CV0-004 Deployment — 20 Questions

Question 1

A company is using Azure to host a web application. The application is deployed using ARM templates. The operations team has noticed that some resources have been manually modified via the Azure portal, causing configuration drift. The team wants to detect these changes and optionally revert them to the template-defined state. Which Azure feature should they use?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Resource Manager template what-if operation. The 'what-if' operation in Azure Resource Manager templates allows you to preview the changes that will be applied to resources. By running a what-if operation against the current state of resources, the operations team can detect configuration drift by comparing the current state with the desired state defined in the ARM template. This feature also supports optional remediation by applying the template again. In contrast, Azure Resource Graph is a query tool for exploring resources but does not provide native drift detection or remediation.

Answer

Azure Policy

Answer

Azure Blueprints

Answer

Azure Resource Graph with drift detection

Question 2

A company is adopting a blue/green deployment strategy for their web application running on AWS. They have two identical environments (blue and green) behind an Application Load Balancer. What must they change to switch traffic from blue to green?

Accepted Answer

Change the DNS record to point to the green environment's IP. In a blue/green deployment, traffic is directed to the active environment. Since both environments are behind an Application Load Balancer, the simplest way to switch traffic from blue to green is to update the DNS record to point to the green environment's IP address. This approach ensures a seamless cutover, as the DNS record change propagates and new users are directed to the green environment. Other options like restarting the web server, updating the security group, or modifying the Auto Scaling group do not directly switch traffic between environments. Therefore, option C is correct.

Answer

Restart the web server on the green environment

Answer

Update the security group for the green environment

Answer

Modify the Auto Scaling group to replace blue instances

Question 3

A cloud engineer is using Ansible to automate cloud resource provisioning. Which statement about Ansible is true?

Accepted Answer

Ansible uses YAML for playbook definitions.. Ansible uses YAML for playbook definitions. Playbooks are YAML files that define automation tasks, making them human-readable and easy to write. Ansible is agentless (uses SSH/WinRM), not JSON, and can manage both cloud and on-premises servers.

Answer

Ansible uses JSON for configuration management.

Answer

Ansible requires an agent to be installed on each managed node.

Answer

Ansible is a cloud-only tool that cannot manage on-premises servers.

Question 4

An engineer is deploying a Kubernetes application on EKS and needs to ensure that pods are only considered healthy after a startup delay, and that traffic stops to unhealthy pods. Which two probe types should be configured in the deployment manifest?

Accepted Answer

Startup probe and readiness probe. Startup probes delay health checks until the pod has had time to initialize, which satisfies the startup delay requirement. Readiness probes control when the pod receives traffic, stopping traffic to unhealthy pods. Together, they meet both needs. Liveness probes restart unhealthy pods but do not handle startup delay or traffic routing.

Answer

Liveness probe and startup probe

Answer

Only readiness probe

Answer

Readiness probe and liveness probe

Question 5

An organization uses a CI/CD pipeline with Jenkins. The pipeline includes stages: source, build, test, deploy, and verify. During the deploy stage, the team wants to automatically roll back if the verify stage fails. Which Jenkins feature supports this?

Accepted Answer

Jenkinsfile declarative pipeline with 'post' section. In Jenkins, the declarative pipeline's 'post' section allows defining actions that run after the pipeline's stages complete, with conditions such as 'failure' to trigger a rollback. This feature directly supports automatic rollback if the verify stage fails, as the rollback can be specified in the post block. Option C, 'Post-build actions with rollback script,' refers to a legacy feature that is not part of the pipeline syntax and is less suitable for stage-based rollback. Therefore, D is correct.

Answer

Blue Ocean plugin

Answer

Multibranch Pipeline

Answer

Post-build actions with rollback script

Question 6

A cloud administrator needs to migrate 100 TB of data from an on-premises NAS to Google Cloud Storage. The on-premises network bandwidth is limited to 100 Mbps. Which service should be used to accelerate the transfer?

Accepted Answer

Snowball. For accelerating large data transfers over a limited bandwidth network, Google Cloud recommends using an offline transfer appliance such as Transfer Appliance. Among the given options, the only offline transfer device is AWS Snowball (option D). While Snowball is an AWS service, it can be used to transfer data to Google Cloud by loading data onto the device and shipping it to a Google Cloud partner facility. Storage Transfer Service (option B) is an online transfer tool that does not bypass network constraints, making it unsuitable for acceleration in this scenario.

Answer

Azure Data Box

Answer

Storage Transfer Service

Answer

AWS DataSync

Question 7

A DevOps team uses Terraform to manage cloud infrastructure. They want to store the state file in a remote backend to enable team collaboration. Which backend configuration stores Terraform state in an S3 bucket?

