CV0-004 Practice Test 41 — 15 Questions

Question 1

Which TWO of the following are advantages of using a configuration management tool (e.g., Ansible, Chef, Puppet) in cloud deployments? (Choose two.)

Accepted Answer

Enable idempotent infrastructure changes.. Configuration management tools like Ansible, Chef, and Puppet enforce idempotency, meaning that applying the same configuration multiple times results in the same desired state without unintended side effects. This is achieved by checking the current state of the system before making changes, ensuring that resources are only modified when necessary. Idempotency is critical for reliable, repeatable infrastructure changes in cloud deployments.

Answer

Automatically configure network devices.

Answer

Provide dynamic auto-scaling of resources.

Answer

Monitor application performance in real-time.

Question 2

Sequence the steps to configure a cloud monitoring alert for high memory usage on a virtual machine.

Accepted Answer

Go to monitoring, then create alarm, then set threshold, then configure notification, then test. Go to monitoring, create alarm, set threshold, configure notification, then test.

Answer

Create alarm, then go to monitoring, then set threshold, then configure notification, then test

Answer

Go to monitoring, then create alarm, then configure notification, then set threshold, then test

Answer

Go to monitoring, then set threshold, then create alarm, then configure notification, then test

Question 3

A company has a cloud environment with multiple virtual networks that need to communicate with each other using private IP addresses. The company wants a centrally managed solution that simplifies routing and security. Which networking architecture should the architect implement?

Accepted Answer

Transit network with a VPN appliance. A transit network with a VPN appliance provides a centrally managed hub-and-spoke architecture that simplifies routing and security for multiple virtual networks. The VPN appliance (e.g., a software VPN or cloud marketplace appliance) establishes encrypted tunnels between the transit network and each spoke network, allowing private IP communication without the need for full-mesh peering or complex route tables. This design centralizes traffic inspection, policy enforcement, and routing, meeting the requirement for simplified management.

Answer

Virtual network peering between all virtual networks

Answer

Dedicated connection to each virtual network

Answer

VPN connections between all virtual networks

Question 4

A cloud engineer is reviewing a Terraform configuration for deploying a web server. The instance is created successfully, but the web server does not start. What is the most likely cause?

Accepted Answer

The AMI ID is for a Windows instance, but the script uses yum.. If the AMI ID is for a Windows instance but the user_data script uses yum (a Linux package manager), the script will fail to execute, causing the web server not to start. This is a common mismatch when using Terraform with incorrect AMI types. Option B (security group) would not prevent the web server process from starting; it would only block inbound access, which does not match the symptom 'web server does not start.' Options A and D are less likely causes for the server not starting.

Answer

The subnet is in a private zone without internet access.

Answer

The security group does not allow inbound HTTP traffic.

Answer

The user_data script lacks execute permissions.

Question 5

A company wants to deploy a new version of a web application with zero downtime. They decide to use a blue/green deployment strategy. Which action is essential to switching traffic from the blue environment to the green environment?

Accepted Answer

Update the load balancer target group to point to the green environment. In a blue/green deployment, the load balancer is the traffic router. Updating the load balancer target group to point to the green environment is essential because it instantly shifts production traffic from the blue (current) to the green (new) environment without downtime. This action ensures the load balancer forwards requests to the healthy green targets, completing the cutover.

Answer

Scale down the blue environment before traffic is switched

Answer

Deploy a canary release that sends 10% of traffic to green first

Answer

Modify the DNS TTL to 0 and update A records

Question 6

A cloud architect is designing a disaster recovery plan that includes testing. Which TWO activities are commonly performed as part of DR testing?

Accepted Answer

Chaos engineering. DR testing includes scheduled drills and chaos engineering to validate recovery procedures.

Answer

Reserved Instance planning

Answer

Rightsizing recommendations

Answer

Tagging resources

Question 7

A company uses a public cloud IaaS model to host a database. They want to ensure the database remains available if an entire availability zone fails. Which configuration would provide the highest availability with automatic failover?

