CV0-004 Deployment Practice Question
An organization is using CloudFormation to manage AWS infrastructure. They need to detect if any manual changes have been made to resources outside of CloudFormation. Which CloudFormation feature should they use?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Drift detection
CloudFormation drift detection compares the current state of resources with the expected state defined in the stack template. It identifies resources that have been modified manually, known as drift.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Change sets
Why it's wrong here
Change sets preview the difference between a proposed template update and the deployed stack before execution; they compare templates, not live resources against the template. They are tempting because they surface differences, and would be correct for reviewing planned changes before applying an update.
- ✓
Drift detection
Why this is correct
Drift detection compares each stack resource's actual configuration against its expected template-defined state, reporting any divergence. This directly satisfies the requirement to identify manual changes made outside CloudFormation, since it flags resources whose live properties no longer match the stack's declared configuration.
- ✗
Stack sets
Why it's wrong here
Stack sets deploy one template across multiple accounts and Regions; they provide no drift comparison between live resources and the template. They are tempting because they manage CloudFormation at scale, and would be correct for rolling out identical infrastructure to many accounts.
- ✗
Resource signals
Why it's wrong here
Resource signals are cfn-signal callbacks confirming that an instance or resource finished its creation steps; they report provisioning success, not divergence from the template. They are tempting because they relate to resource state, and would be correct for waiting on EC2 or Auto Scaling creation completion.
About these practice questions
One of 834 original CV0-004 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CV0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CV0-004 exam.