CV0-004 Practice Test 13 — 15 Questions

Question 1

A company wants to implement a disaster recovery strategy with an RTO of 15 minutes and an RPO of 1 hour for a critical application running on AWS. Which approach would best meet these requirements?

Accepted Answer

Continuous replication to a warm standby environment with automated failover. Continuous replication to a standby environment with automatic failover provides the lowest RTO and RPO, meeting the requirements.

Answer

Backup to AWS S3 and restore using AWS CloudFormation

Answer

Cross-region replication with a read replica and manual promotion

Answer

Daily snapshots of EBS volumes to another region

Question 2

A company wants to migrate its on-premises workloads to the cloud and requires full control over the operating system, installed software, and security configurations. Which cloud service model should they choose?

Accepted Answer

IaaS. IaaS provides virtualized computing resources where the customer manages the OS and above, giving full control.

Answer

FaaS

Answer

PaaS

Answer

SaaS

Question 3

A cloud architect is designing a highly available application on AWS. The application must be fault-tolerant and able to withstand the failure of an entire Availability Zone. Which TWO actions should the architect take? (Select TWO.)

Accepted Answer

Deploy EC2 instances across two or more Availability Zones. Deploying across multiple Availability Zones and using an auto scaling group across those zones ensures that if one zone fails, the application continues in the other zones.

Answer

Store application state on the local instance store

Answer

Deploy EC2 instances in a single Availability Zone

Answer

Use a single large EC2 instance

Question 4

A cloud engineer notices that a virtual machine (VM) in a public cloud environment is consistently running at 90% CPU during business hours. The VM hosts a customer-facing web application. Which of the following is the BEST initial troubleshooting step?

Accepted Answer

Review the VM's performance metrics and application logs.. The initial step in troubleshooting high CPU usage is to gather diagnostic data. Reviewing the VM's performance metrics (e.g., CPU utilization, memory, disk I/O) and application logs helps identify whether the issue is caused by a legitimate workload spike, a memory leak, or a misconfiguration. This aligns with the 'identify before act' principle in cloud operations, ensuring the engineer understands the root cause before making changes.

Answer

Migrate the VM to a different availability zone.

Answer

Reboot the VM to reset resource usage.

Answer

Scale up the VM to a larger instance size.

Question 5

A company uses Azure and wants to connect its on-premises data center to Azure with a dedicated, private, and high-bandwidth connection. Which service should the company use?

Accepted Answer

Azure ExpressRoute. Azure ExpressRoute provides a dedicated private connection from on-premises to Azure, offering higher bandwidth and reliability than VPN.

Answer

Site-to-Site VPN

Answer

Azure Front Door

Answer

Azure VPN Gateway

Question 6

Which cloud deployment model involves using services from multiple public cloud providers to avoid vendor lock-in and leverage best-of-breed solutions?

Accepted Answer

Multi-cloud. Multi-cloud is the use of multiple public cloud providers to gain flexibility and avoid dependency on a single vendor.

Answer

Public cloud

Answer

Hybrid cloud

Answer

Private cloud

Question 7

A cloud administrator is designing a backup strategy for a critical database that must achieve a recovery point objective (RPO) of 15 minutes and a recovery time objective (RTO) of 30 minutes. The database has a high write throughput. Which of the following backup methods BEST meets these requirements?

Accepted Answer

Snapshot replication to a secondary datastore every 10 minutes.. Snapshot replication to a secondary datastore every 10 minutes meets the RPO of 15 minutes because snapshots can be taken at intervals shorter than the RPO (e.g., every 10 minutes), and the RTO of 30 minutes is achievable if the secondary datastore is ready to be promoted quickly. For a high-write-throughput database, snapshot replication minimizes performance impact compared to synchronous log shipping, which can throttle writes due to network latency.

Answer

Synchronous log shipping to a standby database.

Answer

Full daily backups with transaction log backups every hour.

Answer

Incremental backups every 10 minutes.

Question 8

A cloud administrator notices that a load balancer is marking all instances as unhealthy. The health check is configured to check a specific URL path. Which of the following is the MOST likely cause?

Accepted Answer

The health check path does not exist on the instances.. The health check is configured to check a specific URL path. If that path does not exist on the instances (e.g., returns a 404 or 403 status), the load balancer will consider the instances unhealthy. This is the most direct cause because the health check relies on a successful HTTP response (typically 200 OK) from that exact path.

Answer

The auto scaling group's minimum size is too low.

Answer

The security group for the instances blocks traffic from the load balancer.

