CV0-004 Practice Questions 2 — 50 Questions

Question 1

During a scheduled DR drill, the cloud team fails over a critical application to the secondary region. After the drill, the application is failed back. The application's RTO was 2 hours, but the actual failover took 2.5 hours. Which action should be taken to improve future failover times?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Automate the failover process using infrastructure as code and runbooks. Failing the RTO indicates the process is not meeting the target. Automating the failover process with scripts or runbooks reduces manual steps and time. Rehearsing the process more often also helps but automation directly reduces time.

Answer

Increase the frequency of DR drills

Answer

Increase the bandwidth between regions for data replication

Answer

Reduce the RTO to 1 hour to force faster execution

Question 2

A company uses AWS and wants to analyze cost trends and identify the top services contributing to monthly spending. Which AWS tool provides a pre-built dashboard for this purpose?

Accepted Answer

AWS Cost Explorer. AWS Cost Explorer provides pre-built reports and dashboards for cost trend analysis.

Answer

AWS Trusted Advisor

Answer

AWS Compute Optimizer

Answer

AWS Budgets

Question 3

An organization wants to track cloud costs by project and environment (development, testing, production). Which strategy should be employed for cost attribution?

Accepted Answer

Implement a tagging strategy for resources with Environment and Project tags. Tagging resources with key-value pairs (e.g., Project, Environment) enables cost allocation reports. Billing alerts and budgets help manage costs but not attribution.

Answer

Set up billing alerts for each account

Answer

Enable detailed billing reports with resource IDs

Answer

Use AWS Budgets to set spending limits per project

Question 4

A cloud engineer is troubleshooting a network connectivity issue between two subnets in a VPC. The engineer wants to capture and analyze traffic metadata to identify dropped packets. Which TWO tools can provide this information? (Select TWO.)

Accepted Answer

AWS Network Firewall logs. VPC Flow Logs capture metadata about IP traffic going to and from network interfaces. AWS X-Ray provides distributed tracing but for application-level requests, not raw network traffic. AWS CloudTrail logs API calls, not traffic.

Answer

AWS X-Ray

Answer

Amazon CloudWatch Logs

Answer

AWS CloudTrail

Question 5

A company uses AWS and wants to implement a disaster recovery plan with an RTO of 4 hours and RPO of 1 hour. They have a primary site in us-east-1 and a DR site in us-west-2. The application data is stored in Amazon RDS for MySQL. Which strategy meets both RTO and RPO with minimal data loss?

Accepted Answer

Create a cross-region read replica in us-west-2 and promote it during failover.. Cross-region read replicas for Amazon RDS provide asynchronous replication with a typical RPO of less than 5 minutes, easily meeting the 1-hour requirement. In a disaster, you can promote the replica to a primary instance within minutes, meeting the 4-hour RTO.

Answer

Use AWS Database Migration Service (DMS) for continuous replication to a separate RDS instance in us-west-2.

Answer

Export data to S3 using AWS Backup and restore in us-west-2.

Answer

Take daily automated snapshots of the RDS instance and copy them to us-west-2.

Question 6

A cloud engineer is configuring an auto-scaling policy for a batch processing application that takes about 10 minutes to initialize before it can start processing jobs. To avoid premature termination of instances that have just started, what should the engineer configure?

Accepted Answer

Use a lifecycle hook to put the instance in a 'wait' state until initialization is complete. A lifecycle hook can put instances in a pending state until they complete initialization. Cooldown periods prevent scaling actions but do not prevent termination of new instances.

Answer

Disable scale-in for the first 10 minutes using a scheduled action

Answer

Set the health check grace period to 600 seconds

Answer

Increase the cooldown period to 600 seconds

Question 7

A cloud administrator wants to be notified immediately via email when a critical alert is triggered. Which notification channel should they configure?

Accepted Answer

Email. Email is a typical notification channel for alerts.

Answer

AWS Config

Answer

Amazon SNS

Answer

AWS CloudTrail

Question 8

A cloud administrator needs to view the console output of a VM that failed to boot. Which feature should they use to access the boot logs?

Accepted Answer

Console output / serial console. Cloud providers offer console output or serial console access to view boot logs. Screenshots are also available but console output is the direct log. CloudWatch Logs might capture logs if the OS sends them, but for boot issues, console output is the native method.

Answer

CloudWatch Logs agent

Answer

VM screenshot

Answer

System log from the hypervisor

Question 9

A cloud administrator is investigating a sudden increase in cost for a production environment. The administrator wants to identify the sources of the cost increase and implement a tagging strategy for cost allocation. Which TWO actions should the administrator take? (Choose two.)

Accepted Answer

Use the cloud provider's cost explorer to analyze cost drivers.. To identify cost sources and improve allocation, the administrator should use the cloud provider's cost explorer (e.g., AWS Cost Explorer) to analyze usage and costs, and implement a tagging strategy with environment and project tags for granular cost attribution.

Answer

Implement a rightsizing recommendation report.

Answer

Purchase Reserved Instances for all resources.

Answer

Create a budget alert for the total monthly cost.

Question 10

An organization wants to receive notifications in a Slack channel when a new VM instance is created. Which combination of cloud services should be used?

Accepted Answer

Logging service log-based metric and event-driven function with webhook. A logging service can trigger an event-driven function via a log-based metric when a VM is created, and the function sends a message to Slack via webhook.

