CV0-004 Practice Test 32 — 15 Questions

Question 1

An organization is deploying a new application using Infrastructure as Code (IaC) with Terraform. The development team needs to ensure that the same configuration is applied consistently across development, staging, and production environments. What is the best practice for managing these Terraform configurations?

Accepted Answer

Maintain separate Terraform workspaces or directories for each environment.. Option D is correct because using separate Terraform workspaces or directories for each environment enforces isolation of state files and configuration, preventing accidental cross-environment changes. This approach aligns with Infrastructure as Code best practices by allowing environment-specific variables and resources while maintaining a single source of truth for the core configuration.

Answer

Hardcode environment-specific values within the main configuration file.

Answer

Manually update the configuration for each environment before deployment.

Answer

Use a single Terraform configuration with different variable files for each environment.

Question 2

A company is designing a disaster recovery plan for its cloud infrastructure. The primary site is in US-East, and the DR site is in US-West. The RPO is 15 minutes, and the RTO is 2 hours. Which replication strategy best meets these requirements at the lowest cost?

Accepted Answer

Asynchronous replication from primary to DR. Asynchronous replication sends data changes from the primary site to the DR site with minimal delay, typically within seconds to minutes, which meets the 15-minute RPO. It does not require the low-latency link that synchronous replication demands, making it more cost-effective for geographically separated sites. The 2-hour RTO is achievable because the DR site can be activated quickly from the replicated data, without the overhead of restoring from backups.

Answer

Scheduled nightly backups to DR

Answer

Synchronous replication between sites

Answer

No replication; manual failover

Question 3

A cloud administrator is deploying a virtual machine (VM) in a public cloud and must ensure that the VM can be recovered quickly in case of failure. The administrator configures the VM to use a managed disk. What additional deployment step should be taken to meet the recovery objective with minimal cost?

Accepted Answer

Configure automated snapshots of the managed disk on a schedule.. Option B is correct because configuring automated snapshots of the managed disk provides a cost-effective, incremental backup mechanism that enables rapid recovery of the VM in case of failure. Snapshots capture point-in-time copies of the disk and can be used to create a new managed disk or restore the VM quickly, meeting the recovery objective without the expense of maintaining a separate, always-on replica.

Answer

Set the VM's boot diagnostics to store logs in a storage account.

Answer

Deploy a second VM in a different region as a pilot light.

Answer

Attach the VM to multiple managed disks in an availability set.

Question 4

A company is deploying a multi-tier application with web servers and a database. Which architecture ensures high availability?

Accepted Answer

Deploy web servers in an auto-scaling group across two AZs and database in a multi-AZ configuration. Option A is correct because deploying web servers in an auto-scaling group across two Availability Zones (AZs) ensures that if one AZ fails, the other continues serving traffic, while a multi-AZ database configuration (e.g., Amazon RDS Multi-AZ) automatically synchronously replicates data to a standby instance in a different AZ, enabling automatic failover. This combination eliminates single points of failure at both the web and database tiers, meeting high availability requirements.

Answer

Deploy a single large web server and a single database instance

Answer

Deploy web servers in an auto-scaling group in one AZ and database in single instance

Answer

Deploy web servers and database in a single availability zone

Question 5

A small business plans to migrate its on-premises infrastructure to the cloud to reduce capital expenditure. They have a limited IT team and want to minimize management overhead. Which cloud deployment model should they choose?

Accepted Answer

Public cloud. The public cloud deployment model is the correct choice because it allows the small business to offload all infrastructure management to the cloud provider, eliminating the need for on-premises hardware and reducing capital expenditure. With a limited IT team, the public cloud's shared responsibility model minimizes management overhead by handling physical security, hardware maintenance, and hypervisor updates, while the business only manages its applications and data.

Answer

Private cloud

Answer

Community cloud

Answer

Hybrid cloud

Question 6

A deployment fails with a message about missing dependencies. What should the administrator check first?

Accepted Answer

Review the deployment logs to identify missing packages. When a deployment fails with a 'missing dependencies' message, the first step is to review the deployment logs. Logs will contain specific error messages indicating which packages or libraries are absent, allowing the administrator to install them directly. This aligns with standard troubleshooting methodology: identify the root cause from logs before taking corrective action.

Answer

Change the instance type to one with more memory

Answer

Reinstall the operating system

Answer

Restart the server and retry the deployment

Question 7

A cloud architect is designing a deployment strategy for a web application that must handle unpredictable traffic spikes. The application runs in containers on a Kubernetes cluster. The architect wants to minimize costs while ensuring that the cluster can scale out rapidly during spikes. Which deployment strategy best meets these requirements?

Accepted Answer

Implement horizontal pod autoscaling based on CPU utilization.. Horizontal Pod Autoscaling (HPA) automatically adjusts the number of pod replicas based on observed CPU utilization (or custom metrics), enabling rapid scale-out during traffic spikes without manual intervention. This minimizes costs by running only the necessary pods during low traffic while ensuring the cluster can react quickly to increased demand, which aligns with the requirement for unpredictable spikes.

Answer

Pre-provision a fixed number of pods to handle peak load at all times.

Answer

Manually scale the deployment when monitoring alerts indicate high traffic.

Answer

Use vertical pod autoscaling to increase resource limits on existing pods.

Question 8

A company wants to migrate its existing on-premises web application to the cloud to reduce operational overhead. The application runs on a custom Linux distribution with specific kernel modules. Which cloud deployment model would best minimize the need to refactor the application while still reducing maintenance of the underlying infrastructure?

