CV0-004 Practice Test 21 — 15 Questions

Question 1

A company is migrating 200 TB of archival data from on-premises storage to Amazon S3. The network bandwidth is limited to 100 Mbps. Which AWS service should be used to accelerate the transfer and reduce the migration time?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

AWS Snowball. AWS Snowball is a physical device for offline data transfer. For large datasets with limited bandwidth, Snowball can transfer data faster by shipping the device, bypassing network constraints.

Answer

AWS DataSync

Answer

S3 Transfer Acceleration

Answer

AWS Direct Connect

Question 2

A company is deploying a global web application and wants to reduce latency for users around the world. The application serves static content (images, CSS) and dynamic API responses. Which combination of services should the architect use?

Accepted Answer

CDN for static content and a global load balancer with latency-based routing for dynamic content. CDN caches static content at edge locations, reducing latency. For dynamic content, a global load balancer with latency-based routing directs users to the closest region. DNS alone cannot reduce latency for dynamic content. A single load balancer does not provide global distribution.

Answer

CDN for all content without backend routing

Answer

A single load balancer in one region with a CDN

Answer

DNS round-robin for both static and dynamic content

Question 3

An organization needs to store archival data for 7 years to meet compliance requirements. The data is rarely accessed, and retrieval time is not critical. Which cloud storage type is most cost-effective?

Accepted Answer

Archive storage. Archive storage (e.g., AWS Glacier, Azure Archive) is designed for long-term, infrequently accessed data at the lowest cost. Block storage is for VMs. Object storage is for frequent access. File storage is for shared file systems.

Answer

Block storage

Answer

File storage

Answer

Object storage

Question 4

A cloud engineer is designing a CI/CD pipeline using Azure DevOps. They need to ensure that code changes are automatically built, tested, and deployed to a staging environment, and then after manual approval, deployed to production. Which pipeline configuration should they use?

Accepted Answer

Multi-stage pipeline with environment approvals on the production stage. Azure DevOps multi-stage pipelines allow defining stages such as build, test, and deploy, with gates and approvals. An approval gate on the production stage ensures manual review before deployment.

Answer

Single stage pipeline with conditional deployment

Answer

Release pipeline with continuous deployment trigger

Answer

Build pipeline only

Question 5

A company is designing a disaster recovery plan for its critical application. The application must be recovered within 4 hours (RTO) and can tolerate up to 1 hour of data loss (RPO). Which replication strategy is most cost-effective?

Accepted Answer

Asynchronous replication. Asynchronous replication meets the RPO of 1 hour (data loss up to 1 hour) and can be lower cost than synchronous replication, which requires high bandwidth. Synchronous replication would be more expensive and unnecessary. No replication would not meet RPO. Daily backups would exceed RPO.

Answer

No replication; rely on backups restored from archive

Answer

Synchronous replication

Answer

Daily snapshots with no replication

Question 6

A company is designing a hybrid cloud architecture. They need to ensure high availability for a critical application. Which TWO of the following are best practices for achieving high availability in a hybrid cloud environment?

Accepted Answer

Implement an active-active architecture across on-premises and cloud. Using multiple availability zones within a region protects against data center failure. An active-active architecture ensures both on-premises and cloud are handling traffic, providing redundancy. Deploying in a single zone creates a single point of failure. Using only on-premises does not leverage cloud for HA. A single load balancer is a SPOF.

Answer

Rely solely on on-premises infrastructure with cloud as a backup

Answer

Use a single load balancer to route all traffic

Answer

Deploy the application in a single availability zone to reduce complexity

Question 7

An organization is implementing a canary deployment strategy for a microservice running on Kubernetes. The deployment should automatically roll back if the error rate exceeds 2% within the first 5 minutes. Which THREE components are essential for implementing this strategy? (Choose three.)

Accepted Answer

Service mesh (e.g., Istio, Linkerd). To implement canary with automatic rollback, you need a traffic split mechanism (service mesh), monitoring (Prometheus), and progressive delivery tool (Flagger).

