CV0-004 Operations and Support Practice Test 12 — 15 Questions

Question 1

A cloud administrator notices that a web application is experiencing intermittent latency spikes. The application runs on a load-balanced set of virtual machines in a public cloud. Which of the following should the administrator investigate FIRST?

Accepted Answer

Review the application logs for errors or performance issues.. Option D is correct because intermittent latency spikes in a load-balanced web application are most effectively diagnosed by first reviewing application logs for errors or performance issues. Application logs can reveal slow database queries, memory exhaustion, or code-level bottlenecks that cause latency, which is the most direct source of evidence before investigating network or infrastructure components.

Answer

Verify that the VMs are in the same availability zone.

Answer

Inspect the network ACLs for any recent changes.

Answer

Check the load balancer health checks to ensure all instances are healthy.

Question 2

A company uses a hybrid cloud model with on-premises servers and a public cloud. The IT team wants to ensure that critical data is backed up daily and retained for 30 days. The backup solution must be cost-effective. Which of the following backup strategies BEST meets these requirements?

Accepted Answer

Incremental backup daily to cloud storage, with weekly full backup.. Option B is correct because incremental backups daily and full backup weekly reduces storage costs while allowing 30-day retention by keeping weekly fulls. Option A is wrong because full daily to tape is expensive and not cloud-based. Option C is wrong because differential backups grow large and cost more than incremental. Option D is wrong because full daily backups to cloud storage are costly.

Answer

Full backup daily to cloud storage with a 30-day lifecycle policy.

Answer

Full backup daily to tape, retained for 30 days.

Answer

Differential backup daily to cloud storage, with full backup every 30 days.

Question 3

A cloud engineer is troubleshooting an issue where a virtual machine (VM) in a VPC cannot communicate with an on-premises database server through a site-to-site VPN. The VPN tunnel status shows 'UP' and the on-premises firewall logs show packets from the VM's public IP (but the VM is in a private subnet with no public IP). What is the MOST likely cause?

Accepted Answer

The route table for the subnet is missing a route to the on-premises network via the VPN.. The VPN tunnel status is 'UP' and the on-premises firewall sees packets from the VM's public IP, but the VM is in a private subnet with no public IP. This indicates that the VM's traffic is being sent to the internet instead of through the VPN tunnel. The most likely cause is that the subnet's route table lacks a specific route directing traffic destined for the on-premises network to the virtual private gateway (VGW) or VPN connection, causing the traffic to be routed to the internet gateway (IGW) and source-NATed to the public IP.

Answer

The on-premises firewall is blocking the VM's private IP address.

Answer

The VM's security group is blocking outbound traffic to the on-premises subnet.

Answer

The VPN tunnel is misconfigured with mismatched pre-shared keys.

Question 4

A systems administrator needs to apply a critical security patch to a set of application servers running in a cloud environment. The administrator wants to minimize downtime and ensure that if the patch causes issues, the servers can be rolled back quickly. Which of the following is the BEST approach?

Accepted Answer

Use a blue-green deployment, patch the green environment, then switch traffic.. Option B is correct because blue-green deployment allows zero-downtime patching by switching traffic to the patched environment, and immediate rollback by switching back. Option A is wrong because patching all at once causes downtime and no quick rollback. Option C is wrong because snapshot restore takes time. Option D is wrong because gradual patching with configuration management may not provide instant rollback.

Answer

Patch all servers at once during a maintenance window.

Answer

Take a snapshot of each server, apply the patch, and if issues occur, restore from snapshot.

Answer

Use an automated configuration management tool to apply the patch gradually.

Question 5

A cloud administrator is reviewing cost reports and notices that a development environment is incurring high costs due to idle compute resources. The environment is used only during business hours on weekdays. Which of the following actions would MOST effectively reduce costs?

Accepted Answer

Implement an auto-scaling schedule to shut down instances during off-hours.. An auto-scaling schedule allows you to define time-based rules to automatically scale in (terminate) instances during off-hours and scale out (launch) them during business hours. This directly addresses the idle compute waste by ensuring resources are only running when needed, which is the most effective cost reduction strategy for a predictable usage pattern like weekdays 9-to-5.

Answer

Move the development environment to a different region with lower costs.

Answer

Change all instances to smaller instance types.

Answer

Use spot instances for all development servers.

Question 6

An organization uses a cloud management platform (CMP) to orchestrate resources across multiple cloud providers. The CMP has a policy that automatically terminates any VM that exceeds 85% CPU utilization for more than 15 minutes. The operations team receives complaints that some VMs are being terminated while performing legitimate batch processing jobs. What should the operations team do to resolve this issue?

