CV0-004 Practice Test 23 — 15 Questions

Question 1

A company wants to migrate a stateful application to the cloud but needs to ensure it can scale horizontally. What architectural change is required?

Accepted Answer

Move session state to a shared database or cache. For a stateful application to scale horizontally, session state must be externalized from individual instances into a shared store such as a database, Redis, or Memcached. This allows any instance behind the load balancer to serve any user request, enabling true horizontal scaling and failover.

Answer

Deploy in multiple availability zones

Answer

Implement sticky sessions on the load balancer

Answer

Use larger instance types

Question 2

A cloud operations team is implementing a tagging strategy for cost attribution. They need to track costs by environment (dev, test, prod), project, and team. Which approach should they use?

Accepted Answer

Apply tags such as Environment, Project, and Team to all resources. Tags are key-value pairs that can be applied to resources and used for cost allocation, filtering, and reporting across environments, projects, and teams. Applying Environment, Project, and Team tags to all resources enables granular cost attribution in billing reports and supports chargeback/showback models.

Answer

Use resource groups to organize resources by environment

Answer

Use resource naming conventions to encode environment and project

Answer

Create separate cloud accounts for each environment

Question 3

A company uses Azure and needs shared file storage accessible from multiple Linux VMs using standard file sharing protocols. Which storage type should they choose?

Accepted Answer

Azure Files. Azure Files provides fully managed file shares in the cloud that are accessible via the industry-standard SMB and NFS protocols, making it the correct choice for shared file storage across multiple Linux VMs. Linux VMs can mount Azure Files shares using SMB 3.0 or NFS 4.1, enabling concurrent access from multiple instances. The other storage types do not support standard file-sharing protocols for multi-VM access.

Answer

Azure Archive Storage

Answer

Azure Disk Storage

Answer

Azure Blob Storage

Question 4

Which THREE of the following are key considerations when designing a cloud-native application for high availability? (Select exactly three.)

Accepted Answer

Implement loose coupling between services. Option C is correct because loose coupling between services—typically achieved through asynchronous messaging (e.g., queues, event buses) or well-defined APIs—ensures that the failure of one service does not cascade to others, which is fundamental to high availability in cloud-native designs. Option D is correct because stateless application components store no session data locally, allowing any instance to handle any request and enabling failed instances to be replaced seamlessly by load balancers or orchestrators. Option E is correct because designing for horizontal scaling with auto-scaling groups lets the application add or remove instances dynamically in response to demand or instance failure, maintaining availability across Availability Zones. Option A is not a key HA consideration because multithreading is an implementation-level concurrency technique, not a cloud-native availability pattern, and can even introduce complexity or contention. Option B is not appropriate because synchronous replication can increase latency and couple database nodes tightly, whereas asynchronous or quorum-based replication is generally preferred for resilient, distributed cloud databases.

Answer

Use multithreading for all components

Answer

Use synchronous replication for databases

Question 5

A startup wants to run code in response to events without provisioning or managing servers. Which cloud service model should they use?

Accepted Answer

FaaS. FaaS (Function-as-a-Service) is the cloud service model where the provider runs code in response to events without requiring the customer to provision or manage servers. The customer deploys functions, and the platform handles scaling, patching, and infrastructure. This exactly matches the requirement to run code on events with no server management.

Answer

PaaS

Answer

IaaS

Answer

SaaS

Question 6

Which TWO of the following are characteristics of a hybrid cloud deployment? (Select exactly two.)

Accepted Answer

Combines on-premises private cloud with public cloud resources. Option A is correct because a hybrid cloud by definition combines an on-premises private cloud with public cloud resources, integrating the two environments so workloads can span both. Option B is correct because hybrid cloud architectures are designed to allow data and application portability between the private and public environments, enabling workloads to move as needs change. Option C is not correct because hybrid cloud actually complicates data governance, since data resides in multiple environments with differing policies, compliance requirements, and controls. Option D is not correct because hybrid cloud involves both private and public environments, not a single public cloud provider. Option E is not correct because community cloud services are shared by organizations with common concerns and are a separate deployment model, not a defining characteristic of hybrid cloud.

Answer

Simplifies data governance across environments

Answer

Typically uses a single public cloud provider

Answer

Uses only community cloud services

Question 7

A company is deploying a containerized application using Kubernetes on a public cloud. The development team has created a Docker image and pushed it to a private container registry. The deployment YAML points to the registry. However, when the deployment is applied, the pods fail to start with an 'ImagePullBackOff' error. The cloud administrator verifies that the registry is reachable from the cluster nodes and that the image exists. What is the most likely reason for the failure?

Accepted Answer

The deployment lacks a secret for registry authentication.. The most likely reason for the ImagePullBackOff error is that the deployment lacks a Kubernetes secret for registry authentication. Since the image is stored in a private container registry, the kubelet must authenticate with the registry to pull the image. Without a properly configured imagePullSecret in the pod spec, the kubelet cannot obtain credentials, resulting in a failed pull and the ImagePullBackOff status.

