CV0-004 Practice Exam 3 — 20 Questions

Question 1

A company is migrating a legacy application to the cloud. The application has a stateful design and requires low-latency access to a shared file system. The application must scale horizontally to handle increased load. Which THREE of the following architectural changes should be recommended to enable horizontal scaling?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Refactor the application to be stateless. Horizontal scaling requires that any instance can handle any request without depending on local state. By refactoring the application to be stateless, session data is externalized, allowing new instances to be added or removed without affecting ongoing transactions. This eliminates the coupling between a client and a specific server, which is essential for elastic scaling in cloud environments.

Answer

Increase the size of the existing virtual machines (vertical scaling)

Answer

Use sticky sessions (session affinity) on the load balancer

Question 2

A cloud engineer needs to ensure that an auto-scaling group does not launch new instances immediately after a scale-in event to allow metrics to stabilize. Which feature should they configure?

Accepted Answer

Cooldown periods. Cooldown periods prevent premature scaling by allowing metrics to stabilize.

Answer

Health checks

Answer

Scheduled scaling

Answer

Lifecycle hooks

Question 3

A company is experiencing high latency in their cloud-based database. The database is provisioned with SSD storage. Which THREE factors should the administrator investigate? (Choose three.)

Accepted Answer

Network bandwidth between application and database. Options A, B, and D are correct because network bandwidth limitations between application and database can cause high latency, unoptimized database queries increase response time, and exceeding IOPS limits leads to throttling and higher latency. Option C is incorrect because the number of database replicas primarily affects read throughput and fault tolerance, not latency directly. Option E is incorrect because region latency is a fixed infrastructure property that typically does not change suddenly, so it is less likely to be the cause of a sudden latency spike.

Answer

Number of database replicas

Answer

Region latency

Question 4

A company wants to implement automated patching for their cloud resources. Which TWO services are designed for patch management?

Accepted Answer

Azure Update Management. AWS Systems Manager Patch Manager and Azure Update Management are dedicated patch management services.

Answer

Amazon Inspector

Answer

GCP Cloud Audit Logs

Answer

AWS Config

Question 5

A KVM host has three VMs. The db-server VM is in a paused state. Which of the following is the most likely cause?

Accepted Answer

Storage I/O error on the VM disk. Storage I/O errors on the VM disk can cause the hypervisor to pause the VM to prevent data corruption. CPU overcommitment (Option B) typically leads to performance degradation, not pausing. Insufficient memory (Option C) can cause swapping or OOM, but not directly pausing. A network interface being down (Option D) would affect connectivity, not cause the VM to enter a paused state.

Answer

CPU overcommitment on the host

Answer

Insufficient memory on the host

Answer

Network interface is down

Question 6

A global company runs a SaaS application in multiple cloud regions. They use DNS-based global load balancing to route users to the nearest region. Recently, users in Asia are experiencing high latency and timeouts. The administrator checks the health of the Asian region's resources and finds everything operational. Latency measurements from a monitoring tool show that traffic from Asian users is being routed to the European region. What should the administrator investigate first?

Accepted Answer

The latency-based routing policy. The latency-based routing policy. Since the Asian region's resources are operational but traffic is being routed to Europe, the issue is likely that the latency-based routing policy is misconfigured or not accurately measuring latency from Asian users. This policy uses latency measurements to route users to the closest region; if it's flawed, traffic may be sent to a distant region. Investigate the latency routing policy first. Option B (DNS TTL) affects caching duration, not routing decisions. Option C (geo-location records) is used for geographic routing, not latency-based routing. Option D (load balancer in Asia) is operational, so the problem is at the DNS level, not the load balancer.

Answer

The DNS TTL settings

Answer

The geo-location records in the DNS provider

Answer

The load balancer configuration in the Asian region

Question 7

A company is migrating on-premises workloads to a public cloud. The disaster recovery plan requires an RTO of 15 minutes and an RPO of 5 minutes. Which replication strategy should be used for a critical database?

