CV0-004 Practice Test 35 — 15 Questions

Question 1

A cloud administrator is deploying a new application in a cloud environment. The application requires high availability and fault tolerance. Which two design principles should the administrator implement? (Select TWO).

Accepted Answer

Place a load balancer in front of the application.. Option A is correct because placing a load balancer in front of the application distributes incoming traffic across multiple healthy instances, ensuring that if one instance fails, traffic is redirected to others, which provides high availability and fault tolerance. Option B is correct because deploying an auto-scaling group across multiple Availability Zones (AZs) ensures that if an entire AZ fails, the application continues running in another AZ, and the auto-scaling group automatically replaces failed instances to maintain capacity.

Answer

Deploy all instances in a single availability zone.

Answer

Use a single instance to reduce costs.

Answer

Store all data on a single volume without replication.

Question 2

A cloud administrator notices that a scheduled backup job for a virtual machine has been failing with the error "insufficient storage space". The VM has 100 GB OS disk. The backup solution creates snapshots. What is the most likely cause?

Accepted Answer

The backup software requires temporary local storage that is full.. The error 'insufficient storage space' during a snapshot-based backup typically occurs because the backup software requires temporary local storage to stage the snapshot data before transferring it to the backup target. When this staging area (often a local cache or temporary directory) runs out of space, the backup fails. Option B correctly identifies that the backup software's temporary local storage is full, which is a common cause of this error.

Answer

The VM's data disk is full.

Answer

The backup service is using local disks for staging.

Answer

The snapshot is being stored on the same disk as the OS.

Question 3

A cloud administrator notices that a load balancer is marking all instances as unhealthy. The health check is configured to check a specific URL path. Which of the following is the MOST likely cause?

Accepted Answer

The health check path does not exist on the instances.. The health check is configured to check a specific URL path. If that path does not exist on the instances (e.g., returns a 404 or 403 status), the load balancer will consider the instances unhealthy. This is the most direct cause because the health check relies on a successful HTTP response (typically 200 OK) from that exact path.

Answer

The auto scaling group's minimum size is too low.

Answer

The security group for the instances blocks traffic from the load balancer.

Answer

The instances are under high CPU load.

Question 4

A cloud administrator receives an alert that a virtual machine's disk usage is at 95%. The VM hosts a database. Which of the following troubleshooting steps should the administrator take FIRST?

Accepted Answer

Check the disk to identify which files are consuming space. When a VM's disk usage reaches 95%, the first step is to identify what is consuming the space. Checking the disk to identify which files are consuming space (Option D) allows the administrator to determine whether the issue is caused by database logs, temporary files, or other data, and to plan an appropriate remediation without unnecessary risk or downtime.

Answer

Expand the virtual disk by resizing the volume in the cloud console

Answer

Reboot the virtual machine to free up temporary files

Answer

Query the database for active connections to determine if there are long-running transactions

Question 5

A cloud administrator needs to automate the process of patching multiple virtual machines in a private cloud. Which of the following is the best tool for this purpose?

Accepted Answer

Ansible playbook. An Ansible playbook is the best tool for automating patching across multiple VMs because it is agentless, uses SSH for Linux or WinRM for Windows, and supports idempotent execution. This allows the administrator to define the desired patch state declaratively and apply it consistently across the entire fleet without manual intervention.

Answer

Virtual machine templates

Answer

SSH with manual commands

Answer

Scheduled tasks in the hypervisor management console

Question 6

A company recently migrated an application to the cloud. The application uses a load balancer in front of multiple EC2 instances. After the migration, users report that they occasionally receive 'Connection refused' errors. The administrator checks the load balancer health check logs and finds that some instances are marked unhealthy intermittently. The application's health check endpoint returns HTTP 200 when tested manually from the admin's workstation. What is the most likely cause?

Accepted Answer

Security group rules blocking the load balancer health checks. Option A is correct because if the security group does not allow traffic from the load balancer's health check source, the health checks will fail intermittently. Option B is wrong because a short interval would not cause intermittent failures; it would cause constant failures. Option C is wrong because the application binding to an incorrect IP would cause constant failures, not intermittent. Option D is wrong because memory exhaustion would cause overall application failure, not just health checks.

Answer

The health check interval is too short

Answer

The instances are running out of memory

Answer

The application is not binding to the correct IP address

Question 7

A company uses a cloud provider's container orchestration service (e.g., EKS, AKS, GKE) to run a set of microservices. The current cluster uses three worker nodes, each of size m5.large (2 vCPU, 8 GB RAM). The operations team notices that CPU utilization on the worker nodes averages 80% during peak hours, and some pods are being evicted due to resource pressure. The team wants to ensure that the cluster can handle a 50% increase in traffic without performance degradation. Which action should the cloud architect take?