Answer

Monitoring alert policy with Slack notification channel

Answer

Scheduler and event-driven function

Answer

Pub/sub messaging service and container service

Question 11

A company wants to implement a disaster recovery strategy with an RTO of 15 minutes and an RPO of 1 minute for a critical database. Which approach should be used?

Accepted Answer

Cross-region continuous replication with automatic failover. Continuous replication with automatic failover provides near-zero RPO and fast RTO.

Answer

Scheduled snapshots every hour

Answer

Daily snapshots copied to another region

Answer

Weekly full backups to tape stored offsite

Question 12

A company is performing a disaster recovery test for a critical application. The test reveals that the application's RTO of 1 hour is not being met due to slow database restoration. Which THREE actions could help improve the restoration time? (Select THREE.)

Accepted Answer

Implement continuous replication to a standby database. Pre-warming standby instances reduces launch time, using faster storage like Provisioned IOPS speeds up data access, and implementing continuous replication reduces the amount of data to restore.

Answer

Disable encryption on the database to reduce overhead

Answer

Increase the retention period of automated backups

Question 13

A company uses a multi-cloud environment with AWS and Azure. They want to centralize log collection and enable advanced querying for troubleshooting. Which combination of services should they use?

Accepted Answer

AWS CloudWatch Logs and Azure Log Analytics. AWS CloudWatch Logs and Azure Log Analytics are the centralized logging services for each cloud. They can be aggregated using third-party tools, but the question asks for the native services to use. CloudWatch Logs for AWS, Log Analytics for Azure. CloudTrail is for API auditing, not general log collection.

Answer

AWS CloudTrail and Azure Monitor

Answer

AWS S3 and Azure Blob Storage

Answer

AWS CloudWatch and Azure Application Insights

Question 14

A company is using Azure VMs and wants to centralize logs from multiple applications for security analysis. The logs must be retained for 2 years. Which Azure service should they use?

Accepted Answer

Azure Log Analytics. Azure Log Analytics (now part of Azure Monitor) provides centralized log management and configurable retention up to 2 years (or more with archive).

Answer

Azure Activity Log

Answer

Azure Application Insights

Answer

Azure Storage Analytics

Question 15

A cloud administrator wants to choose an auto-scaling policy that can respond to changing demand patterns. Which TWO policy types support dynamic adjustments based on real-time metrics? (Choose TWO)

Accepted Answer

Target tracking scaling. Target tracking and step scaling both adjust capacity dynamically based on real-time metrics.

Answer

Predictive scaling

Answer

Scheduled scaling

Answer

Simple scaling

Question 16

A company wants to track cloud spending by department and project. Which strategy should be implemented to enable cost attribution?

Accepted Answer

Implement a resource tagging strategy. Resource tagging allows filtering and grouping costs by tags like department or project.

Answer

Use a single account for all workloads

Answer

Enable detailed billing reports

Answer

Use AWS Organizations only

Question 17

An organization wants to reduce cloud costs by identifying underutilized EC2 instances. Which AWS service provides rightsizing recommendations?

Accepted Answer

AWS Compute Optimizer. AWS Compute Optimizer analyzes resource utilization and provides recommendations to optimize AWS resources. AWS Cost Explorer shows spending but not specific rightsizing recommendations.

Answer

AWS Budgets

Answer

AWS Trusted Advisor

Answer

AWS Cost Explorer

Question 18

A cloud administrator cannot deploy a new VM from a custom image. The deployment fails with an error stating 'Incompatible hypervisor version'. What is the most likely cause?

Accepted Answer

The image was created on a newer hypervisor than the current host.. If the custom image was created on a newer version of the hypervisor, it may include features or configuration that are not supported by the older hypervisor version on the host, causing the 'Incompatible hypervisor version' error. Option B is incorrect because virtual hardware version typically relates to compatibility within the same hypervisor, but the error is specifically about hypervisor version mismatch. Option C is incorrect because a corrupt image would typically cause different errors (e.g., file read failure). Option D is incorrect because the error is about hypervisor compatibility, not storage backend support.

Answer

The VM's virtual hardware version is too old.

Answer

The image file is corrupt.

Answer

The storage backend does not support the image format.

Question 19

A cloud architect is designing a multi-account AWS environment and wants to deploy CloudFormation stacks consistently across many accounts. The architect needs a solution that can manage stack instances across multiple accounts and Regions from a single administrator account. Which AWS feature should be used?

Accepted Answer

Stack sets. AWS CloudFormation StackSets allow you to create, update, or delete stacks across multiple accounts and Regions from a single admin account.

Answer

Drift detection

Answer

Nested stacks

Answer

Change sets

Question 20

A cloud application is intermittently slow. Based on the exhibit, which of the following is the most likely cause?

Accepted Answer

A network security group is blocking port 3306.. The intermittent slowness points to a network security group blocking port 3306, which is used by MySQL/MariaDB. When the NSG intermittently drops packets to this port, the application experiences timeouts and retries, causing sporadic slowdowns. This is a common issue in cloud environments where security rules are misconfigured or applied at the wrong priority level.

Answer

The database server is overloaded.

Answer

The database endpoint DNS record is incorrect.

Answer

The application has insufficient memory.