Upon investigation, the department may take action on confirmed findings that the subject of a report is operating a care facility without the required certificate or license and may do any or all of the following:

(1) Resolve the matter in an informal fashion as is appropriate under the circumstances;
(2) Exercise the department’s right of entry under section 321-486.2;
(3) File a petition with the district court for enforcement, protective, or remedial action; or
(4) Pursue any protective or remedial actions authorized by law.