Accepted Answer

Create a new node pool using a larger instance type, such as m5.xlarge, and migrate the pods. Option B is correct because the current nodes are already at 80% CPU utilization during peak hours, and a 50% traffic increase would push them to 120% utilization, causing severe performance degradation and pod evictions. Scaling to a larger instance type (m5.xlarge with 4 vCPU, 16 GB RAM) doubles the available resources per node, providing sufficient headroom to absorb the traffic spike without requiring additional nodes or architectural changes. This directly addresses the resource pressure by increasing the capacity per node, which is more efficient than scaling out horizontally when the existing node type is already saturated.

Answer

Configure horizontal pod autoscaling to scale out pods automatically

Answer

Implement cluster autoscaler to add more nodes of the same type during peak

Answer

Reduce the CPU and memory requests in the pod specifications to allow more pods per node

Question 8

A startup is deploying its web application in the cloud using an auto-scaling group. The application experiences variable traffic, with spikes during business hours. The team has configured the auto-scaling group to scale out when CPU utilization exceeds 70% and scale in when it drops below 30%. However, during a sudden spike, the new instances take over 5 minutes to become healthy, causing slow response times. What should the team do to improve responsiveness?

Accepted Answer

Implement a predictive scaling policy based on historical patterns.. Predictive scaling uses historical traffic patterns to proactively launch instances before CPU utilization spikes, eliminating the 5-minute lag from reactive scaling. This approach anticipates the business-hour surge and ensures capacity is ready when demand increases, directly addressing the slow response time issue.

Answer

Use a larger instance type for the auto-scaling group.

Answer

Reduce the threshold for scale-out to 50% CPU.

Answer

Increase the cooldown period for the scaling policy.

Question 9

An organization uses a cloud-based backup service to back up its critical database every night. The backup job has been failing for the past three days with an error message indicating 'insufficient storage space in the backup repository.' The administrator checks the backup repository and finds that it is 80% full. The database is 2 TB in size, and the backup policy retains 7 daily backups. The administrator estimates that each full backup is approximately 500 GB after deduplication. The company's RPO requirement is 24 hours. What should the administrator do to resolve the backup failure without violating the RPO?

Accepted Answer

Delete the oldest full backup that is more than 7 days old.. The backup repository is running out of space. Deleting older backups (beyond the current retention window) frees up space immediately, allowing the next backup to succeed and meet the 24-hour RPO. The retention policy is 7 days, so deleting backups older than 7 days or adjusting retention is appropriate.

Answer

Increase the backup retention period to 14 days to keep more backups.

Answer

Enable incremental backups instead of full backups to reduce size.

Answer

Reduce the deduplication ratio to lower storage usage.

Question 10

A company is using a cloud provider's object storage for archival data. The data is rarely accessed but must be retained for 7 years for compliance. The current storage class is Standard, and the monthly bill is increasing. The cloud administrator wants to minimize costs while meeting compliance requirements. The data must be accessible within 24 hours if needed. Which of the following actions should the administrator take?

Accepted Answer

Use a lifecycle policy to transition objects to a cheaper storage class after a period.. Option D is correct because a lifecycle policy automates the transition of objects from a higher-cost storage class (e.g., Standard) to a cheaper class (e.g., S3 Glacier Deep Archive or Azure Archive) after a specified period, reducing costs while retaining data for the required 7 years. The data remains accessible within 24 hours via a restore request, meeting the compliance and retrieval time requirement.

Answer

Compress the objects using server-side encryption.

Answer

Delete the objects after 7 years to save cost.

Answer

Move the data to a cold storage tier like Glacier or Archive.

Question 11

Your organization operates a three-tier web application hosted on a public cloud platform. The application tier consists of an auto-scaling group of virtual machines running a custom web service. The database tier is a managed MySQL service. Recently, users have reported slow response times during business hours, especially when the application performs write operations. Reviewing the monitoring dashboards shows that the CPU utilization on the application instances averages 80% and the database connection pool is consistently maxed out at 200 connections. The auto-scaling group is configured to add instances when CPU exceeds 70% for 5 minutes, but scaling events are not triggering as expected. The application team has confirmed that there are no code changes in the last week. You check the CloudWatch alarms and see no metric alarms for CPU. What is the MOST likely reason the auto-scaling group is not scaling out?

Accepted Answer

The CPU metric alarm that triggers the scaling policy has been deleted or never configured. Option A is correct: without a CPU alarm configured, the scaling policy has no trigger. Option B is wrong: scaling cool-down only delays after a scaling event, but no event occurs. Option C is wrong: health checks are for instance health, not scaling. Option D is wrong: instance count limit would prevent scaling after attempts, but policy would still trigger.

