CV0-004 Troubleshooting Practice Test 2 — 15 Questions

Question 1

A cloud technician is troubleshooting connectivity from a VM with IP 10.0.0.1 to another VM at 10.0.1.10 in a different subnet. The ping output shows 'Destination Host Unreachable'. Which of the following is the most likely cause?

Accepted Answer

The source's default gateway does not have a route to the destination network. The 'Destination Host Unreachable' error indicates that the source VM (10.0.0.1) cannot find a path to the destination subnet (10.0.1.0/24). Since the VMs are in different subnets, the source must send traffic to its default gateway. If that gateway lacks a route to 10.0.1.0/24, it will drop the packet and send an ICMP Destination Unreachable message back, causing the observed error. This is the most likely cause because the issue is at Layer 3 routing, not Layer 2 ARP or local interface problems.

Answer

ARP resolution for the destination IP is failing

Answer

The network interface on the source VM is disabled

Answer

A firewall is blocking ICMP on the destination

Question 2

A cloud administrator is configuring a Linux VM as a router. The iptables rules are shown. The administrator can SSH into the VM from the network but cannot forward traffic between interfaces. What is the most likely cause?

Accepted Answer

The FORWARD chain's default policy is DROP and no rules allow forwarding. The FORWARD chain in iptables controls traffic that passes through the VM (i.e., traffic not destined for the VM itself). If its default policy is DROP and no explicit ACCEPT rules exist for forwarding, the kernel will drop all forwarded packets, preventing the VM from acting as a router. SSH access works because it uses the INPUT chain, which is separate from FORWARD.

Answer

The INPUT chain has a rule dropping invalid packets

Answer

The INPUT chain is missing a rule to allow forwarded traffic

Answer

The NAT table is misconfigured

Question 3

A cloud engineer receives an alert that the root filesystem (/) is at 93% usage. The /data volume has plenty of free space. The application stores logs in /var/log/app/ on the root filesystem. Which of the following is the BEST long-term solution?

Accepted Answer

Move the /var/log/app directory to the /data partition and create a symlink. Moving the /var/log/app directory to the /data partition and creating a symlink is the best long-term solution because it permanently relocates the log data to a volume with ample free space without requiring application reconfiguration. The symlink (/var/log/app -> /data/app) makes the application continue to write to the same logical path, while the actual storage is on the /data filesystem. This resolves the root filesystem capacity issue without altering the application's logging behavior or risking data loss.

Answer

Increase the size of the root filesystem

Answer

Delete the /data partition and merge it with root

Answer

Configure log rotation to delete logs more frequently

Question 4

A company has a cloud-based application that uses a relational database. The database team performs daily backups to an on-premises storage system using a VPN connection. Recently, backups have been failing with timeout errors. The network team confirms the VPN is up and stable. Which of the following is the MOST likely cause?

Accepted Answer

The VPN bandwidth is insufficient for the backup data volume. The VPN connection is confirmed stable, so tunnel configuration and firewall issues are unlikely. Backup timeout errors with large data volumes typically indicate insufficient bandwidth, causing the transfer to exceed the timeout threshold. The database service itself is responding (backups are attempted), ruling out service unavailability.

Answer

The database service is not responding

Answer

The VPN tunnel is not properly configured

Answer

The on-premises firewall is blocking the backup port

Question 5

A cloud administrator is troubleshooting a web application hosted on a cloud virtual machine (VM) that is experiencing intermittent high latency during peak traffic hours. The application is deployed on a single VM instance with 4 vCPUs and 8 GB RAM, running a Linux OS. The VM is connected to a virtual network with a public IP. The administrator has verified that the application code is optimized and there are no memory leaks. CPU utilization remains below 50% during peaks, but network outbound traffic shows periodic spikes up to 500 Mbps. The VM's network interface is configured with a 1 Gbps bandwidth cap. The administrator suspects that the issue is related to network throttling or packet loss. Which of the following actions should the administrator take to resolve the issue?

