
CloudFormation StackSets allow you to deploy a single template across multiple AWS accounts and regions in one operation, using either self-managed permissions or AWS Organizations integration. This is the designed feature for organization-wide resource deployment like VPCs and IAM roles. StackSets handle the orchestration, rollback, and drift detection across all target accounts.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Change sets
Why it's wrong here
Change sets preview how a stack update will alter existing resources before execution, so they cannot create resources in accounts that have no stack. They are the right choice for reviewing a risky update to one stack, not for organisation-wide provisioning, which StackSets performs.
- ✗
Nested stacks
Why it's wrong here
Nested stacks compose child templates inside one parent stack, so they cannot fan resources out across separate accounts. They suit reusing a shared template within a single account or stack hierarchy. Cross-account deployment needs StackSets, which target organisational accounts directly.
- ✓
Stack sets
Why this is correct
Stack sets extend a single CloudFormation template across multiple accounts and regions from one operation, using organisational or administrator accounts as targets. This directly satisfies the requirement to deploy common VPC and IAM resources to every account in the organisation.
- ✗
Drift detection
Why it's wrong here
Drift detection only reports where live resources diverge from their templates; it provisions nothing across accounts. It is tempting because it does touch every stack, but it is a read-only audit tool. Deploying shared resources to all organisation accounts requires StackSets.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CV0-004 question from scratch — 834 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official CompTIA exam blueprint
This CV0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CV0-004 exam.