Answer

The auto-scaling group has reached the maximum instance count

Answer

The auto-scaling group has a default cooldown period that is too long

Answer

The application instances are not responding to health checks

Question 12

A cloud engineer is tasked with setting up a disaster recovery (DR) plan for a critical application that runs on virtual machines in a private cloud. The DR site is a public cloud. The application requires low recovery time objective (RTO) of less than 15 minutes and recovery point objective (RPO) of less than 5 minutes. Which of the following replication strategies BEST meets these requirements?

Accepted Answer

Use continuous asynchronous replication to the DR site.. Option B is correct because continuous asynchronous replication can achieve low RPO (under 5 minutes) and low RTO (under 15 minutes) if VMs can be quickly started from the replicated data. Option A is wrong because daily replication cannot achieve RPO < 5 minutes. Option C is wrong because synchronous replication may introduce latency and is typically used for high consistency, but RTO may be higher if recovery involves starting VMs; also, it can affect primary performance. Option D is wrong because backup every 5 minutes may meet RPO but RTO would be higher due to restoration time from backup.

Answer

Replicate virtual machine images to the DR site daily.

Answer

Use synchronous replication to keep data identical.

Answer

Configure agent-based backup to the DR site every 5 minutes.

Question 13

A company recently migrated its on-premises backup server to a cloud virtual machine running Windows Server with a dedicated data disk for backups. The backup software is configured to write to a folder on the data disk. After two weeks, the backup jobs start failing with 'disk full' errors. The cloud engineer logs into the VM and verifies that the data disk has 500 GB of total space and the backup folder shows only 300 GB used. However, the operating system reports the disk as 100% full. The engineer also notices that the recycle bin on the data disk appears to be empty. Which of the following is the MOST likely cause of the discrepancy?

Accepted Answer

Shadow copies (Volume Shadow Copies) are consuming space on the data disk. Option A is correct: previous backups moved to the system volume shadow copy (VSS) snapshots can consume hidden space. Option B is wrong: VSS and system protection are separate from the recycle bin. Option C is wrong: cloud storage limits affect object storage, not VM disks. Option D is wrong: compression would reduce used space, not increase it.

Answer

The cloud provider has imposed a quota on the disk's storage capacity that is lower than the provisioned size

Answer

The recycle bin on the data disk contains deleted backup files that are not counted

Answer

The backup software is compressing data, causing the disk to appear full due to index fragmentation

Question 14

A cloud administrator manages a multi-tier web application running on AWS. The application consists of a load balancer, web servers in an auto scaling group, and a MySQL RDS database. Recently, users have reported slow page load times during peak hours. The cloud administrator has checked the load balancer metrics and found that response times are high, but CPU utilization on the web servers is below 60%. The RDS instance shows high read IOPS and a high number of database connections. The administrator suspects the database is the bottleneck. Which of the following actions should the administrator take FIRST to resolve the performance issue?

Accepted Answer

Enable an in-memory caching layer such as ElastiCache to reduce database load.. Option C is correct because enabling an in-memory caching layer (e.g., ElastiCache) reduces the number of read queries hitting the database, alleviating the bottleneck with minimal changes. Option A is wrong because read replicas only help if the database workload is read-heavy and if the application can route reads to replicas; caching is often a simpler first step. Option B is wrong because web server CPU is not high, so scaling web servers won't help. Option D is wrong because increasing the database instance size may help but is more expensive and disruptive; caching is more efficient initially.

Answer

Migrate the database to a larger instance class.

Answer

Add read replicas to offload read queries from the primary database.

Answer

Increase the size of the web servers to handle more requests faster.

Question 15

A cloud operations team uses a configuration management tool (e.g., Chef, Puppet) to manage a fleet of Linux servers in a public cloud. After a recent update, the team notices that some servers are failing to apply the new configuration. The logs on the failing servers show connection timeouts to the configuration management server. Other servers in the same subnet and security group apply configurations successfully. The configuration management server is reachable from the admin's workstation. Which of the following is the MOST likely cause of the issue?

Accepted Answer

The failing servers have a misconfigured DNS resolver.. Option A is correct because a misconfigured DNS resolver on the failing servers can cause hostname resolution failures, leading to connection timeouts to the configuration management server. Option B is wrong because all servers share the same security group, so firewall rules are identical. Option C is wrong because if the certificate had expired, all servers would be affected, not just a few. Option D is wrong because if the agent were missing, the logs would show agent-related errors, not connection timeouts.

Answer

The failing servers are missing the configuration management agent.

Answer

The configuration management server certificate has expired.

Answer

The failing servers have a firewall rule blocking outbound connections.