CV0-004 Practice Test 29 — 15 Questions

Question 1

A cloud administrator needs to apply security patches to a fleet of 50 Linux servers running on AWS without interrupting business hours. Which approach should the administrator use to schedule patching during a maintenance window?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Use AWS Systems Manager Patch Manager with a maintenance window. AWS Systems Manager Patch Manager allows defining maintenance windows for automated patching, minimizing disruption.

Answer

Create a Lambda function that stops instances, patches them, and restarts

Answer

Manually SSH into each server and run yum update

Answer

Use AWS Config to apply patch baselines

Question 2

A company uses AWS and wants to optimize costs by receiving recommendations to downsize over-provisioned EC2 instances. Which tool provides rightsizing recommendations?

Accepted Answer

AWS Compute Optimizer. AWS Compute Optimizer analyzes instance configurations and utilization to provide rightsizing recommendations, helping reduce costs by downsizing underutilized instances.

Answer

AWS Budgets

Answer

AWS Trusted Advisor

Answer

AWS Cost Explorer

Question 3

A cloud engineer needs to troubleshoot network connectivity issues between two subnets. Which feature can help capture and analyze network traffic metadata?

Accepted Answer

VPC Flow Logs. VPC Flow Logs capture IP traffic metadata for analysis.

Answer

Amazon Inspector

Answer

AWS Config

Answer

AWS CloudTrail

Question 4

A systems administrator notices that an application is slow to respond. They want to analyze the latency of individual requests across microservices. Which tool should they use?

Accepted Answer

AWS X-Ray. Distributed tracing tools like AWS X-Ray help identify latency across services.

Answer

CloudWatch Logs

Answer

VPC Flow Logs

Answer

AWS CloudTrail

Question 5

Match each storage type to its characteristic.

Accepted Answer

Object storage: Data stored as objects with metadata and a unique identifier, highly scalable.. Object storage uses objects with metadata (scalable for unstructured data), block storage uses fixed blocks (low-latency for databases), file storage uses hierarchical files (shared access), and SAN provides block-level access over a high-speed network. Common confusions swap object and block definitions.

Answer

Object storage: Data divided into blocks.

Answer

Block storage: Data stored as objects with metadata.

Question 6

Match each networking concept to its definition.

Accepted Answer

VPC: A logically isolated network within a cloud provider.. Correct matches: VPC (isolated network), VPN (secure tunnel). Common confusions involve swapping Subnet and CDN, or Load Balancer and CDN. Understanding each component's role in cloud networking is key.

Answer

Subnet: A distributed network of servers that caches content closer to users.

Answer

Load Balancer: A segmented portion of a VPC that can contain resources.

Answer

CDN: Distributes incoming network traffic across multiple targets to improve performance.

Question 7

A cloud administrator needs to centralize logs from multiple AWS services, including VPC flow logs and application logs, to enable searching and querying. Which solution should be used?

Accepted Answer

Amazon CloudWatch Logs. CloudWatch Logs is the central log service that can collect logs from various sources and allow querying with Logs Insights.

Answer

AWS CloudTrail

Answer

Amazon S3 with Athena

Answer

AWS Config

Question 8

A cloud administrator is setting up auto-scaling for a web application that uses an SQS queue for incoming requests. The administrator wants to scale the number of EC2 instances based on the queue depth. Which two metrics are appropriate for this auto-scaling policy? (Choose TWO.)

Accepted Answer

ApproximateNumberOfMessagesVisible (queue depth). SQS queue depth (ApproximateNumberOfMessagesVisible) is a common metric. CPU utilization of instances is also relevant but not directly queue-related. The correct ones are ApproximateNumberOfMessagesVisible and BacklogPerInstance (which combines queue depth and instance count).

Answer

CPU utilization of instances

Answer

Memory utilization of instances

Answer

Network throughput

Question 9

A cloud engineer is troubleshooting a web application that is experiencing slow response times. The engineer suspects a network bottleneck. Which tool should be used to analyze network traffic patterns and identify dropped packets?

Accepted Answer

VPC Flow Logs. VPC Flow Logs capture information about IP traffic going to and from network interfaces in a VPC and can be used to analyze traffic patterns and identify issues like dropped packets.

Answer

AWS X-Ray

Answer

Amazon CloudWatch Logs

Answer

AWS CloudTrail

Question 10

A cloud administrator needs to detect unusual spikes in CPU usage across a fleet of EC2 instances. Which AWS service should be used to create an alarm that triggers when CPU utilization exceeds an expected baseline?

Accepted Answer

AWS CloudWatch Alarms with anomaly detection. CloudWatch Alarms can use anomaly detection to automatically detect unusual patterns based on historical data.

Answer

AWS Config

Answer

AWS CloudTrail

Answer

AWS Systems Manager

Question 11

A cloud engineer wants to view a dashboard showing cost breakdown by department. Which tool provides pre-built billing dashboards?

Accepted Answer

AWS Cost Explorer. AWS Cost Explorer provides pre-built dashboards for cost analysis.

Answer

AWS CloudWatch

Answer

AWS Trusted Advisor

Answer

AWS Config

Question 12

A company uses AWS and wants to implement a structured logging format to simplify querying and analysis of application logs. Which three best practices should be followed when implementing structured logging? (Choose THREE.)

Accepted Answer

Include a unique request ID for each transaction. Structured logging typically uses JSON format, includes unique identifiers for tracing, and uses consistent key names for easy querying.

Answer

Write logs in plain text to reduce storage costs

Answer

Embed binary data in log messages for performance

Question 13

A cloud administrator needs to apply security patches to a fleet of 50 Linux servers running on AWS without interrupting business hours. Which approach should the administrator use to schedule patching during a maintenance window?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

AWS Systems Manager Patch Manager. AWS Systems Manager Patch Manager automates the process of patching managed instances with security updates and allows you to define maintenance windows.

Answer

AWS CloudFormation

Answer

AWS Config

Answer

Amazon Inspector

Question 14

A cloud administrator needs to perform a disaster recovery test for a critical application running in a different AWS region. The RTO is 1 hour, and the RPO is 15 minutes. Which replication strategy should be used to meet the RPO?

Accepted Answer

Continuous replication. Continuous replication ensures data is replicated with minimal lag, typically meeting a 15-minute RPO. Snapshot-based replication would have longer intervals.

Answer

Hourly snapshot-based replication

Answer

Daily snapshot-based replication

Answer

Cross-region replication with eventual consistency

Question 15

A company is running a stateless web application on a public cloud. They expect traffic to spike during certain hours. Which scaling strategy would be most cost-effective and efficient?

Accepted Answer

Horizontal scaling using auto-scaling groups based on CPU utilization. Horizontal scaling (adding more instances) combined with auto-scaling based on metrics like CPU usage allows the application to handle spikes cost-effectively without over-provisioning.

Answer

Using a larger instance type and scheduling scaling actions

Answer

Pre-provisioning double capacity permanently

Answer

Vertical scaling with manual adjustments before anticipated spikes