CV0-004 Security Practice Question
An organization is subject to PCI DSS compliance and must demonstrate that it is meeting security requirements. Which cloud service can aggregate compliance findings and provide a dashboard?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
AWS Security Hub
AWS Security Hub aggregates security findings from multiple AWS services and provides a compliance dashboard.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
AWS CloudTrail
Why it's wrong here
CloudTrail records API activity as audit logs; it does not evaluate resources against PCI DSS controls or aggregate findings into a compliance dashboard. It is correct when the requirement is tracking who performed which API call and when, rather than demonstrating control compliance.
- ✓
AWS Security Hub
Why this is correct
AWS Security Hub aggregates findings across AWS accounts and services, mapping them to standards including PCI DSS, then surfaces compliance status in a single dashboard. This directly satisfies the requirement to demonstrate adherence to PCI DSS security controls through consolidated, continuously updated evidence rather than manual reporting.
- ✗
AWS Shield
Why it's wrong here
AWS Shield provides DDoS protection at the network and application layers; it produces no compliance findings and no dashboard. It is correct when the requirement is defending workloads against volumetric or application-layer denial-of-service attacks, not demonstrating PCI DSS compliance.
- ✗
AWS Config
Why it's wrong here
AWS Config records resource configuration changes and evaluates them against rules, but it does not aggregate findings from multiple services into a PCI DSS compliance dashboard. It is correct when the requirement is configuration history and drift detection against defined rules.
Go deeper
Related to this question
About these practice questions
One of 834 original CV0-004 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CV0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CV0-004 exam.