CV0-004 Practice Test 21 — 15 Questions

Question 1

Refer to the exhibit. A cloud administrator sees this log after a nightly backup job. Which of the following is the most likely cause of the timeout?

Accepted Answer

The volume has a high I/O load during the snapshot.. Option B is correct because high I/O load on the volume during the snapshot can cause the snapshot creation to exceed the timeout. Option A is incorrect because a powered-off instance does not affect snapshot creation. Option C is incorrect because the timeout is for creation, not transfer to another region. Option D is incorrect because a missing backup agent would generate a different error.

Answer

The volume is attached to an instance that is powered off.

Answer

The snapshot target region is unreachable.

Answer

The backup agent is not installed.

Question 2

Refer to the exhibit. A cloud administrator is trying to retrieve a secret from a cloud secrets manager using a script with an access key and secret key. The script returns the error shown. The keys were newly created. What is the most likely cause?

Accepted Answer

The access key is not activated or has a propagation delay.. Option D is correct. Newly created access keys may have a propagation delay and are not immediately active. Options A, B, and C would yield different error messages.

Answer

The secret is encrypted with a different KMS key.

Answer

The script is using the wrong region.

Answer

The secret does not exist.

Question 3

A cloud administrator receives an alert that the CPU utilization on a production web server has exceeded 90% for the past hour. The administrator checks the metrics and sees that the request rate has increased. Which of the following is the MOST appropriate action to resolve the issue in the short term?

Accepted Answer

Increase the number of vCPUs or add additional instances behind a load balancer.. Option A is correct because adding more compute resources allows the server to handle the increased load. Option B is wrong because increasing memory may not help CPU-bound issues. Option C is wrong because optimizing code is a long-term solution. Option D is wrong because throttling requests degrades user experience.

Answer

Increase the memory allocation for the virtual machine.

Answer

Implement rate limiting to reduce incoming requests.

Answer

Optimize the application code to reduce CPU usage.

Question 4

Which TWO of the following are best practices for managing cloud costs? (Select TWO.)

Accepted Answer

Implementing resource tagging for cost allocation. Options B and D are correct. Option B is correct because tagging resources allows tracking costs by project. Option D is correct because using reserved instances reduces costs for predictable workloads. Option A is wrong because manual shutdown is error-prone; automation is better. Option C is wrong because overprovisioning increases costs. Option E is wrong because multiple environments require separate management for cost control.

Answer

Consolidating all environments into a single subscription

Answer

Overprovisioning resources to ensure high performance

Answer

Manually stopping idle virtual machines

Question 5

Which THREE are common causes of network latency in a cloud environment? (Choose three.)

Accepted Answer

Firewall rule misconfiguration. Options A, B, and E are correct. Jumbo frame misconfiguration (A) causes fragmentation or mismatch, leading to latency. Packet loss (B) triggers retransmission delays. Firewall rule misconfiguration (E) can cause additional processing or drops. Option C (high bandwidth utilization) typically causes congestion only if capacity is exceeded, but not always latency. Option D (DNS resolution delays) affects initial connections but not ongoing latency.

Answer

DNS resolution delays

Answer

High bandwidth utilization

Question 6

A company deployed a web application on an EC2 instance in a public subnet. The instance passes status checks and has a public IP address. The security group allows HTTP (80) from 0.0.0.0/0. Users report that the website is not accessible. What should the administrator check next?

Accepted Answer

The network ACL inbound rules.. Option A is correct because network ACLs are stateless and can block traffic even if the security group allows it. Options B, C, and D are less likely or secondary steps.

Answer

The route table for the subnet.

Answer

The instance's operating system firewall.

Answer

The instance's user data script.

Question 7

A cloud administrator notices that a virtual machine has been running for 180 days without a reboot. The administrator needs to install critical security patches that require a reboot. Which of the following actions should the administrator take FIRST?

Accepted Answer

Check for existing snapshots and create a new snapshot.. Option B is correct because checking for snapshots ensures that the VM can be rolled back if the patching fails. Option A is wrong because pausing the VM is not necessary before checking snapshots. Option C is wrong because migrating to another host is a later step. Option D is wrong because shutting down before checking snapshots risks losing state.

Answer

Pause the virtual machine before applying patches.

Answer

Shut down the virtual machine and apply patches offline.

Answer

Migrate the virtual machine to a different host to avoid disruption.

Question 8

A cloud engineer is troubleshooting a connectivity issue between two virtual networks in different regions. The engineer has verified that the virtual networks are peered and the routing tables are correct. Which of the following is the MOST likely cause of the issue?

