CV0-004 Practice Test 10 — 10 Questions

Question 1

A cloud operations team is setting up log-based alerting for security events. They want to use structured logging to facilitate querying. Which TWO practices support effective log-based alerting? (Choose TWO.)

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Centralize logs in a log management system. Option B is correct because centralizing logs in a log management system (such as a SIEM, ELK/Elasticsearch, or cloud-native service like CloudWatch Logs or Cloud Logging) aggregates events from multiple sources into one queryable store, which is essential for correlating security events and defining alert rules across services. Option E is correct because outputting logs in JSON format produces structured, machine-parseable records with consistent key-value fields, enabling precise queries and filters (e.g., level:ERROR AND event:login_failure) that drive reliable log-based alerts. Option A is not appropriate because enabling verbose logging for all services generates excessive noise and cost, obscuring the security events that alerts should target. Option C is wrong because random, inconsistent log formats break parsing and make querying and alerting unreliable. Option D is not the best practice here because blindly sending all logs to syslog servers lacks the structured, centralized querying and alerting capabilities required, and syslog alone does not provide the structured format needed for effective log-based alerting.

Answer

Enable verbose logging for all services

Answer

Use random log formats for different applications

Answer

Send all logs to syslog servers

Question 2

Match each networking concept to its definition.

Accepted Answer

VPC: A logically isolated network within a cloud provider.. Correct matches: VPC (isolated network), VPN (secure tunnel). Common confusions involve swapping Subnet and CDN, or Load Balancer and CDN. Understanding each component's role in cloud networking is key.

Answer

Subnet: A distributed network of servers that caches content closer to users.

Answer

Load Balancer: A segmented portion of a VPC that can contain resources.

Answer

CDN: Distributes incoming network traffic across multiple targets to improve performance.

Question 3

A cloud architect is designing an auto-scaling policy for a web application that experiences predictable traffic spikes every weekday morning from 8 to 10 AM. The application runs on a group of virtual machines behind a load balancer. Which scaling approach is MOST cost-effective while ensuring performance during the spike?

Accepted Answer

Scheduled scaling to increase capacity before 8 AM and decrease after 10 AM. Scheduled scaling is the most cost-effective approach because the traffic pattern is predictable (every weekday 8–10 AM). By configuring the auto-scaling group to add instances before the spike and remove them after, you avoid paying for idle resources during off-peak hours while ensuring capacity is ready when needed. This approach directly matches the known schedule without relying on reactive metrics or manual intervention.

Answer

Dynamic scaling based on CPU utilization threshold

Answer

Proactive scaling using machine learning to predict spikes

Answer

Manual scaling by the operations team each morning

Question 4

A cloud engineer receives an alert that the root filesystem (/) is at 93% usage. The /data volume has plenty of free space. The application stores logs in /var/log/app/ on the root filesystem. Which of the following is the BEST long-term solution?

Accepted Answer

Move the /var/log/app directory to the /data partition and create a symlink. Moving the /var/log/app directory to the /data partition and creating a symlink is the best long-term solution because it permanently relocates the log data to a volume with ample free space without requiring application reconfiguration. The symlink (/var/log/app -> /data/app) makes the application continue to write to the same logical path, while the actual storage is on the /data filesystem. This resolves the root filesystem capacity issue without altering the application's logging behavior or risking data loss.

Answer

Increase the size of the root filesystem

Answer

Delete the /data partition and merge it with root

Answer

Configure log rotation to delete logs more frequently

Question 5

A cloud engineer is deploying a serverless function using AWS Lambda. The function needs to process messages from an SQS queue. Which event source should be configured to trigger the Lambda function?

Accepted Answer

Amazon SQS. Lambda can be triggered by SQS, S3, API Gateway, etc. For SQS, the trigger is SQS. S3 triggers on object events; API Gateway for HTTP; EventBridge for events.

Answer

Amazon S3

Answer

Amazon API Gateway

Answer

Amazon EventBridge

Question 6

A cloud architect is deploying a web application across multiple availability zones within a single region to achieve high availability. The application requires that if one availability zone fails, traffic should automatically be rerouted to the remaining zones without manual intervention. Which configuration is required?

Accepted Answer

Active-active across availability zones with a load balancer. Deploying an active-active configuration across multiple availability zones with a load balancer ensures that traffic is automatically distributed to healthy instances. If one availability zone fails, the load balancer's health checks detect the failure and reroute traffic to the remaining zones without manual intervention, meeting the high availability requirement.

Answer

Active-passive with a standby instance in a different region

Answer

Vertical scaling of instances in a single availability zone

Answer

Cold standby with daily backups

Question 7

A cloud administrator is tasked with reducing costs for a development environment that runs 24/7. The environment consists of several virtual machines and a load balancer. Which action would most effectively reduce costs without affecting developer access during business hours?

Accepted Answer

Schedule the VMs to shut down during nights and weekends.. Scheduling VMs to shut down during nights and weekends directly reduces compute costs by eliminating runtime charges when the development environment is not needed. This approach preserves full availability during business hours without requiring architectural changes, and it is the most straightforward way to cut costs for a 24/7-running environment that only needs daytime access.

Answer

Implement auto-scaling to run only one instance during off-hours.

Answer

Use reserved instances for all VMs.

Answer

Change all VMs to burstable instance types.

Question 8

A company runs a production application on multiple cloud regions for high availability. They want to minimize latency for global users. Which DNS routing policy should they use?

Accepted Answer

Latency routing. Latency routing in DNS directs users to the region with the lowest network latency, which is ideal for minimizing latency for global users. It uses latency measurements between the user's resolver and the various regional endpoints to select the best-performing region. This is distinct from geolocation routing, which routes based on the user's geographic location rather than actual network performance.

Answer

Failover routing

Answer

Geolocation routing

Answer

Simple routing

Question 9

A cloud administrator needs to audit all API calls made in a GCP project for compliance purposes. Which service should be enabled to log these actions?

Accepted Answer

GCP Cloud Audit Logs. GCP Cloud Audit Logs is the correct service because it records all API calls and administrative actions in a GCP project, including Admin Activity, Data Access, System Event, and Policy Denied logs. Enabling and exporting these logs to a SIEM or log bucket satisfies the compliance audit requirement for API call visibility.

Answer

Azure Monitor

Answer

GCP Security Command Center

Answer

AWS CloudTrail

Question 10

A company runs a stateless web application on auto-scaling EC2 instances behind an Application Load Balancer. The application experiences sudden traffic spikes. Which scaling approach will handle the spikes most efficiently while minimizing cost?

Accepted Answer

Horizontal scaling with auto-scaling based on CPU utilization. Horizontal scaling (adding instances) combined with auto-scaling based on metrics is best for handling spikes cost-effectively in a stateless app.

Answer

Vertical scaling of existing instances

Answer

Using reserved instances for all capacity

Answer

Pre-provisioning a large number of instances