Answer

Horizontal Pod Autoscaler

Answer

Kubernetes Service with label selectors

Question 8

An organization uses AWS CloudFormation to deploy resources across multiple AWS accounts. They need to manage a common set of resources in several accounts from a single template. Which CloudFormation feature should they use?

Accepted Answer

StackSets. StackSets allow deploying stacks across multiple accounts and regions. Change sets show changes before execution; Drift Detection detects configuration drift; Nested stacks are for reusability within a single account.

Answer

Change sets

Answer

Nested stacks

Answer

Drift Detection

Question 9

Users are unable to load a web page on a newly deployed web server. The security group for the server allows inbound HTTP from 0.0.0.0/0. The web service is running and listening on port 80. Which of the following is the MOST likely cause?

Accepted Answer

The web server is listening on the wrong IP address.. If the web server is listening on an IP address other than the one clients are reaching (e.g., 127.0.0.1 or a different private IP), inbound HTTP requests will not be processed even though the security group allows traffic on port 80. This is a common misconfiguration where the server binds to a loopback or incorrect interface, causing it to ignore external packets.

Answer

The DNS record for the domain is not yet propagated.

Answer

The VM's firewall is blocking inbound requests on port 80.

Answer

The load balancer target group is unhealthy.

Question 10

A cloud architect is designing a highly available web application on AWS. The application must continue serving traffic even if an entire AWS Availability Zone fails. Which architecture should the architect implement?

Accepted Answer

Active-active across two Availability Zones. Active-active architecture across multiple Availability Zones ensures that if one zone fails, traffic is routed to the remaining healthy zones, providing high availability.

Answer

Active-passive in a single Availability Zone

Answer

Vertical scaling on a single instance

Answer

Active-passive across two regions

Question 11

A company is using AWS and wants to minimize costs for a batch processing workload that runs for 2 hours every night. The workload can tolerate interruptions. Which pricing model should the company choose?

Accepted Answer

Spot instances. Spot instances offer significant discounts and are suitable for fault-tolerant, interruptible workloads. The workload's short duration and tolerance for interruption make spot instances ideal for cost savings.

Answer

Dedicated hosts

Answer

Reserved instances

Answer

On-demand instances

Question 12

Which cloud service model provides the customer with the highest level of control over the operating system and middleware?

Accepted Answer

IaaS. IaaS provides virtualized computing resources where the customer manages the OS, middleware, and applications, offering the highest control among the three main service models.

Answer

PaaS

Answer

FaaS

Answer

SaaS

Question 13

A company is using AWS and wants to minimize egress costs for data transferred out to the internet. Which strategy would be most effective?

Accepted Answer

Implement a CDN to cache content at edge locations. Using a CDN caches content at edge locations, reducing the amount of data transferred directly from the origin to users, thus lowering egress costs.

Answer

Use a VPN to encrypt traffic

Answer

Migrate to a different region with lower egress prices

Answer

Use a larger instance type to reduce data transfer

Question 14

A company uses AWS and Azure to run identical workloads for redundancy. They want to simplify management by using a single set of tools across both clouds. Which architectural approach should they consider?

Accepted Answer

Multi-cloud using a cloud-agnostic orchestration tool. Multi-cloud with a cloud-agnostic abstraction layer (e.g., using Terraform or Kubernetes) allows managing resources across providers with a unified toolset.

Answer

Use each provider's native management tools

Answer

Single cloud migration to one provider

Answer

Hybrid cloud using VPN between AWS and Azure

Question 15

A cloud engineer is deploying a web application that requires SSL termination and content-based routing. Which type of load balancer should be used?

Accepted Answer

Application Load Balancer. An Application Load Balancer (layer 7) can perform SSL termination and route based on content such as URL paths or host headers.

Answer

Gateway Load Balancer

Answer

Classic Load Balancer

Answer

Network Load Balancer