CV0-004 Practice Test 2 — 10 Questions

Question 1

A cloud engineer needs to collect and query log data from multiple cloud services in a centralized location. Which cloud service should be used for centralized log management?

Accepted Answer

Logging service. A dedicated logging service is designed to ingest, store, and query log data from multiple sources in a centralized location, providing search, filtering, and retention capabilities. It is the purpose-built tool for centralized log management, unlike audit logging (which captures specific compliance events) or monitoring (which focuses on metrics and alerts).

Answer

Audit logging service

Answer

Monitoring service

Answer

Storage service

Question 2

A cloud engineer wants to be notified when the average CPU utilization of an auto-scaling group exceeds 80% for 5 minutes. Which alerting mechanism should be used?

Accepted Answer

AWS CloudWatch Alarm. AWS CloudWatch Alarms are purpose-built to watch a metric (like the Average CPUUtilization of an Auto Scaling group) and trigger actions when a threshold is breached for a defined number of evaluation periods. Configuring an alarm with a threshold of 80%, a period of 300 seconds, and the appropriate statistic/datapoints-to-alarm directly satisfies the 'exceeds 80% for 5 minutes' requirement. Alarms can then notify via SNS, trigger Auto Scaling, or invoke actions.

Answer

AWS Systems Manager OpsCenter

Answer

AWS Config rule

Answer

AWS Trusted Advisor

Question 3

Refer to the exhibit. A cloud administrator runs this command on a VM. Which of the following is most likely causing the high 'wa' value?

Accepted Answer

Disk I/O bottleneck. The 'wa' value in the output of the 'top' or 'vmstat' command represents the percentage of time the CPU spends waiting for I/O operations to complete. A high 'wa' value indicates that the CPU is frequently idle because it is waiting for data from storage devices, which is a classic symptom of a disk I/O bottleneck. This occurs when the storage subsystem cannot keep up with the read/write requests from the VM, causing the CPU to stall.

Answer

Network congestion

Answer

High CPU load

Answer

Insufficient memory

Question 4

A company uses a multi-cloud strategy with both AWS and Azure. The cloud operations team needs to centrally monitor all cloud resources and receive alerts when resource usage exceeds predefined thresholds. Which of the following solutions should the team implement?

Accepted Answer

A third-party monitoring tool that supports both AWS and Azure. A third-party monitoring tool (e.g., Datadog, Splunk, or Dynatrace) can natively ingest metrics and logs from both AWS and Azure APIs, providing a single pane of glass for alerting across a multi-cloud environment. This avoids the vendor lock-in and integration gaps that arise when using native tools from only one cloud provider.

Answer

Azure Monitor with Log Analytics

Answer

AWS CloudWatch with cross-account monitoring

Answer

Custom scripts that log to a central syslog server

Question 5

A cloud administrator needs to perform a disaster recovery test for a critical application running in a different AWS region. The RTO is 1 hour, and the RPO is 15 minutes. Which replication strategy should be used to meet the RPO?

Accepted Answer

Continuous replication. Continuous replication replicates data continuously, so the recovery point objective (RPO) — the maximum acceptable data loss — can be as low as seconds or minutes, meeting the 15-minute requirement. Snapshot-based approaches at hourly or daily intervals cannot meet a 15-minute RPO.

Answer

Hourly snapshot-based replication

Answer

Daily snapshot-based replication

Answer

Cross-region replication with eventual consistency

Question 6

A security administrator is configuring a Web Application Firewall (WAF) to protect a public-facing web application. The application experiences a high volume of traffic from certain geographic regions that are not serving customers. Which WAF feature should be used to block this traffic?

Accepted Answer

Geo-blocking. Geo-blocking allows the WAF to block or allow traffic based on geographic location, reducing unwanted traffic and potential attacks.

Answer

Rate limiting

Answer

OWASP rule set

Answer

IP reputation lists

Question 7

A cloud administrator receives reports that a newly deployed application stack fails health checks and is repeatedly replaced by the orchestrator. Logs show the container starts, then exits after a few seconds with no error. The container image runs a process that daemonizes and returns control to the shell. Which of the following is the MOST likely cause?

Accepted Answer

The container's main process forks into the background, so the runtime sees the foreground process exit and stops the container.. Container lifecycle is bound to the foreground process. When the entrypoint backgrounds the application and returns, the runtime sees the main process complete and stops the container, so the orchestrator repeatedly recreates it. Running the server in the foreground or using a process supervisor keeps the container alive and allows health checks to succeed.

Answer

The orchestrator's restart policy is set to Always, causing healthy containers to be restarted.

Answer

The container image was built for the wrong CPU architecture and the kernel is killing the process.

Answer

The container's health check endpoint is returning 500 errors because the application is not fully initialized.

Question 8

A cloud administrator notices that a cloud-based web application is experiencing intermittent latency during peak hours. The application runs on an auto-scaling group of virtual machines behind a load balancer. Which of the following should the administrator investigate FIRST to resolve the issue?

Accepted Answer

Review the auto-scaling group's scaling policies and thresholds. The intermittent latency during peak hours is most likely caused by the auto-scaling group's scaling policies not reacting quickly enough or being set with thresholds that are too high, leading to insufficient capacity under load. Investigating the scaling policies and thresholds first directly addresses the root cause—whether the group is adding instances too slowly or at too high a utilization trigger—rather than symptoms like health checks or DNS. This aligns with the operational best practice of verifying capacity management before tuning network or load-balancer settings.

Answer

Enable SSL offloading on the load balancer

Answer

Verify the load balancer's health check interval

Answer

Check DNS resolution times for the application domain

Question 9

A cloud engineer is configuring a web application on AWS and needs to ensure that only HTTP and HTTPS traffic from the internet is allowed to reach the EC2 instances. Which AWS service should be used to control inbound traffic at the instance level?

Accepted Answer

Security Group. Security groups are stateful virtual firewalls that control inbound and outbound traffic at the instance level. Network ACLs operate at the subnet level and are stateless.

Answer

AWS Shield

Answer

AWS WAF

Answer

Network ACL

Question 10

A company uses a public cloud PaaS service to run a custom application. They need to ensure the application can handle increased load without downtime. Which action should they take?

Accepted Answer

Configure auto-scaling for the PaaS service. In a PaaS environment, the cloud provider manages the underlying infrastructure, so the customer cannot manually upgrade VMs. Auto-scaling is a built-in feature of many PaaS services that automatically adjusts resources based on demand, ensuring the application can handle increased load without downtime. This is the most appropriate action.

Answer

Deploy a load balancer in front of the application

Answer

Move to IaaS to gain more control over scaling

Answer

Upgrade the underlying virtual machines manually