CV0-004 Operations and Support Practice Test 6 — 15 Questions

Question 1

A cloud administrator is designing a backup strategy for a virtual machine running a critical application. The application stores data on a separate data disk. Which TWO of the following practices should the administrator include to ensure a reliable backup?

Accepted Answer

Ensure the backup includes the system state and data disk.. Option A is correct because guest-level backups ensure application consistency. Option D is correct because snapshot consistency ensures crash-consistent not application-consistent. Option B is wrong because file-level backups are less efficient. Option C is wrong because snapshot-only lacks application consistency. Option E is wrong because encryption not directly backup reliability.

Answer

Encrypt the backup files before storing them off-site.

Answer

Use file-level backups for the data disk only.

Answer

Rely solely on hypervisor-level snapshots.

Question 2

A company is experiencing intermittent connectivity issues between its on-premises data center and a public cloud environment over a VPN connection. Which TWO of the following should the administrator check to troubleshoot the problem?

Accepted Answer

Validate the route tables on both sides of the VPN.. Route tables control the path that traffic takes between networks. If the route tables on either the on-premises VPN device or the cloud virtual network gateway do not have the correct entries (e.g., missing routes for the remote subnet or incorrect next-hop IPs), traffic can be dropped or misdirected, causing intermittent connectivity. Validating these routes ensures that packets destined for the cloud or on-premises are properly forwarded over the VPN tunnel.

Answer

Verify that the internet bandwidth is sufficient.

Answer

Ensure the cloud storage performance is adequate.

Answer

Check the DNS resolution of cloud endpoints.

Question 3

A cloud operations team needs to implement a monitoring solution for a microservices architecture. The solution must provide centralized logging, metrics, and alerting, and must be able to correlate data from multiple services. Which THREE of the following components should the team include?

Accepted Answer

A centralized logging system (e.g., ELK stack).. Option B is correct because a centralized logging system like the ELK stack (Elasticsearch, Logstash, Kibana) aggregates logs from all microservices into a single searchable repository. This enables the team to correlate events across services by timestamp and metadata, which is essential for debugging distributed transactions and identifying root causes of failures.

Answer

A security information and event management (SIEM) system.

Answer

An application performance monitoring (APM) tool.

Question 4

An Azure administrator runs the command and gets the output shown. The virtual machine 'web-01' is not accessible over the network. Which of the following is the MOST likely reason?

Accepted Answer

The VM is stopped and deallocated.. Option B is correct because the VM is deallocated, meaning it is not running and cannot be reached. Option A is wrong because the provisioning state is Succeeded, not Failed. Option C is wrong because the location is correct. Option D is wrong because the name is correct.

Answer

The VM name is incorrect.

Answer

The VM failed to provision.

Answer

The VM is in the wrong region.

Question 5

A cloud engineer deployed the infrastructure shown. The load balancer's health checks are failing for the EC2 instance. Which of the following is the MOST likely cause?

Accepted Answer

The health check endpoint /health does not exist on the web server.. Option A is correct because the health check path '/health' is not created by the user_data script, which only installs httpd and starts it, but does not create the health check endpoint. Option B is wrong because the security group is attached. Option C is wrong because the subnet is specified. Option D is wrong because the user_data script starts httpd.

Answer

The web server is not running HTTP.

Answer

The EC2 instance is in the wrong subnet.

Answer

The security group does not allow traffic from the load balancer.

Question 6

An application log shows the entries above. The application is a web server running on a virtual machine in a cloud environment. The database is a managed cloud database service. Which of the following is the MOST likely root cause of the failure?

Accepted Answer

The application's database credentials are incorrect or the application's IP is not whitelisted.. Option D is correct because the log shows authentication failure after retries, indicating credentials or IP whitelisting issue. Option A is wrong because the timeout is a symptom, not root cause; after timeout, authentication fails. Option B is wrong because network firewall would block all traffic, not just authentication. Option C is wrong because database service might be fine; the error is specific to authentication.

Answer

A network firewall is blocking traffic to the database.

Answer

The database connection pool is exhausted.

Answer

The database service is down.

Question 7

A company is experiencing latency issues when accessing a cloud-based application. The cloud administrator runs a traceroute and notices high latency at the ISP's edge router. Which of the following is the MOST likely cause?

Accepted Answer

An internet service provider (ISP) issue is degrading the WAN connection. High latency at the ISP's edge router indicates that the bottleneck is occurring on the WAN link between the company's network and the cloud provider, which is under the ISP's control. This is a classic symptom of an ISP issue, such as congestion, routing problems, or a degraded physical link, directly impacting the WAN connection. The traceroute output localizes the latency to the ISP's infrastructure, not to the company's internal network or the cloud application's resources.

Answer

A misconfigured firewall rule is dropping packets

Answer

The load balancer is sending traffic to unhealthy instances

Answer

The virtual machine hosting the application is under-provisioned

Question 8

A cloud administrator needs to deploy a web application in a public cloud. The application must automatically scale out based on CPU utilization and scale in during low demand. Which of the following is the BEST approach?

Accepted Answer

Configure an auto scaling group with a scaling policy based on average CPU utilization. An auto scaling group with a scaling policy based on average CPU utilization is the best approach because it dynamically adjusts the number of instances in response to real-time demand. This method uses CloudWatch metrics to trigger scale-out when CPU exceeds a threshold (e.g., 70%) and scale-in when it drops, ensuring the application remains responsive while minimizing cost during low usage.

