CV0-004 Practice Test 49 — 15 Questions

Question 1

Your organization operates a three-tier web application hosted on a public cloud platform. The application tier consists of an auto-scaling group of virtual machines running a custom web service. The database tier is a managed MySQL service. Recently, users have reported slow response times during business hours, especially when the application performs write operations. Reviewing the monitoring dashboards shows that the CPU utilization on the application instances averages 80% and the database connection pool is consistently maxed out at 200 connections. The auto-scaling group is configured to add instances when CPU exceeds 70% for 5 minutes, but scaling events are not triggering as expected. The application team has confirmed that there are no code changes in the last week. You check the CloudWatch alarms and see no metric alarms for CPU. What is the MOST likely reason the auto-scaling group is not scaling out?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The CPU metric alarm that triggers the scaling policy has been deleted or never configured. The auto-scaling group relies on a metric alarm (e.g., CPU utilization) to trigger the scaling policy. Without any CloudWatch alarm for CPU, the scaling policy has no trigger, so scaling out never occurs. Option A is incorrect because the group may not have reached its maximum count; the issue is the lack of a trigger. Option C is incorrect because the cooldown period only delays scaling after a scaling activity has been triggered, but no scaling event is occurring. Option D is incorrect because health checks affect instance replacement, not scaling based on load.

Answer

The auto-scaling group has reached the maximum instance count

Answer

The auto-scaling group has a default cooldown period that is too long

Answer

The application instances are not responding to health checks

Question 2

A company uses an auto-scaling group to handle variable web traffic. The scaling policy is based on CPU utilization. However, during a flash sale, the application experiences a sudden spike in traffic, and the auto-scaling group takes too long to launch new instances. Which design change would most effectively reduce the time to scale out?

Accepted Answer

Use scheduled scaling to pre-warm instances before the sale. Using a predictive scaling policy or scheduled scaling can anticipate traffic spikes and pre-warm instances, reducing launch delay. Alternatively, increasing the cooldown period would slow scaling. Lowering the threshold would cause earlier scaling but not necessarily reduce launch time. Using larger instances is vertical scaling, not addressing launch delay.

Answer

Use larger instance types to handle more traffic

Answer

Lower the CPU utilization threshold

Answer

Increase the cooldown period

Question 3

An organization uses CloudFormation to manage resources across multiple AWS accounts. They need to deploy a common set of resources (e.g., logging configuration) to all accounts in an AWS Organization. Which CloudFormation feature should they use?

Accepted Answer

StackSets. CloudFormation StackSets allow you to deploy stacks across multiple accounts and regions in a single operation, ideal for multi-account governance.

Answer

Change sets

Answer

Drift detection

Answer

Nested stacks

Question 4

A cloud administrator is troubleshooting a failed backup job that was supposed to back up a database to a cloud storage bucket. The job fails with an access denied error. Which two likely causes should the administrator investigate? (Choose two.)

Accepted Answer

The IAM role assigned to the backup service lacks write permissions to the bucket. Correct options are B and D. Option B is likely because the IAM role assigned to the backup service lacks write permissions to the bucket, resulting in an access denied error. Option D is likely because if the storage bucket has been deleted, the backup job cannot write to it, also producing an access denied error. Option A is incorrect because an offline database would cause a connection error, not access denied. Option C is incorrect because a misconfigured backup schedule would prevent the job from running at the scheduled time, not cause an access denied error. Option E is incorrect because version incompatibility typically results in a software error, not an access denied error.

Answer

The database is offline during backup

Answer

The backup schedule is misconfigured

Answer

The backup software version is incompatible

Question 5

A company uses AWS and Azure for redundancy. They deploy the same application on both clouds to avoid vendor lock-in and improve disaster recovery. Which cloud deployment model is this?

Accepted Answer

Multi-cloud. Multi-cloud uses multiple public cloud providers for redundancy and best-of-breed services.

Answer

Community cloud

Answer

Hybrid cloud

Answer

Private cloud

Question 6

An Azure administrator needs to deploy a cloud-native application using Azure DevOps. The team wants to define the entire Azure infrastructure as code using a declarative language that is concise and integrated with Azure. Which tool should the administrator use?

Accepted Answer

Bicep. Bicep is a domain-specific language for deploying Azure resources that provides a simpler syntax than ARM templates while being fully integrated with Azure.

Answer

Terraform

Answer

Ansible

Answer

ARM templates (JSON)

Question 7

A company is considering a multi-cloud deployment to avoid vendor lock-in. Which TWO factors should they consider? (Select TWO.)

