CV0-004 Troubleshooting Practice Test 9 — 15 Questions

Question 1

A cloud administrator is troubleshooting a web application that is hosted on multiple virtual machines behind a load balancer. Users report that the application is occasionally slow, but the load balancer health checks show all instances as healthy. The administrator suspects that one of the virtual machines is performing poorly. Which of the following should the administrator do to confirm this suspicion?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Review the load balancer's access logs for response times per backend instance.. Load balancer access logs are a valuable source of per-instance performance data. They record which backend handled each request and how long it took to respond. By examining these logs, the administrator can quickly identify if one instance is consistently slower. This method is non-intrusive and uses existing data, making it the most efficient first step.

Answer

Restart each virtual machine one at a time to see if performance improves.

Answer

Check the CPU utilization of each virtual machine using the cloud provider's console.

Answer

Enable detailed monitoring on all virtual machines and wait for new metrics.

Question 2

A cloud administrator is troubleshooting a web application that is hosted on multiple virtual machines behind a load balancer. Users report that the application is occasionally slow, but the load balancer health checks show all instances as healthy. The administrator suspects that one of the virtual machines is performing poorly. Which of the following should the administrator do to confirm this suspicion?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Verify that the health check path and port are correctly configured for the application.. 502 Bad Gateway errors from a load balancer indicate it cannot reach healthy backend targets. If targets are marked unhealthy, the health check configuration is likely incorrect. Verifying the health check path and port ensures the load balancer correctly assesses target health. Increasing timeout, enabling sticky sessions, or adding targets do not fix misconfigured health checks.

Answer

Increase the load balancer's idle timeout to match the application's response time.

Answer

Add more targets to the target group to distribute the load.

Answer

Enable sticky sessions on the load balancer to maintain user sessions.

Question 3

A cloud engineer is troubleshooting a serverless function that is intermittently failing with timeout errors. The function is triggered by an HTTP API and processes data from an external database. The function's timeout is set to 30 seconds. Which of the following is the MOST likely cause of the timeouts?

Accepted Answer

The external database is experiencing high latency or connection issues.. Intermittent timeouts in a serverless function that accesses an external database are most commonly caused by database latency or connection problems. The function's execution time is dominated by the database call, so any slowness there can push it over the timeout limit. Addressing database performance or connection pooling is the key to resolving the issue.

Answer

The HTTP API gateway is throttling requests to the function.

Answer

The function's memory allocation is too low, causing it to run slowly.

Answer

The function's timeout value is set too high for the workload.

Question 4

A cloud administrator manages a SaaS-based CRM application integrated with an on-premises Active Directory via SAML 2.0. Users report intermittent authentication failures during peak hours (09:00-11:00), with error messages indicating 'SAML assertion validation failed'. The IdP logs show successful authentications, but the SP logs show signature validation errors. The IdP's signing certificate was rotated 30 days ago, and the SP metadata was updated 45 days ago. Which of the following is the MOST likely cause?

Accepted Answer

The SP's metadata contains an outdated IdP signing certificate.. The IdP rotated its signing certificate 30 days ago, but the SP metadata was last updated 45 days ago, meaning the SP still trusts the old certificate. SAML signature validation requires the SP to use the current IdP signing certificate. The successful IdP authentications and SP signature errors confirm the SP cannot validate assertions signed with the new key. Updating the SP metadata with the new certificate resolves the issue.

Answer

The IdP is not including the correct NameID format in the SAML assertion.

Answer

The SP's SAML assertion consumer service (ACS) URL is misconfigured.

Answer

The IdP's clock is skewed relative to the SP, causing timestamp validation to fail.

Question 5

A cloud administrator is troubleshooting a web application that is hosted on multiple virtual machines behind a load balancer. Users report that the application is occasionally slow, but the load balancer health checks show all instances as healthy. The administrator suspects that one of the virtual machines is performing poorly. Which of the following should the administrator do to confirm this suspicion?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Reboot the VM from the cloud provider's console.. When a VM's OS is hung but the instance is still running, a reboot from the cloud console is the quickest way to restore access. It preserves the instance and its persistent storage, minimizing data loss and downtime compared to termination or disk detachment.

Answer

Delete the VM's network interface and recreate it.

Answer

Detach the VM's disk and attach it to another VM for repair.

Answer

Terminate the VM and create a new one from a snapshot.