Answer

The cluster nodes are out of disk space.

Answer

The image tag is incorrect.

Answer

The pod does not have sufficient CPU resources.

Question 8

A company wants to protect data in transit between its on-premises data center and a public cloud environment. Which technology should be used to create a secure encrypted tunnel over the internet?

Accepted Answer

VPN. A VPN (Virtual Private Network) creates an encrypted tunnel over the internet. TLS is used for web traffic, not for site-to-site tunnels. SSH is for remote admin, and a firewall is for filtering, not encrypting tunnels.

Answer

SSH

Answer

Firewall

Answer

TLS

Question 9

An organization is subject to PCI DSS compliance and must ensure that all data transmitted between its cloud application and users is encrypted. Which encryption method should be enforced?

Accepted Answer

TLS 1.2 or higher. PCI DSS requires that cardholder data transmitted over open, public networks be protected with strong cryptography. TLS 1.2 or higher is the transport-layer protocol that provides encryption, integrity, and authentication for data in transit between the cloud application and users, satisfying the requirement. AES-256 is the underlying cipher TLS uses, but it is not itself a transmission method.

Answer

AES-256

Answer

SHA-256

Answer

IPsec VPN

Question 10

A cloud administrator needs to transfer 50 TB of data from an on-premises NAS to Amazon S3. The office has limited bandwidth (50 Mbps). Which service is most suitable for this offline transfer?

Accepted Answer

AWS Snowball. AWS Snowball is a physical petabyte-scale data transport device designed for offline data migration when network bandwidth is insufficient. With 50 TB of data and only 50 Mbps bandwidth, transferring over the network would take months (roughly 100+ days), making Snowball the appropriate choice for offline transfer to S3.

Answer

AWS VPN

Answer

AWS DataSync

Answer

S3 Transfer Acceleration

Question 11

An organization uses AWS and wants to control inbound traffic to its EC2 instances. They need a solution that automatically allows response traffic for any permitted inbound request. Which of the following should they use?

Accepted Answer

Security groups. AWS security groups are stateful virtual firewalls that automatically allow return traffic for any permitted inbound request, regardless of outbound rules. This stateful behavior means that if an inbound request is allowed, the response is automatically permitted, satisfying the requirement. Network ACLs, by contrast, are stateless and require explicit rules for both directions.

Answer

DDoS protection

Answer

Web Application Firewall

Answer

Network ACLs

Question 12

A cloud engineer is troubleshooting an issue where an application running in a container on a Kubernetes cluster is unable to resolve DNS names. The cluster uses CoreDNS. The engineer checks the CoreDNS pod logs and sees no errors. Which of the following should the engineer check next?

Accepted Answer

The container's /etc/resolv.conf file. The container's /etc/resolv.conf file contains the DNS configuration, including the nameserver IP and search domains. If CoreDNS logs show no errors, the issue may be that the container is not using the correct DNS server or has a misconfigured resolv.conf. Checking this file is the next logical step.

Answer

The Kubernetes DNS service IP address

Answer

The cloud provider's DNS resolver settings

Answer

The network policy for the namespace

Question 13

A company wants to migrate its on-premises workloads to the cloud while maintaining the ability to run some sensitive applications on-premises. Which cloud deployment model best meets this requirement?

Accepted Answer

Hybrid cloud. A hybrid cloud deployment combines on-premises infrastructure with public cloud services, allowing workloads to run in both environments with connectivity between them. This directly matches the requirement to migrate some workloads to the cloud while keeping sensitive applications on-premises. Hybrid cloud is the canonical model for this split-workload scenario.

Answer

Multi-cloud

Answer

Private cloud

Answer

Public cloud

Question 14

An organization wants to minimize costs for a batch processing workload that runs nightly for 2 hours and can tolerate interruptions. Which pricing model is most cost-effective?

Accepted Answer

Spot instances. Spot instances offer significant discounts but can be terminated; suitable for fault-tolerant, interruptible workloads.

Answer

On-demand instances

Answer

Reserved instances

Answer

Dedicated hosts

Question 15

An organization uses Azure DevOps for CI/CD. They want to implement a deployment strategy where a new version of an application is deployed to a small subset of users (e.g., 5%) and if no errors are detected, the percentage is gradually increased to 100%. Which deployment strategy should they use?

Accepted Answer

Canary. Canary deployment routes a small percentage of live traffic (e.g., 5%) to the new version while the majority still hits the stable version, then gradually shifts traffic as health metrics remain clean. Azure DevOps supports this natively via deployment rings, traffic-splitting in App Service/Container Apps, or feature flags. The gradual, metric-gated traffic shift is the defining characteristic of canary.

Answer

Rolling

Answer

Recreate

Answer

Blue/green