CV0-004 Practice Test 22 — 15 Questions

Question 1

Which cloud service model provides the customer with the ability to deploy and manage custom applications without managing the underlying operating system or runtime environment?

Accepted Answer

PaaS. PaaS provides a managed platform where customers deploy their code while the provider manages the OS, runtime, and infrastructure.

Answer

SaaS

Answer

IaaS

Answer

FaaS

Question 2

A company wants to ensure fault tolerance for a critical application by deploying across multiple availability zones. Which THREE design decisions contribute to fault tolerance? (Select THREE.)

Accepted Answer

Placing a load balancer in front of the instances to distribute traffic. Deploying across multiple AZs, using load balancers to distribute traffic, and having redundant components in each AZ contribute to fault tolerance. Single instance and same AZ do not provide fault tolerance.

Answer

Using a single database instance without replication

Answer

Using a single large instance in one AZ

Question 3

A cloud team uses Azure Bicep for deploying resources. They need to create a modular deployment that includes a virtual network and a subnet. Which THREE best practices should they follow when authoring Bicep files? (Choose three.)

Accepted Answer

Use modules to encapsulate and reuse resource definitions.. Using parameters for configurable values, using modules for reuse, and using symbolic names for resource references are best practices.

Answer

Use hard-coded resource names to ensure consistency.

Answer

Define all resources in a single file for simplicity.

Question 4

An organization is migrating a 50 TB on-premises Oracle database to Amazon RDS for MySQL with minimal downtime. They plan to use AWS DMS with ongoing replication. Which additional step is necessary to reduce downtime during the final cutover?

Accepted Answer

Enable change data capture (CDC) on the source database. To minimize downtime, after the full load, CDC replication keeps the target in sync. During final cutover, stopping application writes and applying remaining CDC changes completes the migration with very little downtime.

Answer

Use AWS Schema Conversion Tool (AWS SCT) to convert the schema

Answer

Increase the allocated storage on the target RDS instance

Answer

Use AWS Snowball to transfer the initial data load

Question 5

A company uses AWS and Azure for different workloads. To improve latency for global users, the company wants to direct traffic to the cloud provider and region closest to the user. Which DNS routing policy should the company implement?

Accepted Answer

Geolocation routing policy. Geolocation routing policy routes traffic based on the user's geographic location, allowing the company to direct users to the nearest provider and region.

Answer

Failover routing policy

Answer

Weighted routing policy

Answer

Latency routing policy

Question 6

A cloud architect is designing a multi-tier application on a public cloud. The application must be highly available and fault-tolerant within a single region. Which three items should be included in the architecture? (Select THREE.)

Accepted Answer

Deploy resources in multiple availability zones. High availability within a region requires distributing resources across availability zones, using load balancers for traffic distribution, and implementing health checks for automatic failover.

Answer

Use a single instance in one availability zone

Answer

Use a single database instance without replication

Question 7

A company is designing a disaster recovery solution with a recovery time objective (RTO) of 1 hour and a recovery point objective (RPO) of 15 minutes. Which TWO strategies would meet these requirements? (Select TWO.)

Accepted Answer

Hot standby. Hot standby provides near-zero RTO and RPO, while warm standby can achieve RTO of 1 hour and RPO of 15 minutes if properly configured. Cold standby and backup/restore typically have longer RTO/RPO.

Answer

Active-active

Answer

Backup and restore

Answer

Cold standby

Question 8

A company is designing a highly available architecture for a critical application. The solution must tolerate the failure of an entire availability zone. Which TWO design principles should be implemented? (Choose two.)

Accepted Answer

Use a load balancer with health checks and cross-zone load balancing. To tolerate an AZ failure, deploy across multiple AZs and use active-active or active-passive with failover. So deploying across multiple AZs and using a load balancer with health checks to route traffic away from failed AZ are correct.

Answer

Deploy instances in a single availability zone

Answer

Use RAID 0 for all instance storage

Answer

Use a single load balancer without health checks

Question 9

An organization wants to deploy a new microservice to a Kubernetes cluster with zero downtime. The deployment should update pods gradually by replacing old pods with new ones, and if the new pods fail health checks, the rollout should stop. Which Kubernetes deployment strategy meets these requirements?

Accepted Answer

Rolling update. A rolling update strategy in Kubernetes replaces pods incrementally and can be configured to pause on failed health checks.

Answer

Canary

Answer

Recreate

Answer

Blue/green

Question 10

A cloud architect is selecting a storage solution for a database that requires low-latency reads and writes. The database will run on a single VM and must support consistent performance. Which storage type is most appropriate?

Accepted Answer

Block storage. Block storage (e.g., EBS, Azure Disk) provides low-latency, consistent performance suitable for databases running on a single VM.

Answer

Archive storage

Answer

Object storage

Answer

File storage

Question 11

A company is migrating an on-premises MySQL database to Azure SQL Database using Azure Database Migration Service. They want minimal downtime. Which migration mode should they choose?

Accepted Answer

Online migration with continuous sync. Azure DMS offers online migration mode that uses CDC to replicate ongoing changes, allowing near-zero downtime. Offline mode requires stopping writes during migration.

Answer

Bulk copy

Answer

Offline migration

Answer

Schema conversion only

Question 12

A company is designing a multi-cloud strategy to ensure high availability across AWS and Azure. They want to use a global load balancer to route traffic based on latency. Which THREE components are required for this setup? (Select THREE.)

Accepted Answer

Health checks for endpoints in both clouds. Health checks, latency-based routing, and DNS services are essential. Global load balancers at each provider and a CDN are not required for latency-based routing.

Answer

A separate global load balancer in each cloud

Answer

A CDN to cache content at edge locations

Question 13

A company runs a stateful application that maintains session data in memory on the server. The application experiences performance issues during traffic spikes. Which design change would best improve scalability?

Accepted Answer

Move session state to a shared cache or database (stateless design). Making the application stateless by moving session state to an external store (e.g., Redis or database) allows any instance to handle any request, enabling horizontal scaling.

Answer

Increase the memory of each server (vertical scaling)

Answer

Implement sticky sessions on the load balancer

Answer

Use a CDN to cache static content

Question 14

A cloud engineer is writing a Terraform configuration to deploy an AWS EC2 instance. The engineer wants to pass the AMI ID and instance type into the configuration at runtime without hardcoding them. Which Terraform feature should be used?

Accepted Answer

Variables. Variables in Terraform allow you to define parameters that can be supplied at runtime, making configurations reusable and flexible.

Answer

Locals

Answer

Outputs

Answer

Data sources

Question 15

A company uses AWS and needs to enforce that all S3 buckets are encrypted at rest with customer-managed keys stored in AWS KMS. Which IAM policy condition would ensure this?

Accepted Answer

s3:x-amz-server-side-encryption-aws-kms-key-id. The 'aws:RequestTag' condition (or similar) can enforce that resources are created with specific tags, but to enforce encryption key usage, the condition 's3:x-amz-server-side-encryption-aws-kms-key-id' is used.

Answer

s3:x-amz-server-side-encryption with value AES256

Answer

aws:SourceVpce

Answer

s3:versioning