CV0-004 Practice Test 16 — 15 Questions

Question 1

A company is using AWS CloudFormation to deploy a multi-tier application. The stack includes an Auto Scaling group and an Application Load Balancer. The operations team reports that deployments are failing because the new instances are not passing health checks. Which CloudFormation template attribute should be modified to ensure that the stack update rolls back automatically if the health check fails?

Accepted Answer

Use a CreationPolicy attribute on the Auto Scaling group with a timeout and signal count.. Option B is correct because the CreationPolicy attribute on an Auto Scaling group, when combined with a timeout and a signal count, instructs CloudFormation to wait for a specified number of success signals from the new instances before considering the resource creation complete. If the signals are not received within the timeout (e.g., because the instances fail health checks and never report as healthy), CloudFormation treats the creation as failed and automatically rolls back the stack update. This directly addresses the requirement to roll back on health check failure.

Answer

Add an UpdatePolicy attribute to the Auto Scaling group.

Answer

Modify the DeletionPolicy attribute of the instances.

Answer

Set the DependsOn attribute to ensure the load balancer is created first.

Question 2

During a cloud deployment, a virtual machine is created from a custom image. After boot, the VM is not accessible via SSH. Which of the following should the administrator check FIRST?

Accepted Answer

The security group rules for inbound SSH. The most common reason a newly deployed VM is inaccessible via SSH is that the security group or network ACL does not permit inbound TCP port 22 traffic. Security groups act as a virtual firewall at the instance level, and if the rule allowing SSH from the administrator's IP is missing or misconfigured, the connection will be refused. This should be the first check because it is a frequent misconfiguration during deployment.

Answer

The boot volume is encrypted

Answer

The hypervisor version compatibility

Answer

The image's OS license activation status

Question 3

A DevOps engineer is deploying an application on Kubernetes. The exhibit shows the status of pods and a describe output. The frontend pod is stuck in Pending state. Which action should the engineer take to resolve the issue?

Accepted Answer

Reduce the resource requests in the frontend deployment manifest.. The frontend pod is stuck in Pending state because the cluster nodes lack sufficient resources (CPU or memory) to satisfy the pod's resource requests. Reducing the resource requests in the deployment manifest lowers the scheduling threshold, allowing the pod to fit on an available node. This directly addresses the most common cause of Pending pods: insufficient allocatable resources on any node.

Answer

Add a node affinity rule to schedule on nodes with more memory.

Answer

Change the service type from ClusterIP to NodePort.

Answer

Modify the image pull policy to Always.

Question 4

An e-commerce company is deploying a disaster recovery solution across two cloud regions. The primary region runs the production workload. The recovery region should have a fully provisioned environment that can take over immediately in case of a failure. Which deployment strategy BEST meets this requirement while minimizing costs?

Accepted Answer

Warm standby in the recovery region. Warm standby is the correct strategy because it maintains a fully provisioned, scaled-down copy of the production environment in the recovery region that can be activated immediately upon failover. This meets the requirement for immediate takeover while minimizing costs by running only the essential resources (e.g., a minimal number of compute instances, a standby database) instead of a full active-active deployment.

Answer

Backup and restore to the recovery region upon failure

Answer

Multi-site active-active with load balancers

Answer

Pilot light with minimal resources running in recovery

Question 5

A company needs to deploy a web application quickly and reliably. Which approach is best?

Accepted Answer

Use a CI/CD pipeline with automated deployment. Option B is correct because CI/CD pipelines automate testing and deployment, ensuring consistency and speed. Option A is wrong because manual deployment is error-prone and slow. Option C is wrong because copy/paste to servers is not scalable. Option D is wrong because blue-green is a deployment strategy, not a full pipeline.

Answer

FTP the application to each server individually

Answer

Perform a blue-green deployment manually

Answer

Manually copy the application files to the server

Question 6

A company is deploying a microservices architecture that must scale dynamically based on traffic. Which technology should be used?

Accepted Answer

Kubernetes with Horizontal Pod Autoscaler. Option A is correct because Kubernetes with HPA automatically scales pods based on metrics. Option B is wrong because monolithic deployments are not scalable. Option C is wrong because manual scaling is not dynamic. Option D is wrong while a large instance may handle more load, it does not provide dynamic scaling.

Answer

Manually add more virtual machines during peak hours

Answer

Deploy a monolithic application on a single large instance

Answer

Use a single large instance with a load balancer

Question 7

A company is migrating its on-premises application to a public cloud. The application requires low-latency access to a legacy database that cannot be moved to the cloud. The cloud deployment must use a hybrid architecture. Which network connectivity solution should the cloud architect recommend to minimize latency and provide secure, reliable communication?

Accepted Answer

Use a dedicated private connection via a cloud provider's direct connect service.. A dedicated private connection via a cloud provider's direct connect service (e.g., AWS Direct Connect, Azure ExpressRoute, or Google Cloud Interconnect) establishes a private, physical link between the on-premises data center and the cloud VPC. This bypasses the public internet entirely, providing consistent low-latency performance, higher bandwidth, and a more reliable connection for hybrid architectures where the legacy database remains on-premises.

Answer

Route traffic through the public internet with encryption.

Answer

Deploy a CloudFront distribution to cache database queries.