Accepted Answer

Consistent security policies across clouds. Consistent security policies across clouds ensure a unified security posture, which is critical for compliance and risk management in a multi-cloud environment. Without consistent policies, vulnerabilities can arise from misconfigurations or gaps in coverage between providers. Option C is correct because data egress costs between clouds can be significant, as each cloud provider charges for data leaving their network, and these costs must be factored into the total cost of ownership to avoid budget overruns.

Answer

Unified management tools support

Answer

Performance differences between providers

Answer

Software licensing compatibility

Question 8

A company needs to choose a disaster recovery strategy with an RTO of 4 hours and an RPO of 15 minutes. Which of the following is the most cost-effective approach that meets these requirements?

Accepted Answer

Pilot light. Pilot light keeps a minimal environment running and can be scaled up quickly; it offers a balance between cost and recovery time. Warm standby would be more expensive, cold standby would not meet RTO/RPO, and multi-site active-active is overkill.

Answer

Multi-site active-active

Answer

Warm standby

Answer

Cold standby

Question 9

A company is designing a hybrid cloud architecture connecting their on-premises data center to AWS. Which TWO options provide dedicated, private network connectivity? (Select TWO.)

Accepted Answer

Site-to-Site VPN. AWS Direct Connect provides dedicated private connection, and VPN over the internet can also be private if encrypted, but it's not dedicated. Site-to-Site VPN is a valid private connectivity option. Internet gateway is public, VPC peering is between VPCs, not on-premises.

Answer

Internet gateway

Answer

VPC peering

Answer

NAT gateway

Question 10

A cloud architect is designing a multi-region application with a Recovery Time Objective (RTO) of 1 hour and a Recovery Point Objective (RPO) of 15 minutes. The application runs on virtual machines in a public cloud. Which disaster recovery strategy best meets these objectives?

Accepted Answer

Hot standby in a secondary region with synchronous replication. Hot standby involves running a fully functional standby environment that can take over within minutes, achieving low RTO and RPO. Active-active can also meet these but may be more complex and costly; warm standby typically has longer RTO; cold standby has hours.

Answer

Active-active across two regions with load balancing

Answer

Cold standby with daily backups

Answer

Warm standby with hourly snapshots

Question 11

A company is deploying a global web application that serves static content (images, CSS, JavaScript) to users worldwide. They want to reduce latency and offload traffic from the origin servers. Which service should they implement?

Accepted Answer

Content Delivery Network (CDN). A Content Delivery Network (CDN) caches static content at edge locations worldwide, reducing latency and offloading origin servers.

Answer

Auto-scaling group

Answer

VPN connection

Answer

Load balancer

Question 12

Which cloud service model provides the customer with the most control over the operating system and applications?

Accepted Answer

IaaS. IaaS provides virtualized computing resources where customers manage OS and above.

Answer

FaaS

Answer

PaaS

Answer

SaaS

Question 13

A cloud engineer is managing infrastructure as code using Terraform. Which command should be run to preview changes before applying them to the cloud environment?

Accepted Answer

terraform plan. The terraform plan command creates an execution plan, showing what actions Terraform will take to change the infrastructure. It is used as a dry run before applying changes.

Answer

terraform apply

Answer

terraform destroy

Answer

terraform init

Question 14

A cloud architect is designing a monitoring solution for a serverless application. The architect needs to collect custom application metrics and set up anomaly detection alerts. Which TWO services should be used? (Select TWO.)

Accepted Answer

Cloud monitoring service. A cloud monitoring service can collect custom application metrics, and a monitoring service with anomaly detection capabilities can trigger alerts when behavior deviates from normal patterns. Cloud audit logging services are for auditing API calls, not metrics.

Answer

Configuration management service

Answer

Cloud audit logging service

Answer

Cloud logging service for log storage

Question 15

A cloud administrator receives an alert that a virtual machine has unexpectedly shut down. The administrator checks the hypervisor logs and finds an entry "Out of memory: killed process" in the VM's OS logs. Which of the following is the most likely cause?

Accepted Answer

The VM has a memory leak in its application.. The log entry 'Out of memory: killed process' indicates that the Linux kernel's Out-Of-Memory (OOM) killer terminated a process to free memory. This is typically triggered when the system runs out of available memory, often due to a memory leak in an application consuming memory over time without releasing it. While hypervisor-level issues can cause VM instability, the specific OOM killer message points to a guest OS-level memory exhaustion problem, making a memory leak the most likely cause.

Answer

The hypervisor memory overcommitment is too high.

Answer

The VM's memory balloon driver is not installed.

Answer

The VM's swap space is insufficient.