CV0-004 Practice Test 16 — 15 Questions

Question 1

A company decides to use AWS for compute and Azure for storage to leverage best-of-breed services. This is an example of which cloud deployment model?

Accepted Answer

Multi-cloud. Using AWS for compute and Azure for storage means the organization is consuming services from two different public cloud providers simultaneously, which is the definition of a multi-cloud deployment. Multi-cloud is about using multiple providers, regardless of whether workloads are integrated. Hybrid cloud, by contrast, combines public cloud with private infrastructure.

Answer

Community cloud

Answer

Public cloud

Answer

Hybrid cloud

Question 2

A cloud engineer is designing a CI/CD pipeline using Azure DevOps. They need to ensure that code changes are automatically built, tested, and deployed to a staging environment, and then after manual approval, deployed to production. Which pipeline configuration should they use?

Accepted Answer

Multi-stage pipeline with environment approvals on the production stage. Azure DevOps multi-stage pipelines allow defining stages such as build, test, and deploy, with gates and approvals. An approval gate on the production stage ensures manual review before deployment.

Answer

Single stage pipeline with conditional deployment

Answer

Release pipeline with continuous deployment trigger

Answer

Build pipeline only

Question 3

A cloud architect needs to monitor CPU utilization across a fleet of EC2 instances and receive an alert when the average CPU exceeds 80% for 10 minutes. Which AWS service should be used to collect the metric and trigger the alert?

Accepted Answer

Amazon CloudWatch. Amazon CloudWatch is the AWS native monitoring service that collects EC2 metrics such as CPUUtilization at one-minute granularity (or finer with detailed monitoring) and supports CloudWatch Alarms with configurable thresholds and evaluation periods. An alarm can be set to trigger when the average CPUUtilization exceeds 80% for 10 minutes (e.g., 2 consecutive 5-minute periods or 10 consecutive 1-minute periods). CloudWatch also integrates with SNS for notifications and Auto Scaling for automated responses.

Answer

AWS Systems Manager

Answer

AWS Config

Answer

AWS CloudTrail

Question 4

A cloud administrator notices that an application's latency has increased. The application is distributed across multiple microservices. Which tool can help trace requests across services to identify the bottleneck?

Accepted Answer

Distributed tracing tool. A distributed tracing tool is designed to follow a single request as it propagates through multiple microservices, capturing spans, timing, and parent-child relationships. This lets the administrator pinpoint which service or call in the chain is adding latency. Centralized logging aggregates logs but does not natively reconstruct cross-service request paths with timing.

Answer

Centralized logging service

Answer

Vulnerability assessment tool

Answer

Audit logging service

Question 5

A company uses Azure and wants to set up an alert that triggers when the average CPU of a virtual machine exceeds 90% for the past 15 minutes. The alert should send an email to the operations team. Which Azure resources are needed?

Accepted Answer

Azure Monitor metric alert and action group with email. Azure Monitor metric alerts evaluate metrics like CPU percentage against thresholds, and action groups define the notification channels (e.g., email). To alert when average CPU exceeds 90% for 15 minutes, you create a metric alert rule with a 15-minute aggregation window and attach an action group configured to send email to the operations team. This is the native, minimal-resource approach.

Answer

Azure Log Analytics and Logic App

Answer

Azure Advisor recommendation

Answer

Azure Service Health alert

Question 6

A company wants to reduce costs by identifying underutilized EC2 instances. Which tool should they use to get rightsizing recommendations?

Accepted Answer

AWS Compute Optimizer. AWS Compute Optimizer is specifically designed to analyze resource utilization and provide rightsizing recommendations for EC2 instances, among other resources. It uses machine learning to identify underutilized instances and suggests optimal instance types, helping reduce costs.

Answer

AWS Cost Explorer

Answer

AWS Trusted Advisor

Answer

AWS Budgets

Question 7

A cloud administrator needs to monitor CPU utilization of a group of virtual machines and automatically add more instances when utilization exceeds 80% for 5 minutes. Which cloud service should the administrator use to define this scaling policy?

Accepted Answer

Auto scaling service. An auto scaling service is purpose-built to define scaling policies based on metrics such as CPU utilization, with thresholds and duration windows (e.g., >80% for 5 minutes) that trigger adding or removing instances. It integrates with CloudWatch-style alarms and launch templates to automatically adjust capacity.

Answer

Configuration management service

Answer

Audit logging service

Answer

Systems management service

Question 8

An organization wants to ensure that only authorized personnel can access the cloud management console. Which of the following is the BEST method to achieve this?

Accepted Answer

Enable multi-factor authentication (MFA) for all console users.. Multi-factor authentication (MFA) is the best method because it adds an additional layer of security beyond just a password, requiring a second factor (e.g., a time-based one-time password from an authenticator app or a hardware token). This significantly reduces the risk of unauthorized access even if credentials are compromised, as the attacker would also need the second factor. In cloud environments like AWS, Azure, or GCP, MFA is a fundamental security best practice for protecting the management console.

