CV0-004 Operations and Support Practice Test 9 — 15 Questions

Question 1

Refer to the exhibit. A cloud administrator is troubleshooting why an EC2 instance in subnet-12345678 cannot be reached from the internet. The instance has a public IP and the security group allows all inbound traffic. Based on the exhibit, what is the most likely cause?

Accepted Answer

The network ACL is misconfigured and blocking all inbound traffic.. Option B is correct. The network ACL associated with the subnet has an inbound deny rule for all traffic, blocking access despite the security group. Options A, C, and D are not supported by the exhibit.

Answer

The security group is not applied.

Answer

The route table is missing a default route to the internet gateway.

Answer

The instance is stopped.

Question 2

Refer to the exhibit. A cloud administrator deployed a Compute Engine instance in the default VPC. The instance has a public IP but cannot be accessed via SSH from the internet. The firewall rules allow ingress on port 22 from 0.0.0.0/0. What is the most likely cause?

Accepted Answer

The instance does not have a firewall tag matching the SSH rule.. Option C is correct. In GCP, firewall rules can target instances by network tags. If the SSH rule targets a tag that the instance does not have, the rule is not applied. Options A, B, and D are incorrect.

Answer

The instance is not assigned to a service account.

Answer

The subnetwork does not have an external IP range.

Answer

The instance is running an incompatible OS.

Question 3

Refer to the exhibit. A cloud administrator is trying to retrieve a secret from a cloud secrets manager using a script with an access key and secret key. The script returns the error shown. The keys were newly created. What is the most likely cause?

Accepted Answer

The access key is not activated or has a propagation delay.. Option D is correct. Newly created access keys may have a propagation delay and are not immediately active. Options A, B, and C would yield different error messages.

Answer

The secret is encrypted with a different KMS key.

Answer

The script is using the wrong region.

Answer

The secret does not exist.

Question 4

A cloud administrator notices that a virtual machine has been running for 180 days without a reboot. The administrator needs to install critical security patches that require a reboot. Which of the following actions should the administrator take FIRST?

Accepted Answer

Check for existing snapshots and create a new snapshot.. Option B is correct because checking for snapshots ensures that the VM can be rolled back if the patching fails. Option A is wrong because pausing the VM is not necessary before checking snapshots. Option C is wrong because migrating to another host is a later step. Option D is wrong because shutting down before checking snapshots risks losing state.

Answer

Pause the virtual machine before applying patches.

Answer

Shut down the virtual machine and apply patches offline.

Answer

Migrate the virtual machine to a different host to avoid disruption.

Question 5

A cloud engineer is tasked with automating the deployment of a new web application. Which of the following tools is BEST suited for managing infrastructure as code in a hybrid cloud environment?

Accepted Answer

Terraform. Option A is correct because Terraform is cloud-agnostic and supports multiple providers, including on-premises and public cloud. Option B is wrong because AWS CloudFormation is AWS-specific. Option C is wrong because Ansible is configuration management, not IaC. Option D is wrong because Docker is containerization, not IaC.

Answer

AWS CloudFormation

Answer

Ansible

Answer

Docker

Question 6

A company's cloud environment has experienced a sudden spike in network traffic, causing a critical application to become unresponsive. Which of the following is the FIRST step the cloud administrator should take to address this issue?

Accepted Answer

Analyze the network traffic logs to identify the source of the spike.. Option D is correct because the first step in troubleshooting is to identify the problem, which involves analyzing traffic logs. Option A is wrong because increasing resources without understanding the cause can waste resources. Option B is wrong because contacting the provider should be done after internal diagnosis. Option C is wrong because restarting may resolve symptoms but not the root cause.

Answer

Restart the application server to restore service.

Answer

Contact the cloud provider to report the issue.

Answer

Increase the bandwidth for the affected application.

Question 7

A cloud administrator is designing a backup strategy for a critical database that must achieve a recovery point objective (RPO) of 15 minutes and a recovery time objective (RTO) of 30 minutes. The database has a high write throughput. Which of the following backup methods BEST meets these requirements?

Accepted Answer

Snapshot replication to a secondary datastore every 10 minutes.. Option C is correct because snapshot replication provides near-instant recovery with minimal data loss, meeting both RPO and RTO. Option A is wrong because full daily backups have a higher RPO. Option B is wrong because incremental backups require a full restore, increasing RTO. Option D is wrong because log shipping may have a longer recovery time.

Answer

Synchronous log shipping to a standby database.

Answer

Full daily backups with transaction log backups every hour.

Answer

Incremental backups every 10 minutes.

Question 8

A cloud administrator receives an alert that the CPU utilization on a production web server has exceeded 90% for the past hour. The administrator checks the metrics and sees that the request rate has increased. Which of the following is the MOST appropriate action to resolve the issue in the short term?

