CV0-004 Operations and Support Practice Test 10 — 15 Questions

Question 1

A cloud administrator notices that a virtual machine in a public cloud is running slower than expected. The VM is part of a production web application. The administrator has verified that the VM's CPU and memory utilization are below 50%. What should the administrator check next?

Accepted Answer

Check the network bandwidth and I/O throttling limits.. Since CPU and memory are not maxed out, the bottleneck is likely I/O or network throttling. Checking network bandwidth and I/O limits is the next logical step.

Answer

Migrate the VM to a different availability zone.

Answer

Increase the VM's vCPU count.

Answer

Reboot the VM.

Question 2

A company is migrating its on-premises workloads to a public cloud. The security team requires that all data in transit between the cloud resources and on-premises be encrypted. Which solution should the cloud architect recommend?

Accepted Answer

Implement a VPN tunnel between the cloud VPC and the on-premises network.. A VPN tunnel encrypts all IP traffic between the cloud VPC and on-premises network, covering all data in transit. Other options are insufficient or address different aspects.

Answer

Deploy a hardware security module (HSM) for key management.

Answer

Enable encryption on the cloud storage buckets.

Answer

Use TLS for all application traffic.

Question 3

A cloud operations team is investigating why a batch processing job that runs nightly in a cloud environment has been failing intermittently. The job processes data from an external API and writes results to a database. The error logs show "Connection timed out" when calling the external API. However, manual calls from the same cloud environment succeed. What is the most likely cause?

Accepted Answer

The external API rate limit has been exceeded.. Intermittent timeouts during batch execution suggest the external API is rate-limiting the high volume of automated calls, while manual calls succeed because they are infrequent.

Answer

The database connection pool is exhausted.

Answer

The batch job's service account has been disabled.

Answer

The cloud firewall is blocking outbound traffic during the batch window.

Question 4

A cloud administrator is tasked with reducing costs for a development environment that runs 24/7. The environment consists of several virtual machines and a load balancer. Which action would most effectively reduce costs without affecting developer access during business hours?

Accepted Answer

Schedule the VMs to shut down during nights and weekends.. Scheduling VMs to shut down during nights and weekends stops compute charges while not impacting developers who only work during business hours.

Answer

Implement auto-scaling to run only one instance during off-hours.

Answer

Use reserved instances for all VMs.

Answer

Change all VMs to burstable instance types.

Question 5

A company uses a cloud-based object storage service to store backups. The backups must be retained for seven years to meet compliance requirements. Which storage tier should be used to minimize cost while meeting the retention requirement?

Accepted Answer

Cold storage with a retrieval time of several hours.. Cold storage (e.g., Glacier) is designed for long-term archival with infrequent access, offering low cost per GB and suitable for compliance retention.

Answer

Archival storage with a minimum retention period of 90 days.

Answer

Infrequent access storage with a retrieval fee.

Answer

Standard storage with life-cycle policies to delete after seven years.

Question 6

A cloud operations team is troubleshooting a performance issue with a web application hosted on a cloud platform. The application uses an auto-scaling group behind a load balancer. Users report slow response times during peak hours. Monitoring shows high CPU utilization on all instances. Which of the following should the team do first to improve performance?

Accepted Answer

Adjust the auto-scaling policy to scale out at lower CPU threshold.. The immediate symptom is high CPU utilization on all instances during peak hours, indicating that the current instances are being overwhelmed. Adjusting the auto-scaling policy to scale out at a lower CPU threshold (e.g., from 70% to 50%) will proactively add more instances before CPU becomes saturated, distributing the load and improving response times. This directly addresses the root cause—insufficient compute capacity—without requiring architectural changes or additional services.

Answer

Increase the instance size of the auto-scaling group.

Answer

Add a content delivery network (CDN) in front of the application.

Answer

Enable caching at the database layer.

Question 7

An organization requires that all cloud resources be tagged with the cost center and environment (e.g., production, development). A compliance checker runs weekly to report untagged resources. The cloud administrator notices that newly created resources are often missing tags. What is the most effective long-term solution?

Accepted Answer

Configure a cloud governance policy that prevents resource creation without required tags.. Enforcing tagging as part of resource creation policy prevents untagged resources from being created, ensuring compliance proactively.

Answer

Create a custom dashboard to show untagged resources.

Answer

Run a script daily to tag any untagged resources.

Answer

Send an email reminder to all users about tagging policies.

Question 8

A cloud administrator is configuring a new virtual private cloud (VPC) for a three-tier application. The web tier must be accessible from the internet, the application tier should only be accessible from the web tier, and the database tier should only be accessible from the application tier. Which network architecture should be used?