Answer

Implement strong password policies with complex passwords.

Answer

Disable the web console and require API access only.

Answer

Restrict console access to a specific IP address range.

Question 9

A cloud administrator needs to set up a centralized logging solution to collect logs from multiple projects. Which cloud service should be used?

Accepted Answer

Logging service. A centralized logging service is designed to aggregate, store, and analyze log data from multiple sources, including multiple projects. In cloud environments, this is typically a dedicated logging service (such as Google Cloud Logging, AWS CloudWatch Logs, or Azure Monitor Logs) that can collect logs across projects and provide querying and retention. Option B is the correct choice.

Answer

Monitoring service

Answer

Serverless function service

Answer

Audit logs service

Question 10

A cloud administrator wants to analyze network traffic to troubleshoot connectivity issues between VMs. Which feature should be enabled?

Accepted Answer

Network flow logs. Network flow logs capture metadata about IP traffic (source/destination IP, ports, protocol, bytes, packets, accept/reject) flowing through cloud network interfaces, subnets, or VPCs. This data is exactly what an administrator needs to troubleshoot connectivity issues between VMs, such as identifying blocked ports or asymmetric routing. Flow logs are available in AWS VPC Flow Logs, Azure NSG Flow Logs, and GCP VPC Flow Logs.

Answer

Audit logging service

Answer

Distributed tracing service

Answer

Configuration compliance service

Question 11

A company wants to reduce cloud costs for a stateless batch processing workload that runs nightly for about 3 hours. The workload can tolerate interruptions. Which pricing model is most cost-effective?

Accepted Answer

Spot instances. Spot instances offer up to 90% discounts compared to on-demand and are ideal for interruptible, stateless batch workloads. Since the workload runs nightly for about 3 hours and can tolerate interruptions, spot instances provide the lowest cost without requiring long-term commitments. This matches the cost-effectiveness requirement precisely.

Answer

Reserved instances

Answer

Dedicated hosts

Answer

On-demand instances

Question 12

A cloud administrator is designing an auto-scaling policy for a web application that experiences predictable traffic spikes during business hours. The administrator wants to ensure that the application scales out before the start of business hours to avoid performance degradation. Which scaling policy type should be used?

Accepted Answer

Scheduled scaling. Scheduled scaling allows scaling actions at specific times (e.g., before business hours).

Answer

Manual scaling

Answer

Dynamic scaling

Answer

Predictive scaling

Question 13

A cloud administrator is managing a hybrid cloud environment where on-premises servers connect to a public cloud VPC via a site-to-site VPN. Users report intermittent connectivity issues to cloud resources. The administrator examines the VPN tunnel logs and sees 'Phase 2 negotiation failed' errors. Which of the following is the MOST likely cause?

Accepted Answer

Mismatched encryption domain definitions (traffic selectors) between on-premises and cloud VPN gateways.. Phase 2 negotiation failures in IPsec VPNs indicate that the two gateways cannot agree on the security associations (SAs) for encrypting data traffic. This is most commonly caused by mismatched encryption domain definitions (traffic selectors), such as differing local/remote subnets, protocols, or ports. When the on-premises and cloud VPN gateways define the allowed traffic differently, they cannot establish the Phase 2 SA, leading to intermittent connectivity.

Answer

Dead Peer Detection (DPD) is disabled on one side.

Answer

Incorrect pre-shared key used for the VPN tunnel.

Answer

Packet loss due to high latency on the internet link.

Question 14

A company wants to implement automated patching for their Windows and Linux servers in AWS. They need to schedule patching during a maintenance window and have a rollback plan. Which service should they use?

Accepted Answer

AWS Systems Manager Patch Manager. AWS Systems Manager Patch Manager automates the process of patching fleets of Windows and Linux servers. It allows you to define patch baselines, schedule patching during maintenance windows, and even roll back patches if needed, making it the ideal service for this requirement.

Answer

AWS OpsWorks

Answer

AWS Config

Answer

Amazon Inspector

Question 15

A cloud administrator is troubleshooting a performance issue where an application running on a VM in a private cloud is experiencing high latency. The VM is connected to a virtual switch that uses SR-IOV. The administrator suspects network bottlenecks. Which of the following is the MOST likely cause of the latency?

Accepted Answer

The physical network interface card (NIC) is saturated.. SR-IOV allows a physical NIC to present multiple virtual functions (VFs) directly to VMs, bypassing the virtual switch for data plane traffic. When the physical NIC reaches its bandwidth capacity, all VFs sharing that NIC experience increased latency and packet drops, making NIC saturation the most likely cause of the high latency.

Answer

The virtual switch is dropping packets due to buffer exhaustion.

Answer

The VM's virtual NIC is not using the correct driver.

Answer

The hypervisor's CPU is overloaded due to SR-IOV emulation.