Accepted Answer

Upgrade the VM to a larger instance size with higher network bandwidth cap (e.g., 2 Gbps).. Option B is correct because the VM's network bandwidth cap of 1 Gbps is being saturated during peak traffic (spikes up to 500 Mbps, but with overhead and burst behavior, the cap can cause throttling and packet loss). Upgrading to a larger instance size with a higher network bandwidth cap (e.g., 2 Gbps) directly addresses the bottleneck by providing more headroom for outbound traffic, reducing latency caused by queueing and drops. The administrator has already ruled out CPU and memory issues, so the network cap is the likely culprit.

Answer

Increase the VM's vCPU count to 8 to improve processing capacity.

Answer

Configure the firewall to allow all traffic to reduce processing overhead.

Answer

Enable DDoS protection on the public IP to filter malicious traffic.

Question 6

A cloud administrator is troubleshooting connectivity to a virtual machine with IP address 10.10.10.10 from another VM on the same subnet. The output of ping and traceroute commands is shown. What is the most likely cause of the connectivity issue?

Accepted Answer

The destination VM's network interface is disabled.. The correct answer is A because a disabled network interface on the destination VM would cause the VM to be unreachable from the same subnet, even though the VM itself is powered on. Ping and traceroute would fail with no response, as the NIC is not operational at Layer 2, preventing ARP resolution and frame delivery. This matches the symptom of no connectivity despite being on the same subnet, where routing and security groups are not factors.

Answer

The destination VM is powered off.

Answer

The source VM's routing table does not have a default gateway.

Answer

The destination VM's security group is blocking ICMP.

Question 7

A cloud administrator is troubleshooting a performance issue where a web application is responding slowly. The application runs on virtual machines in a private cloud. The administrator has verified that CPU and memory utilization are within normal limits. Which TWO additional metrics should the administrator check to diagnose the issue?

Accepted Answer

Network latency between the application and database servers. Network latency between the application and database servers is a critical metric because slow database queries or network congestion can cause the web application to respond slowly even when CPU and memory on the VMs are normal. High latency increases round-trip time for SQL queries, directly impacting page load times. Disk I/O wait time on the hypervisor is also essential because excessive I/O wait indicates storage contention, which can throttle read/write operations for the VMs, leading to application sluggishness.

Answer

Number of running processes

Answer

Virtual machine snapshot size

Answer

Hypervisor version

Question 8

A company hosts a critical application on a single virtual machine in a public cloud. The virtual machine has been running without issues for months. Recently, the application became unresponsive, and users report a '500 Internal Server Error'. The cloud administrator checks the virtual machine's status and finds it is 'Running'. The administrator can successfully ping the virtual machine's public IP address. The administrator then attempts to SSH into the virtual machine but receives 'Connection timed out'. The virtual machine's security group allows SSH (port 22) from the administrator's IP address. The operating system firewall is enabled and configured to allow SSH. What should the administrator do next to troubleshoot the issue?

Accepted Answer

Use a serial console or out-of-band management to access the virtual machine's console.. The administrator can ping the VM (ICMP works) but SSH (TCP/22) times out, indicating the application is running but the SSH service or network stack is not responding to new connections. Since the cloud security group and OS firewall are correctly configured, the issue is likely at the OS level (e.g., SSH daemon crashed, kernel panic, or network service hung). Using a serial console or out-of-band management (e.g., AWS EC2 Serial Console, Azure Serial Console) provides direct, network-independent access to the VM's console, bypassing the broken network stack to diagnose and fix the OS-level problem.

Answer

Reset the virtual machine from the cloud provider's management console.

Answer

Create a new virtual machine and migrate the application.

Answer

Check the application logs from the cloud provider's monitoring service.

Question 9

Sequence the steps to set up a cloud storage bucket with versioning and lifecycle policies.

Question 10

Match each disaster recovery term to its definition.

Question 11

A cloud administrator is troubleshooting a performance issue where users report slow access to a web application hosted in a public cloud. The application uses an auto-scaling group of web servers behind a load balancer. The administrator notices that the CPU utilization on the web servers is low, but the load balancer metrics show a high number of pending requests. What is the most likely cause?