Answer

Use a script to increase the instance size when CPU exceeds 80%

Answer

Implement scheduled scaling to add instances during business hours

Answer

Create a load balancer and manually add instances during peak hours

Question 9

An organization is migrating a legacy application to the cloud. The application writes logs to a local file system. The cloud architect recommends using a centralized logging service. Which of the following BEST explains why this change is important?

Accepted Answer

Because cloud instances are ephemeral and local logs would be lost if instances terminate. Option C is correct because centralized logging aggregates logs from ephemeral instances that may be terminated. Option A is wrong because encryption is handled by the logging service, not the reason for centralization. Option B is wrong while compliance is a benefit, but the primary reason is ephemeral nature of cloud instances. Option D is wrong because cost is not the primary driver.

Answer

To meet regulatory compliance requirements for log retention

Answer

To reduce storage costs by using object storage for logs

Answer

To encrypt log data at rest and in transit

Question 10

A cloud administrator receives an alert that a virtual machine's disk usage is at 95%. The VM hosts a database. Which of the following troubleshooting steps should the administrator take FIRST?

Accepted Answer

Check the disk to identify which files are consuming space. When a VM's disk usage reaches 95%, the first step is to identify what is consuming the space. Checking the disk to identify which files are consuming space (Option D) allows the administrator to determine whether the issue is caused by database logs, temporary files, or other data, and to plan an appropriate remediation without unnecessary risk or downtime.

Answer

Expand the virtual disk by resizing the volume in the cloud console

Answer

Reboot the virtual machine to free up temporary files

Answer

Query the database for active connections to determine if there are long-running transactions

Question 11

A company deploys a multi-tier application in a public cloud. The web tier uses an auto scaling group across multiple availability zones. The database tier runs on a single large VM. The application experiences intermittent slowdowns during peak load. Which of the following is the BEST long-term solution?

Accepted Answer

Migrate the database to a managed database service with read replicas. Option D is correct because moving the database to a managed service with replication improves scalability and reduces single points of failure. Option A is wrong because increasing web tier instances may not help if database is bottleneck. Option B is wrong because vertical scaling of the database has limits. Option C is wrong because placing a load balancer in front of a single database does not solve the scaling problem.

Answer

Add a load balancer in front of the database tier

Answer

Upgrade the database VM to a larger instance type

Answer

Increase the number of web servers in the auto scaling group

Question 12

A cloud administrator needs to ensure that application logs are retained for three years to comply with regulatory requirements. Which of the following is the MOST cost-effective solution?

Accepted Answer

Use a lifecycle policy to transition logs to archive storage after 90 days and delete after three years. Option B is correct because setting a lifecycle policy to transition logs to cold storage after a period and then delete after three years reduces cost. Option A is wrong because storing all logs in hot storage for three years is expensive. Option C is wrong because preventing log rotation would not help with cost and may cause storage issues. Option D is wrong because compressing old logs manually is less efficient than automated lifecycle.

Answer

Configure log rotation so only the last 30 days of logs are kept in the instance

Answer

Store all logs in block storage for three years

Answer

Compress old logs manually and store them in a separate volume

Question 13

An organization uses a cloud-based monitoring service to track CPU utilization across a fleet of virtual machines. The administrator notices that one VM consistently shows 100% CPU utilization at the same time each day. Which of the following should the administrator do NEXT?

Accepted Answer

Check the VM's local task scheduler for any jobs running during the peak times. Option C is correct because the consistent daily spike in CPU utilization at the same time strongly suggests a scheduled task or cron job is triggering the load. Checking the VM's local task scheduler (e.g., Task Scheduler on Windows or cron on Linux) is the logical first step to identify the specific process causing the spike before taking any remediation actions.

Answer

Add the VM to an auto scaling group to distribute the load

Answer

Immediately increase the VM size to accommodate the peak

Answer

Scan the VM for malware that might be causing the activity

Question 14

A cloud administrator is troubleshooting an application that fails to connect to a database. The database server is in a private subnet, and the application server is in a public subnet. The security group for the database allows inbound traffic on port 3306 from the application's security group. Which of the following is the MOST likely reason the connection fails?

Accepted Answer

The network ACL for the database subnet is blocking inbound traffic on port 3306. The network ACL (NACL) for the database subnet is the most likely cause because NACLs are stateless and apply to the entire subnet. Even if the database security group allows inbound traffic from the application's security group, the NACL must also allow inbound traffic on port 3306 (MySQL) from the application subnet. By default, custom NACLs deny all inbound traffic, so if the administrator did not explicitly add a rule for port 3306, the connection will be blocked at the subnet boundary.

Answer

The database server's operating system firewall is blocking the connection

Answer

The application's security group does not allow outbound traffic to the database

Answer

The route table for the public subnet does not have a route to the private subnet

Question 15

A cloud administrator needs to apply a critical security patch to a virtual machine that is part of a production application. The application must remain available during patching. Which of the following is the BEST approach?

Accepted Answer

Remove the VM from the load balancer, apply the patch, then return it to service during a maintenance window. Removing the VM from the load balancer ensures that no new traffic is sent to it while the patch is applied, maintaining application availability for users. After the patch is applied and the VM is verified as healthy, it can be returned to the load balancer pool. This approach aligns with a rolling update strategy, which is the standard method for applying patches to production VMs without downtime.

Answer

Postpone the patch until the next scheduled update cycle

Answer

Patch all VMs simultaneously to minimize the time to full deployment

Answer

Apply the patch during peak usage hours to ensure immediate deployment