Accepted Answer

Continuous replication to a standby instance in another region. Continuous replication with synchronous or near-synchronous updates can achieve very low RPO (minutes) and low RTO. Cross-region replication may have higher latency, and snapshot-based backup typically has higher RPO and RTO.

Answer

Weekly full backups with daily incrementals stored in the same region

Answer

Scheduled snapshots every hour with cross-region copy

Answer

Daily snapshots replicated cross-region

Question 8

A cloud administrator is troubleshooting a connectivity issue between two VPCs in the same region. Which TWO actions should the administrator verify? (Choose two.)

Accepted Answer

VPC peering connection status. The correct answers are A and B. The VPC peering connection must be in the 'active' state (A), and the route tables in both VPCs must have routes pointing to the peering connection (B). Security group rules (C) are not the primary check because security groups are stateful and allow return traffic by default; they can be configured to block traffic but are not the first thing to verify in this scenario. VPN tunnel configuration (D) is a different connectivity method. Internet gateway attachment (E) is for internet access, not VPC peering.

Answer

Security group rules

Answer

VPN tunnel configuration

Answer

Internet gateway attachment

Question 9

A company is deploying a critical application in the cloud and needs to ensure that it can automatically recover from an intent—a failure of an entire cloud provider region. Which of the following architectures should be implemented?

Accepted Answer

Active-passive deployment across two regions with DNS-based failover. An active-passive deployment across two regions with DNS-based failover ensures that if one entire region fails, traffic is routed to the passive region, providing disaster recovery at the region level. Option B is wrong because multiple availability zones within a single region cannot survive the failure of the entire region. Option C is wrong because auto-scaling groups in a single region do not protect against region failure. Option D is wrong because active-active across AZs within one region also cannot survive a region-level failure.

Answer

Active-passive deployment across multiple availability zones in the same region

Answer

Single-region deployment with auto-scaling groups

Answer

Active-active deployment across multiple availability zones in the same region

Question 10

A cloud operations team wants to implement automated patching for their fleet of virtual machines. They need to minimize disruption during business hours and ensure that critical security patches are applied within 48 hours of release. The team also requires a rollback plan in case a patch causes issues. Which THREE actions should the team take? (Choose three.)

Accepted Answer

Define maintenance windows that occur during off-peak hours.. Automated patching requires defining maintenance windows to avoid disruption, enabling automated patching tools like AWS Systems Manager Patch Manager, and having a rollback procedure in place. Testing patches in a staging environment first is wise but not a direct action for the described requirements.

Answer

Disable automatic updates to maintain control over patch deployment.

Answer

Apply all patches immediately upon release regardless of maintenance windows.

Question 11

During a scheduled DR drill, the cloud team fails over a critical application to the secondary region. After the drill, the application is failed back. The application's RTO was 2 hours, but the actual failover took 2.5 hours. Which action should be taken to improve future failover times?

Accepted Answer

Automate the failover process using infrastructure as code and runbooks. Failing the RTO indicates the process is not meeting the target. Automating the failover process with scripts or runbooks reduces manual steps and time. Rehearsing the process more often also helps but automation directly reduces time.

Answer

Increase the frequency of DR drills

Answer

Increase the bandwidth between regions for data replication

Answer

Reduce the RTO to 1 hour to force faster execution

Question 12

A company uses AWS and wants to analyze cost trends and identify the top services contributing to monthly spending. Which AWS tool provides a pre-built dashboard for this purpose?

Accepted Answer

AWS Cost Explorer. AWS Cost Explorer provides pre-built reports and dashboards for cost trend analysis.

Answer

AWS Trusted Advisor

Answer

AWS Compute Optimizer

Answer

AWS Budgets

Question 13

An organization wants to track cloud costs by project and environment (development, testing, production). Which strategy should be employed for cost attribution?

Accepted Answer

Implement a tagging strategy for resources with Environment and Project tags. Tagging resources with key-value pairs (e.g., Project, Environment) enables cost allocation reports. Billing alerts and budgets help manage costs but not attribution.