Accepted Answer

The load balancer health checks are misconfigured, causing healthy instances to be removed.. Option A is correct because misconfigured health checks can cause the load balancer to stop sending traffic to healthy instances, leading to pending requests. Option B is wrong because API rate limiting affects API calls, not web traffic. Option C is wrong because DNS would cause total inaccessibility, not just slowness. Option D is wrong because blocking port 80 would cause connection failures, not pending requests.

Answer

The web servers are throttled by the cloud provider's API rate limiting.

Answer

The DNS records point to an incorrect IP address.

Answer

The security group is blocking inbound traffic on port 80.

Question 12

A company is running a database server on a virtual machine in the cloud. The database team reports that write operations are taking longer than expected. The administrator checks the disk performance metrics and sees that the average disk queue length is consistently above 10. Which action would most likely resolve this issue?

Accepted Answer

Upgrade to a higher IOPS tier for the disk.. Option B is correct because high disk queue length indicates insufficient I/O throughput; upgrading IOPS tier increases throughput. Option A is wrong because increasing size does not guarantee higher IOPS. Option C is wrong because compression may reduce I/O but not directly address queue length. Option D is wrong because adding RAM may reduce disk hits but doesn't directly fix queue length.

Answer

Add more RAM to the virtual machine.

Answer

Increase the size of the disk.

Answer

Enable compression on the database.

Question 13

A cloud administrator runs a deployment script that creates multiple resources using Infrastructure as Code (IaC). The script fails with a "400 Bad Request" error when attempting to create a storage account. Which troubleshooting step should the administrator take first?

Accepted Answer

Review the error message details for a specific validation error.. Option C is correct because a 400 error indicates a client error, so the first step is to examine the error details to understand what parameter is invalid. Option A is wrong because 400 is not a network error (would be 5xx). Option B is wrong but plausible; however, the error message would specify the exact issue. Option D is wrong because timeouts result in different errors.

Answer

Check the network connectivity to the cloud API endpoint.

Answer

Increase the timeout value for the API call.

Answer

Verify that the script has the correct region parameter.

Question 14

A company has a three-tier application in a cloud VPC: web servers in a public subnet, application servers in a private subnet, and database servers in a private subnet. The web servers can connect to the application servers, but the application servers cannot connect to the database servers. The security groups are configured as follows:
- Web SG: inbound HTTP from 0.0.0.0/0, outbound all
- App SG: inbound HTTP from Web SG, outbound all
- DB SG: inbound MySQL from App SG, outbound all
What is the most likely cause of the connectivity issue?

Accepted Answer

The network access control list (NACL) on the database subnet is blocking inbound traffic from the application subnet.. Option D is correct because security groups are stateful and allow outbound traffic automatically, so outbound rules are not the issue. The inbound rule on DB SG allows MySQL from App SG, so A is not the issue. B is not needed because outbound is all. C is irrelevant. The issue likely is a NACL on the private subnet blocking the traffic, as NACLs are stateless and need explicit rules.

Answer

The database security group is missing an inbound rule for MySQL.

Answer

The application security group is missing an outbound rule for MySQL.

Answer

The web security group is blocking traffic to the database.

Question 15

A cloud administrator manages a web application that uses an auto scaling group (ASG) with a minimum of 2 and maximum of 10 instances. The CPU utilization for the ASG averages 40%. However, during peak hours, users experience intermittent timeouts. The administrator reviews the scaling policy, which is set to scale out when CPU exceeds 70% for 5 minutes. What is the most likely cause of the timeouts?

Accepted Answer

The scale-out cooldown period is too long, delaying the addition of new instances.. Option A is correct because during spikes, if the cooldown is long, the ASG may not add instances quickly enough, causing timeouts even though average CPU is 40%. Option B is wrong because threshold is 70%, not low. Option C is wrong because max is 10 and only 2 instances might be running if not scaled. Option D is wrong because that would cause instance replacement but not necessarily timeouts.

Answer

The maximum number of instances is too low.

Answer

The health checks are marking healthy instances as unhealthy.

Answer

The CPU threshold is too low, causing premature scaling.

CV0-004 Troubleshooting Practice Test 2 — 15 Questions

Exhibit

CV0-004 Troubleshooting Practice Test 2 — 15 Questions

Exhibit