CV0-004 Cloud Architecture and Design Practice Test 3 — 15 Questions

Question 1

A company is designing a multi-cloud strategy to ensure high availability across AWS and Azure. They want to use a global load balancer to route traffic based on latency. Which THREE components are required for this setup? (Select THREE.)

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Health checks for endpoints in both clouds. Health checks, latency-based routing, and DNS services are essential. Global load balancers at each provider and a CDN are not required for latency-based routing.

Answer

A separate global load balancer in each cloud

Answer

A CDN to cache content at edge locations

Question 2

A company is evaluating storage options for different use cases. Which TWO storage types are most suitable for hosting a relational database in the cloud? (Select TWO.)

Accepted Answer

File storage. Block storage (e.g., AWS EBS, Azure Disk) is the primary choice for hosting relational databases due to low latency and direct block-level access. File storage (e.g., AWS EFS, Azure Files) can also host relational databases, especially in shared storage scenarios, though with higher latency and lower performance. Therefore, both block storage and file storage are suitable for hosting relational databases. Cache, archive, and object storage are not designed for active database hosting.

Answer

Cache storage

Answer

Archive storage

Answer

Object storage

Question 3

A financial services company needs to deploy a new application in AWS. The application must be isolated from other tenants at the hardware level, and the company must have control over the underlying host. The security team requires that the company manage the hypervisor and patching of the host operating system. Which AWS service should be used?

Accepted Answer

Amazon EC2 with Dedicated Hosts. The requirement for hardware-level isolation and customer control over the host OS points to Amazon EC2 Dedicated Hosts. Dedicated Hosts give the customer a physical server and allow them to manage the host, including patching, which is not possible with Dedicated Instances, Lambda, or Fargate. Thus, Dedicated Hosts is the correct choice.

Answer

AWS Lambda

Answer

Amazon ECS with Fargate

Answer

Amazon EC2 with Dedicated Instances

Question 4

A cloud architect is designing a solution on AWS for a regulated healthcare workload. The application's database must be encrypted at rest with keys that the organization generates, rotates, and can immediately revoke, and the security team must maintain full control over the key material. The organization cannot rely on a cloud provider to manage the root key. Which AWS service should the architect select for this requirement?

Accepted Answer

AWS CloudHSM with customer-controlled keys. The requirement is customer custody of root key material with the ability to revoke it immediately, which only a single-tenant HSM offering provides. CloudHSM lets the organization create and manage keys inside dedicated hardware, unlike provider-managed key services where AWS retains control of the root key. The other services handle encryption or secrets but leave root key ownership with the provider.

Answer

AWS Secrets Manager with automatic rotation

Answer

Amazon S3 server-side encryption with S3 managed keys (SSE-S3)

Answer

AWS Key Management Service (KMS) with customer managed keys

Question 5

A cloud architect is designing a stateless API tier that must survive the loss of an entire cloud data center with no manual intervention. The provider offers Availability Zones within a Region and Regions worldwide. Which design should the architect choose?

Accepted Answer

Deploy the API tier across multiple Availability Zones within a single Region behind a load balancer.. Spreading a stateless tier across multiple Availability Zones inside one Region gives resilience to the loss of a whole data center while keeping latency low and cost reasonable. Availability Zones are engineered as independent failure domains, and a load balancer performs health checks and reroutes traffic automatically, so no operator action is needed when a zone goes down.

Answer

Deploy the API tier across multiple Regions and use a global traffic manager for failover.

Answer

Deploy the API tier on dedicated hosts inside one data center and enable live migration.

Answer

Deploy the API tier in a single Availability Zone with automated snapshots every hour.

Question 6

A cloud architect is designing a globally distributed web application on AWS that serves users in North America, Europe, and Asia. The application must provide the lowest possible latency to users in each region while maintaining a single logical endpoint. The backend database must remain in a single region for compliance reasons. Which AWS service should the architect use to route users to the nearest healthy endpoint?

Accepted Answer

Amazon Route 53 with latency-based routing. Amazon Route 53 latency-based routing is designed to route end users to the region with the lowest latency, which directly addresses the need for optimal performance across North America, Europe, and Asia. It provides a single logical endpoint via a DNS name and integrates with health checks to maintain availability. The other services either operate within a region or do not make latency-based routing decisions.

Answer

Amazon CloudFront with origin failover

Answer

Application Load Balancer with cross-zone load balancing

Answer

AWS Global Accelerator with endpoint groups

Question 7

A cloud engineer is deploying a stateful application on Azure that requires persistent block storage with sub-millisecond latency and high IOPS. The application runs on a single Azure VM and cannot tolerate data loss if the VM is moved to another host. Which storage option should the engineer select?

Accepted Answer

Azure Ultra Disk. Azure Ultra Disk is the only option that delivers sub-millisecond latency and high IOPS for persistent block storage on a single VM. It is specifically designed for the most demanding stateful workloads, making it the correct choice when latency and throughput requirements are extreme.

Answer

Azure Premium SSD

Answer

Azure Files premium file shares

Answer

Azure Standard SSD

Question 8

A cloud architect is designing a containerized microservices application on AWS. The services must automatically scale based on CPU utilization and recover from instance failures without manual intervention. The architect wants to minimize operational overhead while ensuring high availability across multiple Availability Zones. Which AWS service should be used to orchestrate the containers?

Accepted Answer

Amazon ECS with Fargate launch type. Amazon ECS with Fargate provides a serverless container orchestration solution that automatically scales tasks based on CPU utilization and spreads them across Availability Zones for high availability. It eliminates the need to manage underlying EC2 instances, reducing operational overhead while meeting the scaling and resilience requirements.

