easyMultiple Choice
CV0-004 Practice Question: Requires that all cloud resources be tagged with…
An organization requires that all cloud resources be tagged with the cost center and environment (e.g., production, development). A compliance checker runs weekly to report untagged resources. The cloud administrator notices that newly created resources are often missing tags. What is the most effective long-term solution?
⚠ Common exam trap
CV0-004 often tests the difference between detective controls (dashboards, reports, scripts) and preventive controls (policies that block creation); candidates who focus on 'fixing' untagged resources pick C or B instead of the preventive policy in A.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure a cloud governance policy that prevents resource creation without required tags.
The most effective long-term solution is to prevent non-compliant resource creation in the first place, which is what a governance policy (e.g., AWS Organizations SCP, Azure Policy, or GCP Org Policy) does by denying creation of resources without required tags. Detection and remediation after the fact are reactive and leave gaps. Prevention enforces the standard at the control plane, so untagged resources never exist.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Configure a cloud governance policy that prevents resource creation without required tags.
Why this is correct
A governance policy enforcing tag requirements at creation time prevents untagged resources from ever existing, satisfying the compliance checker's requirement rather than detecting violations after the fact. Weekly reporting only identifies drift retrospectively; blocking creation addresses the root cause, ensuring cost center and environment tags are present on all resources long term.
- ✗
Create a custom dashboard to show untagged resources.
Why it's wrong here
A dashboard only visualises untagged resources after creation; it neither prevents nor corrects the omission, so the weekly compliance gap persists. Dashboards are tempting because they surface compliance data clearly, and would be correct if the goal were monitoring and reporting rather than enforcing tags at provisioning time.
- ✗
Run a script daily to tag any untagged resources.
Why it's wrong here
Daily remediation leaves resources untagged until the script next runs, so the weekly compliance report still flags them; tags applied after creation also miss cost allocation during that window. It is tempting because scripts suit one-off bulk correction of legacy resources, not preventing the gap at creation time.
- ✗
Send an email reminder to all users about tagging policies.
Why it's wrong here
Email reminders rely on human compliance and leave tagging to user discretion, so newly created resources continue to be missed. They are tempting because they cost nothing to implement and suit awareness campaigns, but they would be appropriate only where enforcement is impossible and voluntary adherence is genuinely acceptable.
Go deeper
Related to this question
About these practice questions
This CV0-004 question is part of Courseiva's 834-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official CompTIA exam blueprint
This CV0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CV0-004 exam.