CV0-004 Operations and Support Practice Test 4 — 15 Questions

Question 1

Arrange the steps to deploy a new virtual machine in a public cloud environment (e.g., AWS, Azure, GCP) in the correct order.

Question 2

Order the steps to perform a disaster recovery failover to a secondary cloud region.

Question 3

Arrange the steps to configure auto-scaling for a group of virtual machines based on CPU utilization.

Question 4

Match each acronym to its definition.

Question 5

Match each compute service to its description.

Question 6

Match each security control to its purpose.

Question 7

A company uses a cloud load balancer to distribute traffic to a group of web servers. After a recent update, some users report being redirected to a maintenance page when the application is actually available. What is the most likely cause?

Accepted Answer

The load balancer health check is misconfigured and marking healthy instances as unhealthy.. The most likely cause is that the load balancer's health check is misconfigured, causing it to incorrectly mark healthy web servers as unhealthy. When all instances are marked unhealthy, the load balancer has no available targets and may route traffic to a fallback maintenance page or return an error. This explains why users see a maintenance page despite the application being available.

Answer

The load balancer's SSL certificate has expired.

Answer

The DNS record for the load balancer has a short TTL.

Answer

The web servers are not configured with the same security group.

Question 8

A storage administrator needs to ensure data durability for a critical database. Which approach provides the highest durability?

Accepted Answer

Replicate data to a different geographic region.. Replicating data to a different geographic region provides the highest durability by ensuring that even if an entire data center or region experiences a catastrophic failure (e.g., natural disaster, power outage), a complete copy of the database remains available in another region. This approach leverages asynchronous or synchronous replication to maintain data consistency across geographically separated sites, achieving a Recovery Point Objective (RPO) and Recovery Time Objective (RTO) that single-site solutions cannot match. In cloud environments, this is often implemented using services like AWS Cross-Region Replication or Azure Geo-Redundant Storage, which guarantee 99.9999999999% (12 nines) durability.

Answer

Store data on a single SSD volume.

Answer

Enable encryption at rest.

Answer

Use RAID 0 across multiple volumes.

Question 9

A DevOps engineer is designing a CI/CD pipeline for a microservices application. The team wants to isolate each build job to avoid interference. Which cloud concept should be utilized?

Accepted Answer

Containerization with orchestration. Containerization with orchestration (e.g., Docker and Kubernetes) provides isolated runtime environments for each build job by packaging the application and its dependencies into lightweight containers. This ensures that build processes do not interfere with each other, as each container runs in its own isolated user space with dedicated resources, and orchestration manages scheduling, scaling, and lifecycle. This approach is ideal for CI/CD pipelines in microservices architectures where build isolation is critical.

Answer

Dedicated hosts

Answer

Virtual private cloud (VPC)

Answer

Serverless functions

Question 10

A cloud administrator receives an alert that the CPU usage on a virtual machine has spiked to 100% for 10 minutes. The VM hosts a critical application. What is the best first step?

Accepted Answer

Check the VM's performance metrics for the last hour to identify the process causing the spike.. Checking the VM's performance metrics for the last hour is the best first step because it allows the administrator to identify the specific process or application causing the CPU spike without disrupting service. This diagnostic approach aligns with the ITIL problem management framework, which emphasizes root cause analysis before taking corrective action. In a virtualized environment, tools like vCenter Performance Charts or Hyper-V Performance Monitor can pinpoint whether the spike is due to a runaway process, a memory leak, or a scheduled task, enabling a targeted resolution.

Answer

Immediately reboot the VM.

Answer

Move the VM to a different host.

Answer

Increase the VM's CPU limits.

Question 11

A company wants to automate the deployment of cloud resources using code. Which tool is BEST suited for this purpose?

Accepted Answer

Infrastructure as Code (IaC) templates. Infrastructure as Code (IaC) templates (Option C) are the best tool for automating cloud resource deployment because they allow you to define, version, and provision infrastructure through machine-readable definition files. Tools like Terraform, AWS CloudFormation, or Azure Resource Manager templates enable repeatable, consistent deployments without manual intervention, directly aligning with the goal of automating cloud resource deployment using code.

Answer

SSH

Answer

An IP address management tool

Answer

A configuration management database

Question 12

A financial services company is subject to strict compliance requirements. They need to ensure that all cloud storage objects are written to a write-once-read-many (WORM) state for a defined retention period. Which feature should be enabled?

Accepted Answer

Lifecycle policies. Lifecycle policies are the correct choice because they can be configured to transition objects to a WORM-compliant state (e.g., using S3 Object Lock in governance or compliance mode) and enforce a defined retention period. This meets the strict compliance requirement by preventing object deletion or overwrite until the retention period expires.

Answer

Versioning

Answer

Object lock

Answer

Replication

Question 13

A developer deployed a new version of a cloud function, but the function is returning 500 errors. The previous version worked fine. What is the most likely cause?

Accepted Answer

The new code contains a runtime error.. The most likely cause of 500 errors after deploying a new version of a cloud function is a runtime error in the new code. A 500 Internal Server Error indicates that the function's code executed but threw an unhandled exception or logic error, which did not exist in the previous working version. Since the environment (runtime, memory, timeout) remained unchanged, the introduction of faulty code is the primary suspect.

Answer

The function is using an outdated runtime.

Answer

The function's memory allocation is too low.

Answer

The function's timeout is set too short.

Question 14

A company wants to ensure high availability for a stateless web application. Which architecture should be recommended?

Accepted Answer

One VM in each of two availability zones with a load balancer. Option B is correct because deploying one VM in each of two availability zones with a load balancer ensures high availability by eliminating a single point of failure. If one availability zone fails, the load balancer automatically routes traffic to the healthy VM in the other zone, keeping the stateless web application accessible. This architecture aligns with the principle of fault tolerance for stateless applications, where no session state is lost during failover.

Answer

Two VMs in the same availability zone with a load balancer

Answer

Single VM with daily backups

Answer

A single large VM with auto-recovery

Question 15

A systems administrator is troubleshooting a network connectivity issue between two peered VPCs in different regions. The VPC peering connection is established and the route tables are configured. However, instances cannot communicate. What should be checked NEXT?

Accepted Answer

The security group rules on the instances. Since the VPC peering connection is established and route tables are configured, the next likely cause is that security group rules on the instances are blocking traffic. Security groups act as virtual firewalls at the instance level, and by default they deny all inbound traffic; explicit rules must allow traffic from the peered VPC's CIDR or security group. This is a common oversight when peering VPCs across regions, as security groups do not automatically permit cross-peering traffic.

Answer

The route propagation of the peering connection

Answer

The network ACLs at the subnet level

Answer

The MTU settings on the instances