CV0-004 Practice Test 27 — 15 Questions

Question 1

An organization is migrating workloads to the cloud and after migration, users complain about slow application response times. The administrator reviews the cloud provider's dashboard and sees no resource bottlenecks. Which three factors could still cause poor performance? (Choose three.)

Accepted Answer

DNS resolution delays due to on-premises DNS server. Correct options are A, B, and D. Option A is correct because DNS delays can increase response times without showing as resource usage. Option B is correct because TCP window scaling mismatch can degrade network throughput transparently. Option D is correct because geographic latency is not a resource bottleneck. Option C is wrong because insufficient CPU cores would appear as a CPU bottleneck on the dashboard. Option E is wrong because application optimization issues would typically manifest as high resource usage.

Answer

The application is not optimized for the cloud infrastructure

Answer

Insufficient number of CPU cores in the VM

Question 2

A company's application is unable to connect to a managed cloud database. The database is deployed in a VPC with public accessibility disabled. The application runs on an EC2 instance in the same VPC. Which three troubleshooting steps should the administrator take? (Choose three.)

Accepted Answer

Check the network ACL associated with the database subnet for appropriate rules.. Options B, C, and E are correct. Option A is wrong because a public IP is not needed for same VPC communication. Option D is wrong because an internet gateway is not needed for internal traffic. B checks security group inbound, C verifies the endpoint configuration, and E checks network ACLs.

Answer

Ensure the VPC has an internet gateway attached.

Answer

Verify that the EC2 instance has a public IP address.

Question 3

A cloud engineer receives alerts that a storage volume is reaching capacity. Which three immediate actions should the engineer consider? (Choose three.)

Accepted Answer

Attach additional volumes. Correct options are A, B, and D. Option A is correct because increasing the volume size provides more space. Option B is correct because deleting unnecessary files frees up space immediately. Option D is correct because attaching additional volumes can increase total capacity. Option C is wrong because enabling compression may not work on existing data and is not immediate. Option E is wrong because creating a snapshot is a precaution, not an immediate remedy for capacity.

Answer

Create a snapshot before making changes

Answer

Enable compression on the volume

Question 4

A cloud administrator notices that a virtual machine is running but cannot be reached over the network. The administrator verifies that the VM is configured with the correct IP address and subnet mask. Which of the following is the MOST likely cause of this issue?

Accepted Answer

Misconfigured default gateway. Option B is correct because a misconfigured default gateway is a common cause of network unreachability when IP and subnet are correct. Option A is wrong because incorrect DNS would affect name resolution, not basic connectivity. Option C is wrong because firewall rules within the cloud provider may block traffic, but the question suggests the VM itself is reachable? Actually, if the VM is running but cannot be reached, a misconfigured gateway prevents return traffic. Option D is wrong because port forwarding is not typically used for general network connectivity.

Answer

Cloud provider firewall blocking all traffic

Answer

Incorrect DNS server settings

Answer

Missing port forwarding rule

Question 5

A cloud architect is designing a highly available web application. Which THREE of the following components should be configured in at least two availability zones? (Choose THREE.)

Accepted Answer

Web server instances. To achieve high availability across AZs, the load balancer, application servers, and database should be multi-AZ. Auto-scaling groups can launch instances across AZs, but they are not a component themselves; they are a management service. The DNS service is globally redundant by nature, not usually limited to AZs.

Answer

DNS service (e.g., Route 53)

Answer

Auto-scaling group

Question 6

A cloud load balancer is not distributing traffic evenly to backend servers. All servers pass health checks. Which of the following is the most likely cause?

Accepted Answer

Session persistence is enabled and directing traffic to specific servers.. Option A is correct because session persistence (sticky sessions) can cause uneven distribution. Option B is incorrect because health checks pass. Option C is incorrect as capacity is sufficient. Option D is incorrect because health check interval affects removal, not distribution.

Answer

The health check interval is set too long.

Answer

One of the backend servers has reached its connection limit.

Answer

The health check path is incorrect.

Question 7

A cloud administrator is troubleshooting performance issues with a cloud object storage bucket that is used for storing large amounts of small files. The application reads and writes objects frequently. Which three actions could improve the performance? (Choose three.)

Accepted Answer

Increase the number of concurrent requests from the application.. Options C, D, and E are correct. Option A is wrong because multi-region buckets increase write latency due to replication. Option B is wrong because versioning adds overhead. C uses prefix naming to increase request rate, D uses transfer acceleration for faster uploads, and E increases throughput via concurrency.

Answer

Use a multi-region bucket to reduce latency.

Answer

Enable versioning to avoid overwrites.

Question 8

Refer to the exhibit. An administrator is unable to SSH into a cloud server with IP 10.0.1.10 from a remote location (outside the 10.0.0.0/16 network). What is the most likely cause?