Accepted Answer

Add an exclusion list for known batch processing VMs.. Option C is correct because adding an exclusion list for known batch processing VMs prevents unnecessary termination without disabling the entire policy. Option A is wrong because disabling the policy removes important auto-healing. Option B is wrong because increasing thresholds may still affect long-running batch jobs. Option D is wrong because creating a separate group is more complex than simply excluding specific VMs.

Answer

Create a separate VM group with a different policy that allows higher CPU for longer.

Answer

Disable the automatic termination policy.

Answer

Increase the CPU threshold to 95% and extend the duration to 30 minutes.

Question 7

A company is migrating its on-premises data center to the cloud. The current backup solution uses a tape library. The company wants to implement a cloud-based backup strategy that ensures data durability and rapid restoration. Which of the following is the BEST option?

Accepted Answer

Use cloud storage with versioning and lifecycle policies.. Option A is correct because cloud storage with versioning and lifecycle policies provides high durability (redundant storage) and allows quick restore of previous versions. Option B is wrong because virtual tape libraries (VTL) may have slower restore times. Option C is wrong because third-party backup software may add complexity and does not inherently ensure rapid restoration. Option D is wrong because block storage snapshots are designed for cloud instances, not on-premises data migration.

Answer

Use cloud virtual tape library (VTL).

Answer

Use block storage snapshots.

Answer

Use a third-party backup software that backs up to cloud storage.

Question 8

Which TWO of the following are best practices for managing cloud storage in a multi-account environment? (Choose two.)

Accepted Answer

Implement bucket policies to restrict cross-account access.. Options B and C are correct. Implementing bucket policies to restrict cross-account access ensures security, and enabling logging and monitoring of storage operations provides audit trails. Option A is wrong because using a single bucket for all accounts compromises isolation. Option D is wrong because public access is insecure. Option E is wrong because separate encryption keys per account is a good practice but not a top requirement for storage management specifically; the focus is on access control and monitoring.

Answer

Use separate encryption keys for each account.

Answer

Use a single storage bucket/container for all accounts to simplify management.

Answer

Allow full public access to ensure availability.

Question 9

Which THREE of the following are common causes of application performance degradation in a cloud environment? (Choose three.)

Accepted Answer

Network latency and bandwidth limitations. Options A, B, and C are correct. Resource exhaustion (CPU, memory, disk I/O) directly impacts performance. Network latency and bandwidth limitations slow down data transfer. Poorly optimized application code can cause inefficiencies. Option D is wrong because insufficient security groups do not affect performance; they affect traffic flow rules. Option E is wrong because overprovisioned storage means excess capacity, which does not degrade performance; underprovisioned storage would.

Answer

Insufficient number of security groups

Answer

Overprovisioned storage

Question 10

Which TWO of the following are valid methods for migrating on-premises virtual machines to a public cloud? (Choose two.)

Accepted Answer

Use a backup and restore method creating cloud instance from backup.. Options A and D are correct. Exporting the VM as an OVF and importing it to the cloud is a standard method. Using a backup and restore method (e.g., creating a cloud instance from a backup) is also valid. Option B is wrong because physical-to-virtual (P2V) conversion is for physical machines, not VMs. Option C is wrong because reinstalling the OS and applications is a redeployment, not migration. Option E is wrong because live replication is typically used for disaster recovery, not one-time migration, and may not be considered a migration method.

Answer

Reinstall the OS and applications on new cloud instances.

Answer

Use a physical server migration tool that converts to cloud image.

Answer

Use a hybrid cloud extension that replicates VMs live.

Question 11

A cloud administrator manages a multi-tier web application running on AWS. The application consists of a load balancer, web servers in an auto scaling group, and a MySQL RDS database. Recently, users have reported slow page load times during peak hours. The cloud administrator has checked the load balancer metrics and found that response times are high, but CPU utilization on the web servers is below 60%. The RDS instance shows high read IOPS and a high number of database connections. The administrator suspects the database is the bottleneck. Which of the following actions should the administrator take FIRST to resolve the performance issue?

Accepted Answer

Enable an in-memory caching layer such as ElastiCache to reduce database load.. Option C is correct because enabling an in-memory caching layer (e.g., ElastiCache) reduces the number of read queries hitting the database, alleviating the bottleneck with minimal changes. Option A is wrong because read replicas only help if the database workload is read-heavy and if the application can route reads to replicas; caching is often a simpler first step. Option B is wrong because web server CPU is not high, so scaling web servers won't help. Option D is wrong because increasing the database instance size may help but is more expensive and disruptive; caching is more efficient initially.

