CV0-004 Cloud Architecture and Design Practice Test 6 — 15 Questions

Question 1

A company wants to migrate its on-premises workloads to the cloud but must keep sensitive data on-premises due to regulatory requirements. Which cloud deployment model should the company use?

Accepted Answer

Hybrid cloud. A hybrid cloud connects on-premises infrastructure with public cloud resources, allowing sensitive data to remain on-premises while leveraging the cloud for other workloads.

Answer

Multi-cloud

Answer

Public cloud

Answer

Private cloud

Question 2

A cloud architect is designing a highly available web application on AWS. The application must continue serving traffic even if an entire AWS Availability Zone fails. Which architecture should the architect implement?

Accepted Answer

Active-active across two Availability Zones. Active-active architecture across multiple Availability Zones ensures that if one zone fails, traffic is routed to the remaining healthy zones, providing high availability.

Answer

Active-passive in a single Availability Zone

Answer

Vertical scaling on a single instance

Answer

Active-passive across two regions

Question 3

A company is migrating a legacy monolithic application to the cloud. The application currently runs on a single server with 16 vCPUs and 64 GB RAM. The cloud architect recommends redesigning the application to be stateless and horizontally scalable. What is the primary benefit of this approach?

Accepted Answer

Improved fault tolerance and elasticity. Horizontal scaling allows adding more instances to handle increased load, improving availability and elasticity compared to vertical scaling of a monolithic server.

Answer

Lower storage costs

Answer

Simpler licensing costs

Answer

Reduced network latency

Question 4

A cloud engineer is designing a VPC in AWS for a three-tier web application. The web servers must be accessible from the internet, the application servers should only be accessible from the web servers, and the database servers should only be accessible from the application servers. What is the most secure VPC design?

Accepted Answer

Public subnet for web servers, private subnet for application servers, and a separate private subnet for database servers, with proper security group rules. A three-tier VPC design uses public subnets for web servers (with an internet gateway) and private subnets for application and database servers, with security group rules restricting traffic between tiers.

Answer

Public subnet for web and application servers, private subnet for database servers

Answer

Single public subnet with all servers placed in it, using security groups to restrict traffic

Answer

Use a single private subnet and a NAT gateway for internet access

Question 5

A company is using AWS and wants to minimize costs for a batch processing workload that runs for 2 hours every night. The workload can tolerate interruptions. Which pricing model should the company choose?

Accepted Answer

Spot instances. Spot instances offer significant discounts and are suitable for fault-tolerant, interruptible workloads. The workload's short duration and tolerance for interruption make spot instances ideal for cost savings.

Answer

Dedicated hosts

Answer

Reserved instances

Answer

On-demand instances

Question 6

Which cloud service model provides the customer with the ability to deploy and manage custom applications without managing the underlying operating system or runtime environment?

Accepted Answer

PaaS. PaaS provides a managed platform where customers deploy their code while the provider manages the OS, runtime, and infrastructure.

Answer

SaaS

Answer

IaaS

Answer

FaaS

Question 7

An organization is designing a disaster recovery plan with a Recovery Time Objective (RTO) of 4 hours and a Recovery Point Objective (RPO) of 1 hour. Which disaster recovery strategy best meets these requirements while minimizing cost?

Accepted Answer

Warm standby. Warm standby maintains a partially running environment that can be fully activated quickly, meeting an RTO of 4 hours and RPO of 1 hour at a lower cost than hot standby.

Answer

Cold standby

Answer

Backup and restore

Answer

Hot standby

Question 8

A company uses AWS and Azure for different workloads. To improve latency for global users, the company wants to direct traffic to the cloud provider and region closest to the user. Which DNS routing policy should the company implement?

Accepted Answer

Geolocation routing policy. Geolocation routing policy routes traffic based on the user's geographic location, allowing the company to direct users to the nearest provider and region.

Answer

Failover routing policy

Answer

Weighted routing policy

Answer

Latency routing policy

Question 9

A cloud architect is selecting a storage solution for a database that requires low-latency reads and writes. The database will run on a single VM and must support consistent performance. Which storage type is most appropriate?

Accepted Answer

Block storage. Block storage (e.g., EBS, Azure Disk) provides low-latency, consistent performance suitable for databases running on a single VM.

Answer

Archive storage

Answer

Object storage

Answer

File storage

Question 10

A company is deploying a stateless application across multiple Availability Zones in AWS. The application must automatically scale based on CPU utilization. Which combination of services should the architect use to achieve this?

Accepted Answer

Auto Scaling group and Application Load Balancer. Auto Scaling groups manage instance scaling across AZs, and Application Load Balancer distributes traffic; this combination provides elasticity and high availability.

Answer

Auto Scaling group and CloudFront

Answer

Auto Scaling group and Network Load Balancer

Answer

Auto Scaling group and Classic Load Balancer

Question 11

Which cloud deployment model involves using services from multiple public cloud providers to avoid vendor lock-in and leverage best-of-breed solutions?

Accepted Answer

Multi-cloud. Multi-cloud is the use of multiple public cloud providers to gain flexibility and avoid dependency on a single vendor.

Answer

Public cloud

Answer

Hybrid cloud

Answer

Private cloud

Question 12

A company uses Azure and wants to connect its on-premises data center to Azure with a dedicated, private, and high-bandwidth connection. Which service should the company use?

Accepted Answer

Azure ExpressRoute. Azure ExpressRoute provides a dedicated private connection from on-premises to Azure, offering higher bandwidth and reliability than VPN.

Answer

Site-to-Site VPN

Answer

Azure Front Door

Answer

Azure VPN Gateway

Question 13

A cloud architect is designing a highly available application on AWS. The application must be fault-tolerant and able to withstand the failure of an entire Availability Zone. Which TWO actions should the architect take? (Select TWO.)

Accepted Answer

Deploy EC2 instances across two or more Availability Zones. Deploying across multiple Availability Zones and using an auto scaling group across those zones ensures that if one zone fails, the application continues in the other zones.

Answer

Store application state on the local instance store

Answer

Deploy EC2 instances in a single Availability Zone

Answer

Use a single large EC2 instance

Question 14

A company is deploying a web application on Google Cloud that requires low-latency access to static content (images, CSS) for global users. The application also needs to handle SSL termination to reduce load on backend instances. Which TWO services should the architect use? (Select TWO.)

Accepted Answer

Cloud CDN. Cloud CDN (Option C) is correct because it uses Google's global edge cache to deliver static content (images, CSS) with low latency by caching content at points of presence (PoPs) close to users. Cloud Load Balancing (Option D) is correct because it provides global anycast-based load balancing with integrated SSL termination, offloading the SSL/TLS handshake from backend instances and reducing their CPU load.

Answer

Compute Engine with enhanced network

Answer

Cloud Functions

Answer

Cloud Storage

Question 15

A cloud engineer is optimizing costs for a data analytics workload that runs periodically. The workload processes large datasets stored in Amazon S3 and runs on EC2 instances. Which THREE strategies should the engineer consider to reduce costs? (Select THREE.)

Accepted Answer

Implement S3 Lifecycle policies to transition older data to S3 Glacier. Using spot instances reduces compute cost for interruptible workloads. S3 lifecycle policies move old data to cheaper storage classes. Selecting the correct instance type (rightsizing) avoids overprovisioning.

Answer

Provision large instances to reduce processing time

Answer

Use on-demand instances exclusively