CV0-004 Practice Test 8 — 10 Questions

Question 1

A cloud administrator needs to apply a critical security patch to a virtual machine that is part of a production application. The application must remain available during patching. Which of the following is the BEST approach?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Remove the VM from the load balancer, apply the patch, then return it to service during a maintenance window. Removing the VM from the load balancer ensures that no new traffic is sent to it while the patch is applied, maintaining application availability for users. After the patch is applied and the VM is verified as healthy, it can be returned to the load balancer pool. This approach aligns with a rolling update strategy, which is the standard method for applying patches to production VMs without downtime.

Answer

Postpone the patch until the next scheduled update cycle

Answer

Patch all VMs simultaneously to minimize the time to full deployment

Answer

Apply the patch during peak usage hours to ensure immediate deployment

Question 2

A cloud engineer is troubleshooting a connectivity issue between two virtual networks in different regions. The engineer has verified that the virtual networks are peered and the routing tables are correct. Which of the following is the MOST likely cause of the issue?

Accepted Answer

A network security group blocking the traffic. Network security groups (NSGs) operate at the subnet or NIC level and can filter traffic between peered virtual networks even when routing is correctly configured. Since the engineer has verified peering and routing tables, the most likely remaining cause is an NSG rule explicitly or implicitly denying the traffic, as NSGs are stateful and evaluated after routing decisions.

Answer

Incorrect route tables on the virtual network gateway

Answer

A physical cable disconnection in the datacenter

Answer

Incorrect DNS resolution

Question 3

A web application is deployed across multiple availability zones behind a load balancer. The administrator notices that all traffic is being routed to instances in only one availability zone, causing performance issues. The load balancer is configured to distribute traffic across all zones evenly. What is the most likely cause?

Accepted Answer

The instances in the other zones are marked as unhealthy due to failing health checks.. If the load balancer is configured to distribute traffic evenly across all availability zones but traffic only reaches one zone, the most likely cause is that instances in the other zones are failing health checks and are marked unhealthy. Load balancers only route to healthy backends, so unhealthy instances in other zones are excluded, concentrating traffic in the one healthy zone. This matches the symptom of uneven distribution despite even configuration.

Answer

The firewall rules for the load balancer only allow traffic from one zone.

Answer

The route table for the subnets in the other zones is missing a default route.

Answer

The listener rules are configured to forward traffic to a single backend pool.

Question 4

A cloud architect is choosing a compute pricing model for a batch processing job that runs for 2 hours every night. The job can be interrupted. Which option is most cost-effective?

Accepted Answer

Spot instances. Spot instances are the most cost-effective option because the batch processing job is fault-tolerant (can be interrupted) and runs for a fixed, short duration (2 hours nightly). Spot instances offer significant discounts (often 60-90% off on-demand pricing) by leveraging unused cloud capacity, which can be reclaimed with a 2-minute warning. This aligns perfectly with the workload's tolerance for interruption and its predictable but non-critical schedule.

Answer

Reserved instances for 1 year

Answer

On-demand instances

Answer

Dedicated hosts

Question 5

A company uses AWS and Azure for redundancy. They deploy the same application on both clouds to avoid vendor lock-in and improve disaster recovery. Which cloud deployment model is this?

Accepted Answer

Multi-cloud. Multi-cloud uses multiple public cloud providers for redundancy and best-of-breed services.

Answer

Community cloud

Answer

Hybrid cloud

Answer

Private cloud

Question 6

Which of the following is a stateless network access control that requires explicit allow rules for both inbound and outbound traffic?

Accepted Answer

Network ACL. Network ACLs (NACLs) are stateless; security groups are stateful.

Answer

Security group

Answer

DDoS protection

Answer

Web application firewall

Question 7

A cloud architect is selecting a storage solution for a database that requires low-latency reads and writes. The database will run on a single VM and must support consistent performance. Which storage type is most appropriate?

Accepted Answer

Block storage. Block storage (e.g., EBS, Azure Disk) provides low-latency, consistent performance suitable for databases running on a single VM.

Answer

Archive storage

Answer

Object storage

Answer

File storage

Question 8

Which cloud deployment model connects an on-premises data center to a public cloud using VPN or dedicated connections like AWS Direct Connect?

Accepted Answer

Hybrid cloud. A hybrid cloud deployment model combines on-premises infrastructure with public cloud services, connected via VPN or dedicated connections like AWS Direct Connect. This allows workloads to span both environments, providing flexibility and scalability. It is the standard term for such integrated architectures.

Answer

Private cloud

Answer

Multi-cloud

Answer

Public cloud

Question 9

A company wants to migrate its on-premises virtualized workloads to the cloud while maintaining control over the operating system and middleware. Which cloud service model should they choose?

Accepted Answer

IaaS. IaaS (Infrastructure as a Service) provides virtualized compute, storage, and networking where the customer retains control over the operating system, middleware, and runtime, while the provider manages the underlying physical infrastructure. This matches the requirement to migrate virtualized workloads while keeping OS and middleware control.

Answer

SaaS

Answer

FaaS

Answer

PaaS

Question 10

An organization needs to connect its on-premises data center to a public cloud with a dedicated, low-latency, and consistent network connection. Which connectivity option should they use?

Accepted Answer

Direct Connect. Direct Connect (AWS) or ExpressRoute (Azure) provides dedicated private connectivity from on-premises to cloud.

Answer

Internet gateway

Answer

VPC peering

Answer

Site-to-site VPN