Accepted Answer

The firewall rule order is incorrect. Option D is correct because firewall rules are evaluated in order; the first rule drops all SSH traffic from any source, then the second only permits internal traffic. Option A is wrong because the error is not about the SSH service. Option B is wrong because the second rule shows some packets accepted. Option C is wrong because host key issues would cause a different error.

Answer

The firewall is dropping all packets on port 22

Answer

The SSH host key has changed

Answer

The SSH service is not running

Question 9

A cloud engineer is troubleshooting performance issues in a virtualized environment. Which of the following tools would BEST help identify CPU contention on a hypervisor?

Accepted Answer

esxtop. Option C is correct because 'esxtop' (on VMware) provides real-time performance data including CPU ready time. Option A is wrong because 'iperf' is for network throughput. Option B is wrong because 'ping' tests basic connectivity. Option D is wrong because 'nslookup' is for DNS resolution.

Answer

iperf

Answer

ping

Answer

nslookup

Question 10

A cloud administrator is troubleshooting a network connectivity issue between two VPCs connected via a VPC peering connection. The administrator has verified that the route tables are correct and that the security groups allow traffic. However, instances in VPC A cannot ping instances in VPC B. Which TWO of the following could be causing the issue? (Choose TWO.)

Accepted Answer

Network ACLs in VPC B are blocking inbound ICMP. Network ACLs are stateless and must allow both inbound and outbound traffic; if they block ICMP, ping fails. Firewall rules within the OS can also block ping. Option A is wrong because security groups are stateful and would allow return traffic if outbound is allowed. Option D is wrong because routing is verified. Option E is wrong because VPC peering does not depend on IGW.

Answer

Security groups in VPC A are blocking inbound ICMP

Answer

VPC peering connection does not support ICMP

Answer

Route tables are misconfigured

Question 11

A cloud database cluster is experiencing replication lag. The primary node shows high write activity, and the replicas are on different availability zones. Which of the following is the most likely cause?

Accepted Answer

Network latency between the primary and replica zones is high.. Option B is correct because network latency between zones can cause lag. Option A is incorrect because the primary is not underprovisioned. Option C is incorrect because replication is asynchronous typically. Option D is incorrect as disk I/O is not the immediate issue.

Answer

Replication is configured as synchronous.

Answer

The replica nodes have insufficient storage.

Answer

The primary node's vCPU is over-allocated.

Question 12

A cloud administrator is troubleshooting a performance issue where a web application experiences intermittent slowdowns. The application is deployed on a public cloud IaaS with auto-scaling. What should the administrator check first?

Accepted Answer

Verify load balancer configuration. Option D is correct because a misconfigured load balancer can cause uneven traffic distribution, leading to intermittent slowdowns. Option A is wrong because CPU utilization spikes might be a symptom, not the root cause, and auto-scaling should handle it. Option B is wrong because network latency is less likely to be intermittent. Option C is wrong because database queries are a deeper layer to investigate after network and application tiers.

Answer

Check CPU utilization of all instances

Answer

Analyze database query performance

Answer

Review network latency between tiers

Question 13

The exhibit shows the output of the df command and an application error. What is the most likely cause of the error?

Accepted Answer

The /var partition is full.. Option A is correct because the root partition is at 95% usage, and the application writes to /var/log which is on the root filesystem. Option B is wrong because tmpfs is empty. Option C is plausible but df shows space, not inodes; inode exhaustion would also give same error, but more likely space. Option D is wrong because no corruption indicated.

Answer

The /dev/shm partition is full.

Answer

The filesystem is corrupt.

Answer

The inode usage on the root filesystem is exhausted.

Question 14

Refer to the exhibit. A cloud engineer is using AzCopy to transfer files to Azure Blob Storage. The copy fails with the above error. Which of the following is the most likely cause?

Accepted Answer

The SAS token used has expired. Option B is correct because the error explicitly indicates an authentication failure, which is typically due to an expired or invalid SAS token. Option A is wrong because a firewall block would result in a different error (e.g., 403 Forbidden). Option C is wrong because a non-existent container would return a 404 error. Option D is wrong because insufficient throughput would cause a timeout, not an authentication error.

Answer

The network throughput is insufficient

Answer

The storage account firewall is blocking the IP

Answer

The destination container does not exist

Question 15

A user reports that they cannot connect to a RDS database instance from their application. The security group for the RDS instance allows inbound traffic on port 3306 from the application server's security group. What should the administrator check NEXT?

Accepted Answer

Network ACL rules for the RDS subnet. Option A is correct because network ACLs are stateless and may block traffic even if security groups allow it. Option B is wrong because SG outbound rules are typically allow all by default. Option C is wrong because route tables do not apply to traffic within a VPC for the same subnet? Actually, they do, but the problem is more likely at the ACL layer. Option D is wrong because IAM roles do not control network connectivity.

Answer

IAM policy attached to the RDS instance

Answer

Route table entries for the RDS subnet

Answer

Outbound security group rules on the RDS instance