Accepted Answer

A network security group blocking the traffic. Option B is correct because network security groups (NSGs) or firewall rules can block traffic even if routing is correct. Option A is wrong because DNS is not directly involved in the connectivity. Option C is wrong because the issue is between virtual networks, not a physical cable. Option D is wrong because the engineer already verified routing.

Answer

Incorrect route tables on the virtual network gateway

Answer

A physical cable disconnection in the datacenter

Answer

Incorrect DNS resolution

Question 9

A cloud administrator is tasked with ensuring that a cloud database is backed up daily. The backup must be stored off-site for disaster recovery. Which of the following is the most cost-effective solution?

Accepted Answer

Schedule a backup to an object storage bucket in a different region.. Option D is correct because object storage in a different region is cost-effective and provides off-site storage. Option A is expensive and slow. Option B is replication, not backup. Option C is on-site, not off-site.

Answer

Perform a full backup to tape and store off-site.

Answer

Perform incremental backups to a local network share.

Answer

Use snapshot replication to a different region.

Question 10

Refer to the exhibit. A cloud administrator runs this command on a VM. Which of the following is most likely causing the high 'wa' value?

Accepted Answer

Disk I/O bottleneck. Option C is correct because a high 'wa' (wait) value in vmstat indicates that the CPU is waiting for I/O operations to complete, pointing to a disk I/O bottleneck. Option A (insufficient memory) would show high swapping activity or high si/so values. Option B (high CPU load) would show high us or sy. Option D (network congestion) is not directly indicated by this metric.

Answer

Network congestion

Answer

High CPU load

Answer

Insufficient memory

Question 11

Refer to the exhibit. A cloud administrator is troubleshooting why an EC2 instance in subnet-12345678 cannot be reached from the internet. The instance has a public IP and the security group allows all inbound traffic. Based on the exhibit, what is the most likely cause?

Accepted Answer

The network ACL is misconfigured and blocking all inbound traffic.. Option B is correct. The network ACL associated with the subnet has an inbound deny rule for all traffic, blocking access despite the security group. Options A, C, and D are not supported by the exhibit.

Answer

The security group is not applied.

Answer

The route table is missing a default route to the internet gateway.

Answer

The instance is stopped.

Question 12

A cloud administrator notices that a virtual machine in a public cloud is running slower than expected. The VM is part of a production web application. The administrator has verified that the VM's CPU and memory utilization are below 50%. What should the administrator check next?

Accepted Answer

Check the network bandwidth and I/O throttling limits.. Since CPU and memory are not maxed out, the bottleneck is likely I/O or network throttling. Checking network bandwidth and I/O limits is the next logical step.

Answer

Migrate the VM to a different availability zone.

Answer

Increase the VM's vCPU count.

Answer

Reboot the VM.

Question 13

A cloud operations team is analyzing a security incident in which an unauthorized user accessed a storage bucket. The bucket was configured with public access. Which three best practices should the team implement to prevent such incidents in the future? (Select THREE).

Accepted Answer

Enable access logging and monitor logs.. Implementing least privilege, denying public access, and enabling access logging help prevent and detect unauthorized access.

Answer

Enable encryption on the storage bucket.

Answer

Enable versioning on the bucket.

Question 14

Which TWO of the following are benefits of using a content delivery network (CDN) with cloud-hosted applications? (Choose two.)

Accepted Answer

Reduces load on the origin server. Options B and E are correct. CDN reduces latency by caching content at edge locations (B) and reduces origin server load (E). Option A is wrong because CDN typically increases complexity, not simplifies. Option C is wrong: CDN may add cost. Option D is wrong: security is not inherently increased; CDN can provide DDoS protection but is not a built-in benefit.

Answer

Simplifies application architecture

Answer

Eliminates the need for HTTPS encryption

Answer

Lowers overall infrastructure cost

Question 15

An organization uses a cloud management platform (CMP) to orchestrate resources across multiple cloud providers. The CMP has a policy that automatically terminates any VM that exceeds 85% CPU utilization for more than 15 minutes. The operations team receives complaints that some VMs are being terminated while performing legitimate batch processing jobs. What should the operations team do to resolve this issue?

Accepted Answer

Add an exclusion list for known batch processing VMs.. Option C is correct because adding an exclusion list for known batch processing VMs prevents unnecessary termination without disabling the entire policy. Option A is wrong because disabling the policy removes important auto-healing. Option B is wrong because increasing thresholds may still affect long-running batch jobs. Option D is wrong because creating a separate group is more complex than simply excluding specific VMs.

Answer

Create a separate VM group with a different policy that allows higher CPU for longer.

Answer

Disable the automatic termination policy.

Answer

Increase the CPU threshold to 95% and extend the duration to 30 minutes.

CV0-004 Practice Test 21 — 15 Questions

Exhibit

CV0-004 Practice Test 21 — 15 Questions

Exhibit