Accepted Answer

Increase the number of vCPUs or add additional instances behind a load balancer.. Option A is correct because adding more compute resources allows the server to handle the increased load. Option B is wrong because increasing memory may not help CPU-bound issues. Option C is wrong because optimizing code is a long-term solution. Option D is wrong because throttling requests degrades user experience.

Answer

Increase the memory allocation for the virtual machine.

Answer

Implement rate limiting to reduce incoming requests.

Answer

Optimize the application code to reduce CPU usage.

Question 9

A cloud engineer is troubleshooting a connectivity issue between two virtual networks in different regions. The engineer has verified that the virtual networks are peered and the routing tables are correct. Which of the following is the MOST likely cause of the issue?

Accepted Answer

A network security group blocking the traffic. Option B is correct because network security groups (NSGs) or firewall rules can block traffic even if routing is correct. Option A is wrong because DNS is not directly involved in the connectivity. Option C is wrong because the issue is between virtual networks, not a physical cable. Option D is wrong because the engineer already verified routing.

Answer

Incorrect route tables on the virtual network gateway

Answer

A physical cable disconnection in the datacenter

Answer

Incorrect DNS resolution

Question 10

A company uses a multi-cloud strategy with both AWS and Azure. The cloud operations team needs to centrally monitor all cloud resources and receive alerts when resource usage exceeds predefined thresholds. Which of the following solutions should the team implement?

Accepted Answer

A third-party monitoring tool that supports both AWS and Azure. Option D is correct because a third-party monitoring tool like Datadog or Dynatrace can provide a unified view across clouds. Option A is wrong because AWS CloudWatch is limited to AWS only. Option B is wrong because Azure Monitor is limited to Azure only. Option C is wrong because custom scripts are less scalable and maintainable.

Answer

Azure Monitor with Log Analytics

Answer

AWS CloudWatch with cross-account monitoring

Answer

Custom scripts that log to a central syslog server

Question 11

A cloud administrator is responsible for ensuring the availability of a critical application that runs on a virtual machine. The administrator needs to implement a solution that can automatically restart the virtual machine if it becomes unresponsive due to an operating system crash. Which of the following should the administrator configure?

Accepted Answer

An availability set configured with automatic recovery. Option B is correct because an availability set with automatic recovery can restart a VM if it fails. Option A is wrong because a load balancer distributes traffic but does not restart VMs. Option C is wrong because a health probe only checks status, does not perform restart. Option D is wrong because a snapshot is for backup, not automatic recovery.

Answer

A snapshot-based backup policy

Answer

A load balancer with a health probe

Answer

A custom script that sends a heartbeat to a monitoring service

Question 12

A cloud operations team notices that a production database is experiencing intermittent slow queries. The database is running on a virtual machine with 4 vCPUs and 16 GB of memory. The slow queries coincide with high CPU usage. Which of the following is the MOST effective long-term solution?

Accepted Answer

Scale up the database virtual machine to 8 vCPUs and 32 GB of memory.. Option A is correct because adding more vCPUs and memory can address resource constraints, improving query performance. Option B is wrong because migrating to a container may not solve resource issues. Option C is wrong because adjusting query parameters is a short-term fix. Option D is wrong because read replicas handle read traffic but not the root cause.

Answer

Migrate the database to a containerized deployment for better resource utilization.

Answer

Use a query performance tuning tool to optimize the slow queries.

Answer

Implement a read replica to offload read traffic.

Question 13

Which TWO of the following are best practices for managing cloud costs? (Select TWO.)

Accepted Answer

Implementing resource tagging for cost allocation. Options B and D are correct. Option B is correct because tagging resources allows tracking costs by project. Option D is correct because using reserved instances reduces costs for predictable workloads. Option A is wrong because manual shutdown is error-prone; automation is better. Option C is wrong because overprovisioning increases costs. Option E is wrong because multiple environments require separate management for cost control.

Answer

Consolidating all environments into a single subscription

Answer

Overprovisioning resources to ensure high performance

Answer

Manually stopping idle virtual machines

Question 14

Which TWO of the following are key components of a disaster recovery plan in the cloud? (Select TWO.)

Accepted Answer

Recovery point objective (RPO). Options B and D are correct. Option B is correct because recovery point objective (RPO) defines acceptable data loss. Option D is correct because replication to another region ensures geographic redundancy. Option A is wrong because load balancing is for performance, not DR. Option C is wrong because monitoring is for performance, not DR. Option E is wrong because billing thresholds are financial controls.

Answer

Network performance monitoring

Answer

Billing alerts

Answer

Load balancing

Question 15

A cloud administrator is troubleshooting a performance issue in a virtualized environment. Which THREE of the following metrics should the administrator analyze to identify potential resource contention? (Select THREE.)

Accepted Answer

CPU ready time. CPU ready time measures the time a virtual machine is ready to execute instructions but is waiting for the hypervisor to schedule physical CPU resources. High ready time directly indicates CPU contention, as the VM is being starved of CPU cycles by other VMs on the same host.

Answer

Swap file usage

Answer

Network latency