Question 6

A cloud administrator is troubleshooting a web application that is hosted on multiple virtual machines behind a load balancer. Users report that the application is occasionally slow, but the load balancer health checks show all instances as healthy. The administrator suspects that one of the virtual machines is performing poorly. Which of the following should the administrator do to confirm this suspicion?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Check the VM's disk queue depth and consider increasing provisioned IOPS.. High disk I/O wait with low CPU utilization points to storage as the bottleneck. Cloud disks have IOPS limits; if the workload exceeds provisioned IOPS, performance degrades. Checking queue depth confirms saturation, and increasing provisioned IOPS or upgrading the disk type resolves the issue. CPU and memory changes do not address the storage bottleneck, and read caching may not help if the workload is write-intensive.

Answer

Migrate the database to a VM with a larger memory allocation.

Answer

Enable read caching on the database to reduce disk reads.

Answer

Increase the VM's CPU count to handle more concurrent queries.

Question 7

A cloud administrator is troubleshooting a web application that is hosted on multiple virtual machines behind a load balancer. Users report that the application is occasionally slow, but the load balancer health checks show all instances as healthy. The administrator suspects that one of the virtual machines is performing poorly. Which of the following should the administrator do to confirm this suspicion?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Review the VM's system logs for errors or warnings around the times of unavailability.. To diagnose intermittent unavailability without a provider incident, the administrator should examine the VM's system logs for errors and verify network ACLs and security group rules. These actions directly investigate the VM's health and network configuration, which are common causes of intermittent accessibility. They are immediate, non-destructive steps that can reveal misconfigurations or application faults.

Answer

Reboot the VM to clear any transient issues.

Answer

Enable detailed monitoring on the VM and wait for the next occurrence.

Answer

Increase the VM's CPU and memory resources to handle potential spikes.

Question 8

A cloud engineer is troubleshooting a containerized application deployed on a managed Kubernetes cluster. The application pods are repeatedly restarting with 'OOMKilled' status. The engineer reviews the pod specification and sees that the memory request is 512Mi and the memory limit is 1Gi. The application is a Java-based service with a heap size set to 768Mi. Node metrics show that nodes have 8Gi of memory with 2Gi available. Which of the following is the MOST likely cause of the OOMKilled events?

Accepted Answer

The Java heap size exceeds the container memory limit when accounting for JVM overhead.. The container memory limit is 1Gi, but the Java heap is 768Mi. The JVM requires additional native memory for metaspace, thread stacks, and other structures. When the total memory usage exceeds the 1Gi limit, the kernel OOM killer terminates the container, resulting in 'OOMKilled'. Although the node has available memory, the container's cgroup limit is the constraint. Increasing the memory limit or reducing the heap size would resolve the issue.

Answer

The container is being killed by the Kubernetes liveness probe due to high memory usage.

Answer

The Java application has a memory leak that causes it to exceed the heap size.

Answer

The memory request is too low, causing the pod to be scheduled on a node with insufficient memory.

Question 9

A cloud administrator is troubleshooting a web application that is hosted on multiple virtual machines behind a load balancer. Users report that the application is occasionally slow, but the load balancer health checks show all instances as healthy. The administrator suspects that one of the virtual machines is performing poorly. Which of the following should the administrator do to confirm this suspicion?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Disk I/O latency on the VM's volume. When CPU, memory, and network metrics are all well within normal ranges, storage I/O latency is a frequent hidden cause of application latency. Disk operations may be slow due to volume type, IOPS limits, or contention, and this may not be reflected in default monitoring dashboards.

Answer

Network packet loss between the client and the VM

Answer

Insufficient CPU credits on a burstable instance

Answer

Memory swapping due to insufficient RAM

Question 10

A cloud administrator is troubleshooting a web application that is hosted on multiple virtual machines behind a load balancer. Users report that the application is occasionally slow, but the load balancer health checks show all instances as healthy. The administrator suspects that one of the virtual machines is performing poorly. Which of the following should the administrator do to confirm this suspicion?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The receive ring buffer on the network interface is too small, causing packets to be dropped when the buffer overflows.. The high number of receive drops on the virtio interface, combined with low CPU utilization, points to receive ring buffer exhaustion. The virtio driver uses a ring buffer to hold incoming packets; if the buffer is too small for the traffic rate, packets are dropped. Increasing the ring buffer size with ethtool -G eth0 rx <size> can resolve the issue. Physical network issues and firewall drops are less likely in a cloud environment and would not manifest as interface-level receive drops.

Answer

The VM's firewall is dropping packets due to a misconfigured rule.

Answer

There is a physical network issue, such as a faulty cable or switch port.