Accepted Answer

Infrastructure as a Service (IaaS). IaaS (Infrastructure as a Service) provides virtualized compute resources where you retain full control over the operating system, including custom Linux distributions and kernel modules. This allows you to migrate the application as-is without refactoring, while the cloud provider handles the underlying physical infrastructure maintenance, such as hardware failures and network cabling.

Answer

Container as a Service (CaaS)

Answer

Platform as a Service (PaaS)

Answer

Software as a Service (SaaS)

Question 9

Which deployment strategy minimizes risk by gradually shifting a small percentage of traffic to a new version before full rollout?

Accepted Answer

Canary deployment. A canary deployment minimizes risk by routing a small percentage of traffic (e.g., 5-10%) to the new version while the majority continues to use the stable version. This allows real-world validation of the new version under production load before a full rollout, and if issues are detected, traffic can be instantly redirected back to the old version. The strategy is named after the 'canary in a coal mine' concept, where early detection of problems prevents widespread impact.

Answer

In-place deployment

Answer

Rolling deployment

Answer

Blue-green deployment

Question 10

Users are unable to load a web page on a newly deployed web server. The security group for the server allows inbound HTTP from 0.0.0.0/0. The web service is running and listening on port 80. Which of the following is the MOST likely cause?

Accepted Answer

The web server is listening on the wrong IP address.. Option D is correct because if the web server is listening on an IP address other than the one clients are reaching (e.g., 127.0.0.1 or a different private IP), inbound HTTP requests will not be processed even though the security group allows traffic on port 80. This is a common misconfiguration where the server binds to a loopback or incorrect interface, causing it to ignore external packets.

Answer

The DNS record for the domain is not yet propagated.

Answer

The VM's firewall is blocking inbound requests on port 80.

Answer

The load balancer target group is unhealthy.

Question 11

An organization is adopting Infrastructure as Code (IaC) for their cloud deployments. They need to ensure that the configuration files are version-controlled and changes are audited. Which combination of tools should they use?

Accepted Answer

Terraform and Git. Option C is correct because Git provides version control and audit trails for Infrastructure as Code (IaC) configuration files, while Terraform is the IaC tool that manages cloud resources declaratively. Together, they satisfy the requirement for version-controlled, auditable configuration files, as Git tracks every change with commit history and Terraform's state files can be stored in Git for change tracking.

Answer

Puppet and Jenkins

Answer

Terraform and Ansible

Answer

CloudFormation and Chef

Question 12

Which THREE of the following are best practices for deploying applications in a cloud environment? (Choose three.)

Accepted Answer

Use immutable infrastructure patterns.. Immutable infrastructure patterns (A) are a best practice because they ensure that once a server or container is deployed, it is never modified in place. Instead, any change requires building a new instance from a golden image or template, which eliminates configuration drift and makes rollbacks trivial. This approach aligns with cloud-native principles where infrastructure is treated as disposable and version-controlled, reducing the risk of snowflake servers and improving reliability.

Answer

Open all ports in security groups to simplify connectivity.

Answer

Keep unused resources to avoid reprovisioning delays.

Question 13

A company is deploying a containerized application using Kubernetes on a public cloud. The development team has created a Docker image and pushed it to a private container registry. The deployment YAML points to the registry. However, when the deployment is applied, the pods fail to start with an 'ImagePullBackOff' error. The cloud administrator verifies that the registry is reachable from the cluster nodes and that the image exists. What is the most likely reason for the failure?

Accepted Answer

The deployment lacks a secret for registry authentication.. The most likely reason for the ImagePullBackOff error is that the deployment lacks a Kubernetes secret for registry authentication. Since the image is stored in a private container registry, the kubelet must authenticate with the registry to pull the image. Without a properly configured imagePullSecret in the pod spec, the kubelet cannot obtain credentials, resulting in a failed pull and the ImagePullBackOff status.

Answer

The cluster nodes are out of disk space.

Answer

The image tag is incorrect.

Answer

The pod does not have sufficient CPU resources.

Question 14

Which THREE of the following are valid considerations when selecting a cloud deployment model (public, private, hybrid)? (Choose three.)

Accepted Answer

Regulatory compliance requirements.. Regulatory compliance requirements (A) are a primary consideration because certain industries (e.g., healthcare, finance) mandate data residency and privacy controls that may only be satisfied by a private or dedicated public cloud infrastructure. Budget and total cost of ownership (B) directly influence the choice between capital-intensive private cloud deployments and operational-expense-based public cloud services. Latency sensitivity (D) dictates whether an application requires on-premises private cloud resources to avoid network jitter and meet strict SLAs, or can tolerate the higher latency of a public cloud.

Answer

Developers' preferred programming languages.

Answer

Cloud provider's marketing claims.

Question 15

A cloud architect is designing an auto-scaling policy for a web application that experiences predictable traffic spikes every weekday morning from 8 to 10 AM. The application runs on a group of virtual machines behind a load balancer. Which scaling approach is MOST cost-effective while ensuring performance during the spike?

Accepted Answer

Scheduled scaling to increase capacity before 8 AM and decrease after 10 AM. Scheduled scaling is the most cost-effective approach because the traffic pattern is predictable (every weekday 8–10 AM). By configuring the auto-scaling group to add instances before the spike and remove them after, you avoid paying for idle resources during off-peak hours while ensuring capacity is ready when needed. This approach directly matches the known schedule without relying on reactive metrics or manual intervention.

Answer

Dynamic scaling based on CPU utilization threshold

Answer

Proactive scaling using machine learning to predict spikes

Answer

Manual scaling by the operations team each morning