CV0-004 Practice Test 42 — 15 Questions

Question 1

A cloud engineer needs to apply security patches to a fleet of Windows servers without manual intervention. Which service can automate this process?

Accepted Answer

AWS Systems Manager Patch Manager. AWS Systems Manager Patch Manager automates the patching of managed instances.

Answer

AWS Config

Answer

AWS CloudFormation

Answer

AWS Trusted Advisor

Question 2

Which TWO of the following are benefits of a multi-cloud strategy? (Select exactly two.)

Accepted Answer

Avoids vendor lock-in. A multi-cloud strategy distributes workloads across multiple cloud providers (e.g., AWS, Azure, GCP), which prevents dependency on a single vendor's proprietary services, APIs, and pricing models. This avoids vendor lock-in, giving organizations the flexibility to migrate workloads or negotiate better terms without being forced to use a specific provider's ecosystem.

Answer

Reduces data transfer costs

Answer

Ensures regulatory compliance in all regions

Answer

Simplifies management by using a single cloud provider

Question 3

A company wants to ensure that logs from their application are easily searchable and structured for analysis. Which logging format should be recommended?

Accepted Answer

JSON format. Structured logging in JSON format allows for efficient querying and parsing.

Answer

CSV format

Answer

Binary format

Answer

Plain text format

Question 4

The above condition is included in an IAM policy. What does this condition restrict?

Accepted Answer

Access to only requests from the IP range 192.168.1.0/24.. The aws:SourceIp condition key limits the source IP addresses to the specified range.

Answer

Access through a VPN connection.

Answer

Access to only private IP addresses.

Answer

Access from a specific VPC.

Question 5

Refer to the exhibit. A cloud load balancer is returning 502 Bad Gateway errors to clients. What is the most likely cause?

Accepted Answer

The backend web servers are not responding correctly.. A 502 Bad Gateway error indicates that the load balancer (acting as a proxy or gateway) received an invalid or no response from the upstream backend web servers. This typically occurs when the backend servers are overloaded, have crashed, or are misconfigured (e.g., incorrect health check path, application pool failure). The load balancer successfully forwards the request but fails to get a valid HTTP response, triggering the 502 error.

Answer

The load balancer's SSL certificate is invalid.

Answer

The security group allows inbound traffic from the load balancer.

Answer

The DNS record points to the wrong IP.

Question 6

A cloud administrator receives an alert that a virtual machine's disk usage is at 95%. The VM hosts a database. Which of the following troubleshooting steps should the administrator take FIRST?

Accepted Answer

Check the disk to identify which files are consuming space. When a VM's disk usage reaches 95%, the first step is to identify what is consuming the space. Checking the disk to identify which files are consuming space (Option D) allows the administrator to determine whether the issue is caused by database logs, temporary files, or other data, and to plan an appropriate remediation without unnecessary risk or downtime.

Answer

Expand the virtual disk by resizing the volume in the cloud console

Answer

Reboot the virtual machine to free up temporary files

Answer

Query the database for active connections to determine if there are long-running transactions

Question 7

A cloud administrator is troubleshooting a failed deployment of a new application version using a continuous integration/continuous deployment (CI/CD) pipeline. The pipeline fails at the 'test' stage. What is the first step the administrator should take?

Accepted Answer

Check the test logs for specific errors. Checking the test logs for specific errors is the first step in troubleshooting a failed pipeline. It provides detailed information about what went wrong during the test stage. Option A is incorrect because re-running the pipeline without investigating the failure is unlikely to fix the underlying issue and wastes time. Option B is incorrect because increasing the timeout does not address the root cause of the failure; it only delays the timeout, which may not be the problem. Option C is incorrect because rolling back should be done only after understanding the failure and deciding to revert, not as a first step.

Answer

Re-run the pipeline

Answer

Increase the timeout of the test stage

Answer

Roll back to the previous version

Question 8

A cloud administrator needs to automate the patching of operating systems on a fleet of EC2 instances. Which AWS service should be used?

Accepted Answer

AWS Systems Manager Patch Manager. AWS Systems Manager Patch Manager automates the process of patching managed nodes with both security-related and other types of updates. It uses a patch baseline to define which patches should be installed and can schedule patching across a fleet of EC2 instances, making it the correct service for this task.

Answer

AWS Update Manager

Answer

AWS Config

Answer

Amazon Inspector

Question 9

An organization is designing a cloud architecture that must be fault-tolerant within a single region. The architect decides to deploy application instances in multiple Availability Zones (AZs). Which cloud characteristic is being leveraged?

Accepted Answer

Resource pooling. Deploying application instances across multiple Availability Zones (AZs) within a single region leverages resource pooling, a key cloud characteristic. Resource pooling allows the cloud provider to aggregate compute, storage, and network resources from multiple physical locations (AZs) into a shared pool that can be dynamically allocated to tenants. By distributing instances across AZs, the architect ensures that if one AZ fails, the application remains available using resources from other AZs, directly utilizing the provider's pooled infrastructure.