Accepted Answer

Place each tier in a separate subnet with appropriate security group rules controlling traffic.. Option C is correct because placing each tier in a separate subnet and using security group rules provides stateful, instance-level traffic control. Security groups act as virtual firewalls at the hypervisor layer, allowing you to specify inbound rules that restrict the application tier to only accept traffic from the web tier's security group, and the database tier to only accept traffic from the application tier's security group. This aligns with the principle of least privilege and ensures that each tier is isolated within the VPC while maintaining necessary connectivity.

Answer

Use one subnet with network ACLs to restrict traffic between tiers.

Answer

Place all tiers in the same subnet and use host-based firewalls.

Answer

Deploy each tier in a different VPC and peer them.

Question 9

A company recently migrated its database to a cloud-managed database service. After the migration, the application team reports that some queries are returning stale data. The database is configured with read replicas. What is the most likely reason for the stale data?

Accepted Answer

The application is reading from a read replica that has replication lag.. Read replicas can have replication lag, causing stale reads if the application queries a replica expecting the latest data.

Answer

The database parameter group is misconfigured.

Answer

The network latency between the application and database is high.

Answer

The database’s backup and restore process has corrupted the data.

Question 10

A cloud administrator is deploying a new application in a cloud environment. The application requires high availability and fault tolerance. Which two design principles should the administrator implement? (Select TWO).

Accepted Answer

Place a load balancer in front of the application.. Option A is correct because placing a load balancer in front of the application distributes incoming traffic across multiple healthy instances, ensuring that if one instance fails, traffic is redirected to others, which provides high availability and fault tolerance. Option B is correct because deploying an auto-scaling group across multiple Availability Zones (AZs) ensures that if an entire AZ fails, the application continues running in another AZ, and the auto-scaling group automatically replaces failed instances to maintain capacity.

Answer

Deploy all instances in a single availability zone.

Answer

Use a single instance to reduce costs.

Answer

Store all data on a single volume without replication.

Question 11

A cloud operations team is analyzing a security incident in which an unauthorized user accessed a storage bucket. The bucket was configured with public access. Which three best practices should the team implement to prevent such incidents in the future? (Select THREE).

Accepted Answer

Enable access logging and monitor logs.. Implementing least privilege, denying public access, and enabling access logging help prevent and detect unauthorized access.

Answer

Enable encryption on the storage bucket.

Answer

Enable versioning on the bucket.

Question 12

A cloud architect is designing a disaster recovery plan for a critical application. The application runs on virtual machines in a public cloud. The recovery time objective (RTO) is 1 hour, and the recovery point objective (RPO) is 15 minutes. Which three strategies should the architect implement? (Select THREE).

Accepted Answer

Implement active-passive failover with automated DNS.. Synchronous replication provides low RPO; warm standby ensures quick failover within RTO; active-passive with automated DNS reduces transition time.

Answer

Take daily snapshots of the VMs.

Answer

Use asynchronous replication with a 10-minute lag.

Question 13

Refer to the exhibit. A cloud administrator runs the command to inspect an instance and notices that it is running, but the web application hosted on it is unreachable from the internet. The instance is in a public subnet with an internet gateway attached to the VPC. Which of the following is the most likely cause?

Accepted Answer

The instance's security group does not allow inbound HTTP/HTTPS traffic from 0.0.0.0/0.. The instance has a security group named "sg-web" which likely does not allow inbound HTTP/HTTPS traffic from the internet. Other options are less plausible given the configuration.

Answer

The instance type t2.medium does not support public IP addresses.

Answer

The subnet subnet-abc is not associated with a route table that has a route to the internet gateway.

Answer

The volume vol-111 is not encrypted.

Question 14

Refer to the exhibit. A cloud administrator applies the bucket policy shown. After applying, users report that they can no longer access the prod-backup bucket using their applications. The applications use the AWS SDK with default configuration. What is the most likely reason?

Accepted Answer

The applications are using HTTP instead of HTTPS.. The policy denies requests that do not use HTTPS. Many SDKs default to HTTP, causing the Deny statement to block access.

Answer

The policy does not include an Allow statement.

Answer

The policy has a syntax error in the condition.

Answer

The policy's principal "*" blocks all users.

Question 15

Refer to the exhibit. An application in a cloud environment logs multiple database connection errors. The database is a managed MySQL instance in the same VPC. The timeouts and connection refused errors occur intermittently. Which of the following is the most likely cause?

Accepted Answer

The database is hitting its maximum connections limit.. Intermittent connection refused and timeouts indicate that the database is reaching its maximum connections limit, causing new connections to be refused or timeout.

Answer

The database instance is out of storage.

Answer

The security group for the database is not allowing inbound traffic from the application.

Answer

The database's DNS resolves to multiple IP addresses.