CV0-004 Deployment Practice Question
During a CI/CD pipeline for a web application, the team wants to reduce risk by deploying a new version to a small percentage of users initially, monitoring for errors, and automatically rolling back if issues are detected. Which deployment strategy should they implement?
⚠ Common exam trap
CV0-004 often tests the distinction between canary and blue/green — candidates pick blue/green because both reduce risk, but only canary exposes a small percentage of users with gradual traffic shifting.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Canary deployment
Canary deployment routes a small percentage of production traffic to the new version while the majority continues to hit the stable version, allowing the team to monitor error rates and latency in real time. If metrics degrade, traffic can be shifted back automatically, limiting blast radius. This matches the requirement of exposing only a small subset of users, monitoring, and auto-rolling back.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Blue/green deployment
Why it's wrong here
Blue/green shifts all traffic to an identical environment at once, so it cannot expose only a small percentage of users. It is tempting because it enables fast rollback, but it is correct when you want an instant full cutover with two complete environments, not gradual canary exposure.
- ✗
Rolling deployment
Why it's wrong here
Rolling deployment replaces instances in batches across the whole fleet, so every user eventually hits the new version with no percentage-based traffic split or automatic rollback trigger. It is tempting because it limits blast radius, but it is correct for zero-downtime updates, not canary testing.
- ✗
In-place deployment
Why it's wrong here
In-place deployment updates the existing instances directly, leaving no separate environment to shift traffic to or roll back to. It is tempting because it is simple and cheap, but it is correct for small applications where downtime is acceptable, not for monitored canary releases with automatic rollback.
- ✓
Canary deployment
Why this is correct
Canary deployment routes a small percentage of traffic to the new version while the majority still hits the stable release, enabling error monitoring and automatic rollback. This directly satisfies the requirement to limit initial user exposure and revert on detected issues.
Quick reference
AAA Protocol Comparison
| Protocol | Port(s) | Encryption | Transport | Primary Use |
|---|---|---|---|---|
| RADIUS | 1812 / 1813 | Password only | UDP | Network access control |
| TACACS+ | 49 | Full packet | TCP | Device administration |
| Diameter | 3868 | Full session | TCP / SCTP | Carrier / mobile networks |
| 802.1X | — | EAP-based | Layer 2 | Port-based access control |
TACACS+ encrypts the entire packet; RADIUS only encrypts the password field — a key exam distinction.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CV0-004 question from scratch — 834 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official CompTIA exam blueprint
This CV0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CV0-004 exam.