CV0-004 Practice Test 26 — 15 Questions

Question 1

A developer is deploying a serverless application using AWS Lambda. They want to reuse common code (e.g., database connection logic) across multiple functions without duplicating it. Which Lambda feature should they use?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Lambda layers. Lambda Layers allow you to package and share code across multiple functions, enabling code reuse and reducing deployment package size.

Answer

Lambda versions

Answer

Lambda aliases

Answer

Lambda environment variables

Question 2

An organization uses Terraform to manage multi-cloud infrastructure across AWS and Azure. The state file must be stored securely with locking to prevent concurrent modifications. Which backend configuration should the team use?

Accepted Answer

AWS S3 bucket with DynamoDB table for locking. Terraform supports remote backends like AWS S3 with DynamoDB for state locking, which provides both state storage and locking. Azure Blob Storage can also be used with blob lease locking.

Answer

GitHub repository with Terraform Cloud agent

Answer

Azure DevOps pipeline variable group

Answer

Local file system with .terraform.lock.hcl

Question 3

An organization is using CloudFormation to manage AWS infrastructure. They need to detect if any manual changes have been made to resources outside of CloudFormation. Which CloudFormation feature should they use?

Accepted Answer

Drift detection. CloudFormation drift detection compares the current state of resources with the expected state defined in the stack template. It identifies resources that have been modified manually, known as drift.

Answer

Change sets

Answer

Stack sets

Answer

Resource signals

Question 4

A cloud engineer is writing Ansible playbooks to automate the configuration of cloud resources. Which TWO statements about Ansible are true?

Accepted Answer

Ansible uses YAML for playbook syntax.. Ansible is agentless (uses SSH/WinRM) and uses YAML for playbooks. It requires Python on control node, not agents on target hosts. It is not primarily for orchestration of CI/CD pipelines.

Answer

Ansible requires an agent installed on each managed node.

Answer

Ansible uses a declarative language like HCL.

Answer

Ansible is a CI/CD pipeline tool.

Question 5

A cloud architect is creating a Terraform configuration to deploy resources in AWS. The architect needs to store the state file in a remote backend that supports state locking and encryption at rest. Which backend should the architect configure?

Accepted Answer

S3 with DynamoDB for state locking. S3 with DynamoDB for locking is a recommended backend for Terraform state in AWS. Azure Blob Storage is for Azure, GCS for GCP, and local backend does not support remote state or locking.

Answer

Local file system with Terraform Cloud

Answer

Azure Blob Storage with a lease blob for locking

Answer

Google Cloud Storage with object versioning

Question 6

A company is deploying a new version of a microservice on Amazon EKS. The deployment must ensure that new pods are created and become healthy before old pods are terminated. The current deployment uses a ReplicaSet. Which Kubernetes resource and strategy should be used?

Accepted Answer

Deployment with RollingUpdate strategy. A Deployment manages ReplicaSets and supports a RollingUpdate strategy that creates new pods and waits for them to become ready before terminating old ones.

Answer

ReplicaSet with RollingUpdate strategy

Answer

DaemonSet with RollingUpdate

Answer

StatefulSet with OnDelete strategy

Question 7

A company is moving a 10 TB SQL Server database to Azure SQL Database. They need to migrate with minimal downtime while keeping the source database operational. Which service should they use?

Accepted Answer

Azure Database Migration Service (DMS). Azure Database Migration Service supports online migrations with minimal downtime using continuous sync (CDC) from SQL Server to Azure SQL Database.

Answer

Azure Data Sync

Answer

Azure Import/Export Service

Answer

Azure Data Box

Question 8

A company is migrating a 50 TB on-premises SQL Server database to Amazon RDS for MySQL with minimal downtime. The schema must be converted from SQL Server to MySQL. Which combination of AWS services should the cloud architect use?