Answer

Set up billing alerts for each account

Answer

Enable detailed billing reports with resource IDs

Answer

Use AWS Budgets to set spending limits per project

Question 14

A cloud engineer is troubleshooting a network connectivity issue between two subnets in a VPC. The engineer wants to capture and analyze traffic metadata to identify dropped packets. Which TWO tools can provide this information? (Select TWO.)

Accepted Answer

AWS Network Firewall logs. VPC Flow Logs capture metadata about IP traffic going to and from network interfaces. AWS X-Ray provides distributed tracing but for application-level requests, not raw network traffic. AWS CloudTrail logs API calls, not traffic.

Answer

AWS X-Ray

Answer

Amazon CloudWatch Logs

Answer

AWS CloudTrail

Question 15

A company uses AWS and wants to implement a disaster recovery plan with an RTO of 4 hours and RPO of 1 hour. They have a primary site in us-east-1 and a DR site in us-west-2. The application data is stored in Amazon RDS for MySQL. Which strategy meets both RTO and RPO with minimal data loss?

Accepted Answer

Create a cross-region read replica in us-west-2 and promote it during failover.. Cross-region read replicas for Amazon RDS provide asynchronous replication with a typical RPO of less than 5 minutes, easily meeting the 1-hour requirement. In a disaster, you can promote the replica to a primary instance within minutes, meeting the 4-hour RTO.

Answer

Use AWS Database Migration Service (DMS) for continuous replication to a separate RDS instance in us-west-2.

Answer

Export data to S3 using AWS Backup and restore in us-west-2.

Answer

Take daily automated snapshots of the RDS instance and copy them to us-west-2.

Question 16

A cloud engineer is configuring an auto-scaling policy for a batch processing application that takes about 10 minutes to initialize before it can start processing jobs. To avoid premature termination of instances that have just started, what should the engineer configure?

Accepted Answer

Use a lifecycle hook to put the instance in a 'wait' state until initialization is complete. A lifecycle hook can put instances in a pending state until they complete initialization. Cooldown periods prevent scaling actions but do not prevent termination of new instances.

Answer

Disable scale-in for the first 10 minutes using a scheduled action

Answer

Set the health check grace period to 600 seconds

Answer

Increase the cooldown period to 600 seconds

Question 17

A cloud administrator wants to be notified immediately via email when a critical alert is triggered. Which notification channel should they configure?

Accepted Answer

Email. Email is a typical notification channel for alerts.

Answer

AWS Config

Answer

Amazon SNS

Answer

AWS CloudTrail

Question 18

A cloud administrator needs to view the console output of a VM that failed to boot. Which feature should they use to access the boot logs?

Accepted Answer

Console output / serial console. Cloud providers offer console output or serial console access to view boot logs. Screenshots are also available but console output is the direct log. CloudWatch Logs might capture logs if the OS sends them, but for boot issues, console output is the native method.

Answer

CloudWatch Logs agent

Answer

VM screenshot

Answer

System log from the hypervisor

Question 19

A cloud administrator is investigating a sudden increase in cost for a production environment. The administrator wants to identify the sources of the cost increase and implement a tagging strategy for cost allocation. Which TWO actions should the administrator take? (Choose two.)

Accepted Answer

Use the cloud provider's cost explorer to analyze cost drivers.. To identify cost sources and improve allocation, the administrator should use the cloud provider's cost explorer (e.g., AWS Cost Explorer) to analyze usage and costs, and implement a tagging strategy with environment and project tags for granular cost attribution.

Answer

Implement a rightsizing recommendation report.

Answer

Purchase Reserved Instances for all resources.

Answer

Create a budget alert for the total monthly cost.

Question 20

An organization wants to receive notifications in a Slack channel when a new VM instance is created. Which combination of cloud services should be used?

Accepted Answer

Logging service log-based metric and event-driven function with webhook. A logging service can trigger an event-driven function via a log-based metric when a VM is created, and the function sends a message to Slack via webhook.

Answer

Monitoring alert policy with Slack notification channel

Answer

Scheduler and event-driven function

Answer

Pub/sub messaging service and container service