Answer

Migrate the database to a larger instance class.

Answer

Add read replicas to offload read queries from the primary database.

Answer

Increase the size of the web servers to handle more requests faster.

Question 12

A company has a hybrid cloud environment with an on-premises data center and Microsoft Azure. The on-premises infrastructure includes a VPN gateway connected to an Azure virtual network via site-to-site VPN. The network team reports that traffic from on-premises to Azure is experiencing high latency and packet loss. The VPN tunnel status shows as connected. The team has verified that the on-premises firewall is not dropping packets. The Azure administrator checks the virtual network gateway metrics and sees high inbound packet drops and a high number of VPN tunnel rekeys. What is the MOST likely cause of the issue?

Accepted Answer

The VPN gateway SKU is too small for the traffic volume.. Option A is correct because a VPN gateway SKU that is too small for the traffic volume causes packet drops and frequent rekeys, leading to high latency and loss. Option B is wrong because a misconfigured local network gateway address space would cause connectivity failure, not just high latency. Option C is wrong because mismatched encryption algorithms would prevent the tunnel from establishing or cause constant renegotiation, not just increased rekeys. Option D is wrong because overlapping address spaces would cause routing conflicts and connectivity issues, not specifically packet drops and rekeys.

Answer

The on-premises VPN device does not support the same encryption algorithms.

Answer

The Azure virtual network has overlapping address space with on-premises.

Answer

There is a misconfiguration in the local network gateway address space.

Question 13

A cloud operations team uses a configuration management tool (e.g., Chef, Puppet) to manage a fleet of Linux servers in a public cloud. After a recent update, the team notices that some servers are failing to apply the new configuration. The logs on the failing servers show connection timeouts to the configuration management server. Other servers in the same subnet and security group apply configurations successfully. The configuration management server is reachable from the admin's workstation. Which of the following is the MOST likely cause of the issue?

Accepted Answer

The failing servers have a misconfigured DNS resolver.. Option A is correct because a misconfigured DNS resolver on the failing servers can cause hostname resolution failures, leading to connection timeouts to the configuration management server. Option B is wrong because all servers share the same security group, so firewall rules are identical. Option C is wrong because if the certificate had expired, all servers would be affected, not just a few. Option D is wrong because if the agent were missing, the logs would show agent-related errors, not connection timeouts.

Answer

The failing servers are missing the configuration management agent.

Answer

The configuration management server certificate has expired.

Answer

The failing servers have a firewall rule blocking outbound connections.

Question 14

A company is using a cloud provider's object storage for archival data. The data is rarely accessed but must be retained for 7 years for compliance. The current storage class is Standard, and the monthly bill is increasing. The cloud administrator wants to minimize costs while meeting compliance requirements. The data must be accessible within 24 hours if needed. Which of the following actions should the administrator take?

Accepted Answer

Use a lifecycle policy to transition objects to a cheaper storage class after a period.. Option D is correct because a lifecycle policy automates the transition of objects from a higher-cost storage class (e.g., Standard) to a cheaper class (e.g., S3 Glacier Deep Archive or Azure Archive) after a specified period, reducing costs while retaining data for the required 7 years. The data remains accessible within 24 hours via a restore request, meeting the compliance and retrieval time requirement.

Answer

Compress the objects using server-side encryption.

Answer

Delete the objects after 7 years to save cost.

Answer

Move the data to a cold storage tier like Glacier or Archive.

Question 15

A cloud engineer is tasked with setting up a disaster recovery (DR) plan for a critical application that runs on virtual machines in a private cloud. The DR site is a public cloud. The application requires low recovery time objective (RTO) of less than 15 minutes and recovery point objective (RPO) of less than 5 minutes. Which of the following replication strategies BEST meets these requirements?

Accepted Answer

Use continuous asynchronous replication to the DR site.. Option B is correct because continuous asynchronous replication can achieve low RPO (under 5 minutes) and low RTO (under 15 minutes) if VMs can be quickly started from the replicated data. Option A is wrong because daily replication cannot achieve RPO < 5 minutes. Option C is wrong because synchronous replication may introduce latency and is typically used for high consistency, but RTO may be higher if recovery involves starting VMs; also, it can affect primary performance. Option D is wrong because backup every 5 minutes may meet RPO but RTO would be higher due to restoration time from backup.

Answer

Replicate virtual machine images to the DR site daily.

Answer

Use synchronous replication to keep data identical.

Answer

Configure agent-based backup to the DR site every 5 minutes.