Accepted Answer

AWS DMS and AWS Schema Conversion Tool (SCT). AWS DMS can migrate data with minimal downtime using CDC. Schema Conversion Tool (SCT) converts the schema from SQL Server to MySQL. DMS then performs the ongoing replication.

Answer

AWS Database Migration Service (DMS) only

Answer

AWS Snowball and AWS DMS

Answer

AWS DataSync and AWS Schema Conversion Tool (SCT)

Question 9

A cloud administrator is automating the deployment of a web application on AWS. The administrator wants to define the infrastructure as code using a declarative language that supports drift detection. Which tool should the administrator use?

Accepted Answer

CloudFormation. CloudFormation is a declarative AWS service for infrastructure as code that supports drift detection, which identifies changes made to resources outside of template management.

Answer

AWS CodeDeploy

Answer

Ansible

Answer

Terraform

Question 10

An administrator is writing an Ansible playbook to provision cloud resources across multiple cloud providers. The playbook must manage instances in AWS, Azure, and GCP. Which Ansible concept should the administrator use to interact with each cloud provider's API?

Accepted Answer

Modules. Ansible modules are units of code that interact with cloud provider APIs. Each cloud provider has specific modules (e.g., ec2, azure_rm, gcp_compute).

Answer

Roles

Answer

Inventories

Answer

Playbooks

Question 11

A DevOps team wants to deploy a containerized application to a Kubernetes cluster with zero downtime. The team needs to gradually shift traffic from the old version to the new version, monitoring error rates and automatically rolling back if errors exceed a threshold. Which deployment strategy should the team implement?

Accepted Answer

Canary deployment. A canary deployment releases the new version to a small subset of users, monitors performance, and automatically rolls back if issues are detected, meeting the zero-downtime and auto-rollback requirements.

Answer

Blue/green deployment

Answer

Rolling deployment

Answer

Recreate deployment

Question 12

A team is developing a serverless application on AWS Lambda. The application uses several third-party libraries that are large in size. To reduce deployment package size and enable reuse across functions, the team wants to include these libraries as a separate layer. However, the total unzipped size of all layers exceeds the Lambda limits. What should the team do to resolve this?

Accepted Answer

Use a container image for the Lambda function instead of layers. Lambda allows up to 5 layers with a total unzipped size of 250 MB. If exceeded, the team can split the libraries into multiple functions or use a custom runtime with a container image. Reducing concurrency does not affect package size.

Answer

Increase the Lambda function's reserved concurrency

Answer

Reduce the number of layers by combining libraries into fewer custom layers

Answer

Request a service limit increase from AWS for layer size

Question 13

A company uses CloudFormation to manage infrastructure across multiple AWS accounts. They want to deploy a common set of resources (e.g., VPC, IAM roles) to all accounts in their organization. Which CloudFormation feature should they use?

Accepted Answer

Stack sets. CloudFormation StackSets allow deploying stacks across multiple accounts and regions.

Answer

Change sets

Answer

Nested stacks

Answer

Drift detection

Question 14

A company is migrating 100 TB of data from an on-premises NAS to Amazon S3. The network bandwidth is limited to 100 Mbps, and the transfer must complete within 30 days. Which service should the company use to meet the deadline?

Accepted Answer

AWS Snowball. At 100 Mbps, transferring 100 TB would take about 100 days over the network. AWS Snowball is a physical device for offline transfer, much faster. DataSync and S3 Transfer Acceleration still rely on network bandwidth.

Answer

AWS DataSync

Answer

Amazon S3 Transfer Acceleration

Answer

AWS Direct Connect

Question 15

A cloud engineer is writing Terraform code to provision AWS resources. They need to define the cloud provider and authentication details. Which block should they use in their HCL configuration?

Accepted Answer

provider block. In Terraform, the provider block is used to configure the cloud provider (e.g., AWS, Azure, GCP) and specify authentication settings such as region and credentials.

Answer

resource block

Answer

variable block

Answer

module block