Answer

AWS Elastic Beanstalk with Docker platform

Answer

Amazon EC2 Auto Scaling group with Docker installed

Answer

Amazon EKS with managed node groups

Question 9

A cloud administrator needs to store application logs that will be accessed infrequently but must be retained for seven years for compliance. The logs are currently stored on-premises and total about 500 TB. The administrator wants a cost-effective, durable cloud storage solution with minimal management effort. Which AWS storage service should be used?

Accepted Answer

Amazon S3 Glacier Deep Archive. Amazon S3 Glacier Deep Archive is the most cost-effective storage class for long-term retention of infrequently accessed data. It provides high durability and requires minimal management. With retrieval times of up to 12 hours, it is well-suited for compliance logs that are rarely accessed. The other options are either too expensive, not designed for object storage, or not optimized for long-term archival.

Answer

Amazon EFS Infrequent Access

Answer

Amazon EBS Cold HDD (sc1)

Answer

Amazon S3 Standard

Question 10

A company is deploying a containerized application on AWS. The security team requires that the containers run in an environment where the underlying host is not shared with other AWS customers, and the company must have the ability to manage the host's kernel and patching. Which AWS service should be used?

Accepted Answer

Amazon ECS with EC2 launch type on Dedicated Hosts. Running ECS with the EC2 launch type on Dedicated Hosts provides the necessary isolation and control. Dedicated Hosts give you a physical server dedicated to your use, and you can manage the host OS, including kernel and patching. Fargate, EKS managed node groups, and App Runner do not offer this level of control and isolation.

Answer

AWS App Runner

Answer

Amazon ECS with Fargate launch type

Answer

Amazon EKS with managed node groups

Question 11

A cloud architect is designing a storage strategy for a big data analytics workload that processes large datasets. The workload requires high throughput and the ability to store data in its native format. Which two storage types are most suitable? (Choose two.)

Accepted Answer

Data lake storage. Object storage and data lake storage are both optimized for large-scale analytics. Object storage provides scalable, cost-effective storage for native formats, while data lake storage is specifically designed to handle raw data for analytics. Together, they meet the high throughput and native format requirements.

Answer

File storage

Answer

Archive storage

Answer

Block storage

Question 12

A cloud administrator is deploying a new web application on AWS. The application requires a managed, highly available relational database that automatically scales storage and provides Multi-AZ deployments for failover. The administrator wants to minimize operational overhead. Which AWS service should be used?

Accepted Answer

Amazon RDS for MySQL with Multi-AZ. Amazon RDS for MySQL with Multi-AZ is a managed relational database service that offers high availability through automatic failover to a standby instance in a different Availability Zone. It supports storage autoscaling and reduces administrative burden by handling routine tasks like backups and patching. The other options are either non-relational, analytical, or in-memory stores that do not meet the requirement for a managed relational database.

Answer

Amazon ElastiCache for Redis with cluster mode

Answer

Amazon Redshift with concurrency scaling

Answer

Amazon DynamoDB with global tables

Question 13

A cloud architect is designing a microservices architecture on Kubernetes. The architect needs to ensure that the application can automatically recover from pod failures and that traffic is only routed to healthy pods. Which two Kubernetes features should the architect implement? (Choose two.)

Accepted Answer

Readiness probes. Liveness probes and readiness probes are the correct choices. Liveness probes restart unhealthy containers, aiding in automatic recovery from pod failures. Readiness probes ensure that only healthy pods receive traffic by removing unhealthy pods from service endpoints. Together, they provide automatic recovery and traffic routing based on health.

Answer

Network policies

Answer

Pod Disruption Budgets

Answer

Horizontal Pod Autoscaler

Question 14

A company is migrating a legacy application to the cloud. The application requires a relational database and the company wants to minimize administrative overhead for patching, backups, and high availability. The database must support automatic failover to a standby instance in a different Availability Zone. Which AWS service should the company use?

Accepted Answer

Amazon RDS with a Multi-AZ deployment. Amazon RDS with a Multi-AZ deployment is the correct choice because it is a managed relational database service that automatically handles patching, backups, and failover to a standby in another Availability Zone. The other options either require self-management, are non-relational, or are optimized for analytics rather than transactional workloads.

Answer

Amazon DynamoDB with global tables

Answer

Amazon EC2 with a self-managed relational database

Answer

Amazon Redshift with a multi-node cluster

Question 15

A cloud architect is designing a disaster recovery strategy for a critical application hosted on AWS. The application uses an Amazon RDS for MySQL database and runs on EC2 instances behind an Application Load Balancer. The RTO is 15 minutes and the RPO is 5 minutes. The architect needs to implement a cost-effective solution that meets these objectives. Which TWO actions should the architect take? (Choose two.)

Accepted Answer

Configure an Application Load Balancer with health checks and enable cross-zone load balancing across multiple Availability Zones.. RDS Multi-AZ provides automatic failover with minimal data loss, meeting the RTO and RPO for the database. An Application Load Balancer with health checks and cross-zone load balancing ensures that traffic is routed to healthy EC2 instances across Availability Zones, maintaining application availability. Together, these actions provide a cost-effective disaster recovery solution within a region that meets the specified objectives.

Answer

Configure RDS automated backups with a retention period of 30 days and enable cross-region read replicas.

Answer

Create an Amazon Machine Image (AMI) of the EC2 instances and copy it to a different region. Use AWS CloudFormation to launch new instances from the AMI during a disaster.

Answer

Use AWS Storage Gateway to replicate on-premises data to AWS and configure a VPN connection for failover.