CV0-004 Practice Test 19 — 15 Questions

Question 1

A company wants to minimize cloud costs for a batch processing job that runs for a few hours each night and can be interrupted. Which pricing model is most appropriate?

Accepted Answer

Spot instances. Spot/preemptible instances offer significant discounts but can be terminated if capacity is needed elsewhere, suitable for fault-tolerant and interruptible workloads.

Answer

Dedicated hosts

Answer

On-demand instances

Answer

Reserved instances

Question 2

A financial services firm requires low latency between on-premises resources and its public cloud VPC. They also need a dedicated, consistent network connection that bypasses the internet. Which connectivity option should they use?

Accepted Answer

Direct Connect / ExpressRoute. Direct Connect (AWS) or ExpressRoute (Azure) provides a dedicated private connection from on-premises to the cloud, offering lower latency and consistency compared to internet-based VPN.

Answer

Cloud CDN

Answer

Internet gateway

Answer

Site-to-Site VPN

Question 3

A company wants to migrate its on-premises virtualized workloads to the cloud while maintaining control over the operating system and middleware. Which cloud service model should they choose?

Accepted Answer

IaaS. IaaS provides virtual machines, storage, and networking, allowing the customer to manage the OS and above. PaaS abstracts the OS, SaaS delivers complete applications, and FaaS is for functions.

Answer

SaaS

Answer

FaaS

Answer

PaaS

Question 4

A cloud architect is evaluating a multi-cloud strategy to improve resilience. Which THREE factors should be considered when designing multi-cloud architecture? (Select THREE.)

Accepted Answer

Data transfer costs between clouds. Data transfer costs, consistent security policies, and application portability are key considerations. Vendor lock-in is reduced, not increased. Single API management is not typical for multi-cloud.

Answer

Increased vendor lock-in

Answer

Ability to manage all clouds with a single API

Question 5

A cloud architect is designing a VPC with three tiers: web, application, and database. Which subnet design provides the best security posture?

Accepted Answer

Web in public subnet, app and database in private subnets with appropriate routing. It follows the principle of least privilege and network segmentation. Placing the web tier in a public subnet allows it to receive internet traffic, while the application and database tiers reside in private subnets with no direct internet access. This design ensures that only the web tier is exposed, and the database is isolated, accessible only via the application tier through controlled routing, significantly reducing the attack surface.

Answer

Web and app in public subnets, database in private subnet

Answer

All tiers in private subnets with a VPN

Answer

All tiers in the same public subnet with security groups

Question 6

A company is designing stateless application tiers to support horizontal scaling. Which TWO design principles support statelessness? (Select TWO.)

Accepted Answer

Persist all application state in a shared database. Storing session state in an external cache or database makes the application stateless. Local storage is stateful. Sticky sessions break statelessness. Using configuration files per instance is stateful.

Answer

Store configuration files on each instance locally

Answer

Use local instance storage for session data

Answer

Use sticky sessions (session affinity) on the load balancer

Question 7

An organization wants to deploy a new application with zero downtime by switching traffic between two identical production environments. Which deployment strategy should be used?

Accepted Answer

Blue/green deployment. Blue/green deployment involves maintaining two identical environments; traffic is switched from the old (blue) to the new (green) environment via DNS or load balancer, enabling zero downtime.

Answer

Rolling deployment

Answer

Canary deployment

Answer

In-place deployment

Question 8

A cloud architect is designing a VPC for a three-tier web application. The web servers must be accessible from the internet, the application servers should only be reachable from the web tier, and the database servers should not have any public IP addresses and should be isolated. Which subnet design meets these requirements?

Accepted Answer

Web tier in public subnet, app tier in private subnet, database tier in a separate private subnet with no internet gateway. A typical three-tier architecture uses public subnets for web servers (with internet gateway), private subnets for application servers (with NAT for outbound if needed), and isolated database subnets with no internet access. Security groups/NACLs enforce traffic rules.

Answer

Web tier in public subnet, app and database tiers in the same private subnet

Answer

All servers in private subnets with a NAT gateway for inbound traffic

Answer

All servers in the same public subnet with security groups

Question 9

A company decides to use AWS for compute and Azure for storage to leverage best-of-breed services. This is an example of which cloud deployment model?

Accepted Answer

Multi-cloud. Multi-cloud refers to using multiple public cloud providers simultaneously.

Answer

Community cloud

Answer

Public cloud

Answer

Hybrid cloud

Question 10

A company runs a web application on AWS EC2 instances behind an Application Load Balancer. They want to handle traffic spikes automatically. Which scaling approach should they implement?

Accepted Answer

Auto-scaling. Auto-scaling adds or removes instances based on metrics like CPU utilization, handling traffic spikes automatically.

Answer

Vertical scaling

Answer

Manual scaling

Answer

Horizontal scaling

Question 11

A cloud administrator needs to provide a shared file system that can be accessed by multiple Linux-based virtual machines in the same VPC. Which storage type should be used?

Accepted Answer

File storage. File storage (e.g., Amazon EFS, Azure Files) provides a shared file system accessible via NFS or SMB, suitable for multiple VMs.

Answer

Object storage

Answer

Archive storage

Answer

Block storage

Question 12

A cloud architect is designing a solution for a financial analytics application that requires consistent, low-latency block storage for a database. The database will be deployed on a virtual machine in a public cloud. Which TWO storage types are appropriate for this requirement? (Select TWO.)

Accepted Answer

Block storage (EBS / Azure Disk). Block storage (e.g., Amazon EBS, Azure Disk) is designed for low-latency, consistent performance for databases running on VMs. Instance store provides temporary block-level storage physically attached to the host, offering very low latency but is ephemeral. Object storage is not suitable for databases due to latency.

Answer

File storage (EFS / Azure Files)

Answer

Archive storage

Answer

Object storage

Question 13

A DevOps team uses CloudFormation to manage multi-account infrastructure. They need to deploy a common set of resources across multiple AWS accounts in an organization. Which CloudFormation feature should they use?

Accepted Answer

Stack sets. CloudFormation StackSets allow you to deploy stacks across multiple accounts and regions from a single template, ideal for multi-account scenarios.

Answer

Nested stacks

Answer

Drift detection

Answer

Change sets

Question 14

A cloud engineer is designing a disaster recovery plan with an RTO of 2 hours and RPO of 15 minutes. Which strategy best meets these requirements?

Accepted Answer

Warm standby with continuous replication. A warm standby with replication keeps a scaled-down copy running, allowing recovery within hours and data loss limited to minutes.

Answer

Pilot light with hourly snapshots

Answer

Cold standby with daily backups

Answer

Active-active across regions

Question 15

Which cloud characteristic allows a user to provision additional resources automatically without requiring human intervention?

Accepted Answer

Rapid elasticity. Rapid elasticity enables automatic scaling of resources based on demand.

Answer

Measured service

Answer

Resource pooling

Answer

Broad network access