Answer

Establish a site-to-site VPN over the internet.

Question 8

Which TWO of the following are advantages of using a configuration management tool (e.g., Ansible, Chef, Puppet) in cloud deployments? (Choose two.)

Accepted Answer

Enable idempotent infrastructure changes.. Option B is correct because configuration management tools like Ansible, Chef, and Puppet enforce idempotency, meaning that applying the same configuration multiple times results in the same desired state without unintended side effects. This is achieved by checking the current state of the system before making changes, ensuring that resources are only modified when necessary. Idempotency is critical for reliable, repeatable infrastructure changes in cloud deployments.

Answer

Automatically configure network devices.

Answer

Provide dynamic auto-scaling of resources.

Answer

Monitor application performance in real-time.

Question 9

A containerized application deployment fails with an 'ImagePullBackOff' error. What should the administrator verify?

Accepted Answer

The container registry credentials and image tag. Option B is correct because the error indicates the container runtime cannot pull the image, often due to wrong tag or registry credentials. Option A is wrong while DNS could be involved, it typically gives a different error. Option C is wrong firewall issues cause timeouts, not pull errors. Option D is wrong CPU utilization does not cause image pull errors.

Answer

The CPU utilization on the node

Answer

The cluster's DNS configuration

Answer

The firewall rules between nodes and registry

Question 10

A DevOps team is implementing an automated deployment pipeline for a cloud application. Which THREE steps are essential components of a continuous delivery pipeline? (Select THREE.)

Accepted Answer

Deploying to a staging environment for integration tests. Option A is correct because deploying to a staging environment for integration tests is a core step in a continuous delivery pipeline. It validates that the application works correctly in an environment that mirrors production before any release decision is made, ensuring that integration and end-to-end tests can run safely without impacting live users.

Answer

Deploying to production automatically without approval

Answer

Monitoring and rollback capability

Question 11

After deploying a new cloud application, users report that they cannot connect to the application. The cloud administrator checks the security group rules and finds that the inbound rule for HTTP traffic is missing. What is the best practice to prevent this issue in future deployments?

Accepted Answer

Use an Infrastructure as Code (IaC) template to define security group rules.. Option A is correct because using Infrastructure as Code (IaC) templates ensures that security groups are defined consistently and can be reviewed before deployment. Option B (manual checks) are error-prone. Option C (default rules) may be too permissive. Option D (cloning) does not address the root cause.

Answer

Create a checklist for manual review before each deployment.

Answer

Clone a security group that already has the correct rules.

Answer

Configure the security group to allow all traffic by default.

Question 12

A hybrid cloud deployment connects an on-premises data center to a public cloud. Which TWO components are typically required to establish this connectivity? (Select TWO.)

Accepted Answer

Direct peering or dedicated connection (e.g., AWS Direct Connect). Option B is correct because a dedicated connection like AWS Direct Connect provides a private, high-bandwidth, low-latency link between an on-premises data center and a public cloud, bypassing the public internet for consistent performance and security. Option C is correct because a VPN gateway establishes an encrypted tunnel over the public internet (using protocols like IPsec) to securely connect the on-premises network to the cloud VPC, which is a standard requirement for hybrid cloud connectivity.

Answer

Load balancer in the cloud

Answer

Public internet with HTTPS

Answer

Cloud-based DNS resolver

Question 13

A Kubernetes StatefulSet is deployed to run a database. The pods are stuck in pending state. The administrator checks and finds that the PersistentVolumeClaim is not bound to any PersistentVolume. Which of the following is the MOST likely cause?

Accepted Answer

The PV is already bound to another PVC.. When a PersistentVolumeClaim (PVC) remains unbound, the most common cause is that no PersistentVolume (PV) matches its requirements. If a PV is already bound to another PVC, it cannot be reused unless released and reclaimed. This leaves the PVC in a pending state, preventing the StatefulSet pods from starting.

Answer

The PVC and PV have different access modes.

Answer

The PVC requests storage size that exceeds available PV capacity.

Answer

The storage class provisioner is not installed.

Question 14

A DevOps team sets up a CI/CD pipeline for a containerized application on Kubernetes. They want to test a new version with a small subset of users before full rollout. Which deployment method should they use?

Accepted Answer

Canary. A canary deployment releases the new version to a small subset of users (e.g., 5-10% of traffic) while the rest continue using the stable version. This allows the team to monitor performance, errors, and user feedback before gradually increasing the rollout. Kubernetes supports canary deployments natively through techniques like multiple Deployments with shared labels and service mesh traffic splitting (e.g., Istio or Linkerd).

Answer

Recreate

Answer

Rolling update

Answer

Blue/green

Question 15

A startup wants to develop a new web application with minimal upfront infrastructure management. They want to focus on writing code and not worry about operating system patches or scaling servers. Which cloud service model is MOST appropriate?

Accepted Answer

Platform as a Service (PaaS). Platform as a Service (PaaS) provides a managed platform where the startup can deploy and run their web application code without managing the underlying infrastructure, including operating system patches and server scaling. This aligns with the requirement to focus on writing code while the cloud provider handles the operational overhead.

Answer

Functions as a Service (FaaS)

Answer

Infrastructure as a Service (IaaS)

Answer

Software as a Service (SaaS)