Answer

Measured service

Answer

Elasticity

Answer

On-demand self-service

Question 10

Which THREE design principles are fundamental to building a highly available cloud architecture?

Accepted Answer

Eliminate single points of failure. Eliminating single points of failure (A) is fundamental because if any single component (e.g., a load balancer, a storage volume, or a compute instance) fails, the entire system can become unavailable. In cloud architectures, this is achieved by deploying redundant components so that no single failure can cause a complete outage. For example, using multiple load balancers in an active-passive or active-active configuration ensures traffic can still be routed if one fails.

Answer

Scale vertically to increase capacity

Answer

Use a single, powerful database instance

Question 11

A cloud architect is designing a multi-tier application. To ensure secure communication between the web tier and the application tier within the same VPC, which approach should be used?

Accepted Answer

Use internal IP addresses with network ACLs allowing all traffic from the web tier subnet.. Using internal IP addresses within the same VPC avoids exposure to the internet, and network ACLs provide subnet-level stateless traffic filtering, allowing only the required traffic from the web tier subnet to the application tier. Option A is unnecessary since both tiers are in the same VPC; VPN is for connecting external networks. Option C uses public IPs, which introduces unnecessary internet exposure and security risks. Option D is overkill as transit gateway with encryption is designed for complex network interconnections, not simple intra-VPC traffic.

Answer

Use a VPN between tiers.

Answer

Use public IP addresses with security groups.

Answer

Use a transit gateway with encryption.

Question 12

A cloud operations team is troubleshooting a performance issue with a web application hosted on a cloud platform. The application uses an auto-scaling group behind a load balancer. Users report slow response times during peak hours. Monitoring shows high CPU utilization on all instances. Which of the following should the team do first to improve performance?

Accepted Answer

Adjust the auto-scaling policy to scale out at lower CPU threshold.. The immediate symptom is high CPU utilization on all instances during peak hours, indicating that the current instances are being overwhelmed. Adjusting the auto-scaling policy to scale out at a lower CPU threshold (e.g., from 70% to 50%) will proactively add more instances before CPU becomes saturated, distributing the load and improving response times. This directly addresses the root cause—insufficient compute capacity—without requiring architectural changes or additional services.

Answer

Increase the instance size of the auto-scaling group.

Answer

Add a content delivery network (CDN) in front of the application.

Answer

Enable caching at the database layer.

Question 13

A company uses a hybrid cloud model with on-premises servers and a public cloud. The IT team wants to ensure that critical data is backed up daily and retained for 30 days. The backup solution must be cost-effective. Which of the following backup strategies BEST meets these requirements?

Accepted Answer

Incremental backup daily to cloud storage, with weekly full backup.. It combines daily incremental backups to cloud storage with a weekly full backup, minimizing daily data transfer and storage costs while ensuring a full recovery point within the week. The 30-day retention is achieved by retaining the weekly full backup and all incremental backups for 30 days, which is cost-effective compared to daily full backups. This strategy aligns with the 3-2-1 backup rule and leverages cloud storage's pay-as-you-go model.

Answer

Full backup daily to cloud storage with a 30-day lifecycle policy.

Answer

Full backup daily to tape, retained for 30 days.

Answer

Differential backup daily to cloud storage, with full backup every 30 days.

Question 14

A cloud administrator is tasked with ensuring that a cloud database is backed up daily. The backup must be stored off-site for disaster recovery. Which of the following is the most cost-effective solution?

Accepted Answer

Schedule a backup to an object storage bucket in a different region.. Scheduling a backup to an object storage bucket in a different region leverages cloud-native, pay-per-use storage (e.g., Amazon S3, Azure Blob, or Google Cloud Storage) with geo-redundancy. This eliminates the need for physical media or manual intervention, and cross-region replication provides off-site disaster recovery at minimal cost compared to tape or dedicated replication services.

Answer

Perform a full backup to tape and store off-site.

Answer

Perform incremental backups to a local network share.

Answer

Use snapshot replication to a different region.

Question 15

A cloud engineer is tasked with deploying a containerized application on Kubernetes. The application must handle varying loads, and the deployment should automatically replace failed containers. Which Kubernetes object should the engineer use to achieve self-healing and scalability?

Accepted Answer

Deployment. A Deployment is the correct Kubernetes object because it manages ReplicaSets to provide declarative updates, self-healing (automatic replacement of failed pods), and scalability (adjusting replica counts). Unlike a standalone Pod, a Deployment ensures the desired state is maintained, automatically rescheduling containers if they fail.

Answer

ConfigMap

Answer

Service

Answer

Pod