Answer

The instances are under high CPU load.

Question 9

A company needs to migrate a 100 TB on-premises file server to AWS S3. The migration must be completed within two weeks. The network bandwidth is limited to 1 Gbps. Which TWO services should be combined to accomplish this migration within the timeframe? (Select TWO.)

Accepted Answer

AWS DataSync. (AWS Snowball Edge) is correct because it provides a physical storage device that can transfer 100 TB of data offline, bypassing the 1 Gbps bandwidth limitation. With 1 Gbps, the theoretical maximum transfer over the network would be approximately 10.8 TB per day, requiring over 9 days for 100 TB under ideal conditions, but real-world factors like protocol overhead and contention make two weeks infeasible. Snowball Edge can handle up to 80 TB per device, so two devices can complete the initial bulk migration well within the two-week window. Option B (AWS DataSync) is also correct because it can be used to automate the transfer of data from on-premises to the Snowball Edge device, and later to sync any incremental changes after the initial load, ensuring data consistency and reducing manual effort. Together, Snowball Edge handles the bulk offline transfer, while DataSync manages the final sync and ongoing replication, meeting the two-week deadline.

Answer

AWS Server Migration Service (SMS)

Answer

AWS Direct Connect

Answer

Amazon S3 Transfer Acceleration

Question 10

A cloud administrator is debugging a failed CloudFormation stack creation. The exhibit shows the stack events. What is the most likely cause of the failure?

Accepted Answer

The referenced security group does not exist in the chosen VPC.. The stack creation fails with a 'CREATE_FAILED' status on the security group resource, and the error message indicates that the security group does not exist in the specified VPC. This is a common issue when a CloudFormation template references a security group by ID or name that is not present in the target VPC, causing the resource creation to fail. The stack events show the security group resource as the point of failure, confirming that the referenced security group is missing.

Answer

The instance type is not supported in the region.

Answer

The stack name already exists.

Answer

The AMI ID is incorrect.

Question 11

A cloud engineer is optimizing costs for a data analytics workload that runs periodically. The workload processes large datasets stored in Amazon S3 and runs on EC2 instances. Which THREE strategies should the engineer consider to reduce costs? (Select THREE.)

Accepted Answer

Implement S3 Lifecycle policies to transition older data to S3 Glacier. Using spot instances reduces compute cost for interruptible workloads. S3 lifecycle policies move old data to cheaper storage classes. Selecting the correct instance type (rightsizing) avoids overprovisioning.

Answer

Provision large instances to reduce processing time

Answer

Use on-demand instances exclusively

Question 12

A cloud administrator notices that an IAM user has permissions that are not explicitly assigned. The administrator suspects that the user is inheriting permissions through group membership or role assignment. Which TWO methods can the administrator use to identify all effective permissions for this user? (Choose TWO.)

Accepted Answer

List the user's group memberships and examine the policies attached to those groups and any roles the user can assume.. Group memberships and assumable roles are common sources of inherited permissions. By listing the user's groups and examining the policies attached to those groups, as well as any roles the user can assume, the administrator can trace the origin of the unexpected permissions. This method directly identifies the inheritance chain that grants permissions not explicitly assigned to the user.

Answer

Review the user's recent access logs to see which actions were allowed.

Answer

Check the resource-based policies on each resource the user might access.

Answer

Log in as the root user and run a permissions report.

Question 13

Which cloud service model gives the customer the most control over the operating system and applications, while the provider manages the physical hardware, network, and storage?

Accepted Answer

IaaS. IaaS provides virtualized computing resources where the customer manages the OS, applications, and middleware, while the provider manages the underlying infrastructure.

Answer

FaaS

Answer

PaaS

Answer

SaaS

Question 14

A financial services firm requires a cloud deployment that keeps sensitive customer data on-premises while bursting compute-intensive risk analysis workloads to a public cloud during peak times. Which deployment model best meets this requirement?

Accepted Answer

Hybrid cloud. Hybrid cloud connects on-premises infrastructure with public cloud, enabling data residency and burst capacity.

Answer

Public cloud

Answer

Multi-cloud

Answer

Private cloud

Question 15

A company wants to migrate its on-premises workloads to the cloud while maintaining the ability to run some sensitive applications on-premises. Which cloud deployment model best meets this requirement?

Accepted Answer

Hybrid cloud. A hybrid cloud connects on-premises infrastructure with public cloud resources, allowing workloads to run in both environments as needed.

Answer

Multi-cloud

Answer

Private cloud

Answer

Public cloud