Accepted Answer

Deploy the database with a stand-by replica in a different availability zone using synchronous replication. Deploying a database with a stand-by replica in a different availability zone using synchronous replication ensures that all committed transactions are written to both the primary and the stand-by before acknowledging the client. This provides automatic failover with zero data loss (RPO=0) and high availability, as the stand-by replica can immediately take over if the entire availability zone fails.

Answer

Use a single database instance with automated snapshots to a different region

Answer

Deploy the database in a single availability zone with multiple EC2 instances

Answer

Use a read replica in a different region with asynchronous replication

Question 8

A cloud operations team wants to analyze application performance and identify slow database queries. They need a distributed tracing solution. Which service should they use?

Accepted Answer

AWS X-Ray. AWS X-Ray provides distributed tracing to trace requests through applications and identify performance bottlenecks.

Answer

Amazon Inspector

Answer

AWS CloudTrail

Answer

Amazon CloudWatch Logs Insights

Question 9

A cloud administrator wants to analyze network traffic to troubleshoot connectivity issues between VMs. Which feature should be enabled?

Accepted Answer

Network flow logs. Network flow logs capture IP traffic information for network debugging. They record metadata about network traffic to help troubleshoot connectivity issues.

Answer

Audit logging service

Answer

Distributed tracing service

Answer

Configuration compliance service

Question 10

A cloud administrator needs to apply security patches to a group of Windows servers during a maintenance window to minimize disruption. Which type of service should be used?

Accepted Answer

Patch automation service with maintenance window scheduling. Patch automation services allow administrators to define maintenance windows and automatically apply approved patches to managed instances, ensuring updates are applied with minimal disruption.

Answer

Vulnerability assessment service

Answer

Configuration compliance service

Answer

Configuration management and automation service

Question 11

A cloud administrator is configuring cost management for a multi-account cloud environment. The company wants to allocate costs by department and project. Which TWO steps should the administrator take to achieve this? (Choose two.)

Accepted Answer

Activate cost allocation tags in the billing console. Tagging resources and enabling cost allocation tags in the billing console allow cost breakdown by department and project. The cloud provider's cost reporting tools can then filter by these tags.

Answer

Enable the cloud provider's cost reporting tools

Answer

Create separate cloud accounts for each department

Answer

Use the cloud provider's budgeting tools to set spending limits

Question 12

A cloud operations team is preparing for a disaster recovery drill for a multi-tier application. Which TWO activities are essential for verifying the effectiveness of the DR plan? (Select TWO.)

Accepted Answer

Verify the RTO and RPO are achieved. Failover testing validates that the DR site takes over correctly, and RTO/RPO verification ensures the recovery meets business requirements. Updating documentation is important but not a verification activity.

Answer

Review the incident response plan

Answer

Update the asset inventory

Answer

Conduct a security audit

Question 13

A cloud engineer is implementing a tagging strategy for cost allocation. Which tags should be applied to resources to track costs by business unit and environment?

Accepted Answer

BusinessUnit and Environment. Tags like 'BusinessUnit' and 'Environment' are commonly used for cost allocation and reporting. Tags must be applied consistently for accurate cost tracking.

Answer

Owner and Department

Answer

Project and Application

Answer

Location and Region

Question 14

A cloud administrator needs to monitor CPU utilization of a group of virtual machines and automatically add more instances when utilization exceeds 80% for 5 minutes. Which cloud service should the administrator use to define this scaling policy?

Accepted Answer

Auto scaling service. Auto scaling groups can use scaling policies to add instances based on monitoring alarms. The scenario describes a scaling policy triggered by an alarm on CPU utilization.

Answer

Configuration management service

Answer

Audit logging service

Answer

Systems management service

Question 15

A cloud architect is designing a monitoring strategy to detect anomalies in application latency. Which TWO services can be used for anomaly detection?

Accepted Answer

AWS CloudWatch Anomaly Detection. CloudWatch anomaly detection and Azure Monitor smart detection can detect anomalies in metrics.

Answer

AWS Trusted Advisor

Answer

AWS Config

Answer

AWS CloudTrail