Answer

The VM's CPU is not allocating enough cycles to process network interrupts.

Question 11

A cloud administrator is troubleshooting a web application that is hosted on multiple virtual machines behind a load balancer. Users report that the application is occasionally slow, but the load balancer health checks show all instances as healthy. The administrator suspects that one of the virtual machines is performing poorly. Which of the following should the administrator do to confirm this suspicion?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Change the storage volume to a higher-performance SSD-based volume type.. High disk I/O wait times indicate that the storage volume cannot keep up with the workload's demand. The most effective solutions are to change to a higher-performance volume type or provision a volume with higher IOPS. Both actions directly increase the storage's ability to handle I/O operations, reducing wait times. Diagnostic steps like monitoring are useful but do not resolve the issue.

Answer

Increase the size of the existing volume to automatically improve IOPS.

Answer

Increase the instance type to one with more memory.

Answer

Enable detailed monitoring for the volume to analyze I/O patterns.

Question 12

A cloud administrator receives reports that a newly deployed application stack fails health checks and is repeatedly replaced by the orchestrator. Logs show the container starts, then exits after a few seconds with no error. The container image runs a process that daemonizes and returns control to the shell. Which of the following is the MOST likely cause?

Accepted Answer

The container's main process forks into the background, so the runtime sees the foreground process exit and stops the container.. Container lifecycle is bound to the foreground process. When the entrypoint backgrounds the application and returns, the runtime sees the main process complete and stops the container, so the orchestrator repeatedly recreates it. Running the server in the foreground or using a process supervisor keeps the container alive and allows health checks to succeed.

Answer

The orchestrator's restart policy is set to Always, causing healthy containers to be restarted.

Answer

The container image was built for the wrong CPU architecture and the kernel is killing the process.

Answer

The container's health check endpoint is returning 500 errors because the application is not fully initialized.

Question 13

A cloud administrator is troubleshooting a web application that is hosted on multiple virtual machines behind a load balancer. Users report that the application is occasionally slow, but the load balancer health checks show all instances as healthy. The administrator suspects that one of the virtual machines is performing poorly. Which of the following should the administrator do to confirm this suspicion?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Increase the provisioned IOPS and throughput of the primary's storage volume to match the write workload.. High disk queue depth combined with saturated provisioned IOPS identifies the storage layer as the limiting factor for writes. Because write latency depends on durable commits to the volume, the fix is to raise provisioned IOPS and throughput so the primary can absorb the write rate. CPU is moderate and reads are healthy, so instance sizing, replica count, and zone placement are not the causes.

Answer

Move the primary node to a different availability zone to reduce storage latency.

Answer

Increase the primary instance's memory so more of the working set can be cached.

Answer

Add another read replica to distribute the write load across more nodes.

Question 14

A cloud administrator is investigating a sudden increase in latency for a microservices application. Distributed traces show that a single downstream service's response time grew from 20 ms to 2 seconds, and its CPU utilization remains low at 15 percent. The service makes calls to an external third-party API. Which of the following is the MOST likely cause?

Accepted Answer

The service is blocked waiting on the third-party API, and its thread pool is saturating under the increased wait time.. A slowdown in an external dependency pushes worker threads into long waits, so a fixed-size thread pool saturates and requests queue behind blocked workers. CPU remains low because the threads are waiting on I/O, not executing. The trace data localizing latency to the third-party call identifies the trigger, and the service's concurrency model explains the amplification.

Answer

The service's container CPU limit is throttling it during request bursts.

Answer

The service's memory limit is too low, causing the kernel to swap pages to disk.

Answer

The service's network interface is experiencing packet loss, causing TCP retransmissions.

Question 15

A cloud administrator is troubleshooting a web application that is hosted on multiple virtual machines behind a load balancer. Users report that the application is occasionally slow, but the load balancer health checks show all instances as healthy. The administrator suspects that one of the virtual machines is performing poorly. Which of the following should the administrator do to confirm this suspicion?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The security group does not allow inbound traffic on port 8080.. The security group allows inbound traffic only on ports 22 and 80, but the application listens on port 8080. External users cannot reach port 8080 because the security group blocks it. Local access via localhost:8080 works because it does not traverse the security group. To resolve the issue, the administrator should either add an inbound rule for port 8080 or reconfigure the application to listen on port 80.

Answer

The application is configured to use HTTPS instead of HTTP.

Answer

The application is bound to the loopback interface instead of all interfaces.

Answer

The VM's operating system firewall is blocking port 8080.