Accepted Answer

backend 's3'. Terraform's 's3' backend is specifically designed to store state files in an AWS S3 bucket, enabling team collaboration through remote state locking and versioning. This backend uses the AWS SDK to interact with S3, supporting features like DynamoDB-based state locking and encryption with KMS.

Answer

backend 'consul'

Answer

backend 'azurerm'

Answer

backend 'gcs'

Question 8

A cloud architect is creating a Terraform configuration to deploy resources in AWS. The architect needs to store the state file in a remote backend that supports state locking and encryption at rest. Which backend should the architect configure?

Accepted Answer

S3 with DynamoDB for state locking. S3 with DynamoDB for locking is a recommended backend for Terraform state in AWS. Azure Blob Storage is for Azure, GCS for GCP, and local backend does not support remote state or locking.

Answer

Local file system with Terraform Cloud

Answer

Azure Blob Storage with a lease blob for locking

Answer

Google Cloud Storage with object versioning

Question 9

A DevOps team is implementing a CI/CD pipeline to deploy a microservices application on Kubernetes. The team wants to ensure that the deployment automatically rolls back if the new version fails health checks after the update. Which Kubernetes feature should be configured in the deployment manifest?

Accepted Answer

A readiness probe with a low failure threshold. A readiness probe determines if a pod is ready to serve traffic. If it fails, the rolling update pauses or rolls back depending on the deployment strategy's progressDeadlineSeconds and revisionHistoryLimit.

Answer

A startup probe with a long initial delay

Answer

A ConfigMap for health check endpoints

Answer

A liveness probe with a high failure threshold

Question 10

A company is migrating a 50 TB on-premises database to AWS RDS MySQL. The migration must have minimal downtime and support ongoing replication during the cutover. The database schema is standard MySQL. Which combination of services should the company use?

Accepted Answer

AWS Database Migration Service (DMS) with Change Data Capture (CDC) replication. AWS DMS with CDC enables minimal downtime migration by replicating ongoing changes. Schema Conversion Tool is unnecessary for MySQL to MySQL. Snowball is for large data sets offline, not for minimal downtime.

Answer

AWS DMS with schema conversion tool to convert to MySQL

Answer

AWS Snowball Edge to transfer database dump, then import to RDS

Answer

AWS DataSync to transfer database files to S3, then restore to RDS

Question 11

An organization uses CloudFormation to manage infrastructure across multiple AWS accounts. The team wants to deploy a common set of resources, such as VPCs and security groups, to all accounts in a consistent manner. Which CloudFormation feature should they use?

Accepted Answer

StackSets. StackSets allow deploying stacks across multiple accounts and regions. Change sets preview changes, drift detection checks for manual changes, and nested stacks organize templates within a single account.

Answer

Change sets

Answer

Drift detection

Answer

Nested stacks

Question 12

A cloud engineer is designing a deployment strategy for a web application that requires zero downtime. The engineer has set up two identical production environments, one active and one idle. After deploying the new version to the idle environment, the engineer switches the DNS record to point to the idle environment. This deployment method is known as:

Accepted Answer

Blue/green deployment. Blue/green deployment involves two environments (blue = current, green = new) and switching traffic via DNS or load balancer. Canary and rolling deploy gradually, while A/B testing is for feature comparison.

Answer

Rolling deployment

Answer

A/B testing deployment

Answer

Canary deployment

Question 13

A team is developing a serverless application on AWS Lambda. The application uses several third-party libraries that are large in size. To reduce deployment package size and enable reuse across functions, the team wants to include these libraries as a separate layer. However, the total unzipped size of all layers exceeds the Lambda limits. What should the team do to resolve this?

Accepted Answer

Use a container image for the Lambda function instead of layers. Lambda allows up to 5 layers with a total unzipped size of 250 MB. If exceeded, the team can split the libraries into multiple functions or use a custom runtime with a container image. Reducing concurrency does not affect package size.

Answer

Increase the Lambda function's reserved concurrency

Answer

Reduce the number of layers by combining libraries into fewer custom layers

Answer

Request a service limit increase from AWS for layer size

Question 14

An organization is using Azure DevOps to implement a CI/CD pipeline. In which stage of the pipeline would automated unit tests typically be executed?

Accepted Answer

Build. Unit tests are typically run in the build stage after compilation. Source is for code fetching, deploy for release, and verify for post-deployment checks.

Answer

Deploy

Answer

Verify

Answer

Source

Question 15

A company is migrating 100 TB of data from an on-premises NAS to Amazon S3. The network bandwidth is limited to 100 Mbps, and the transfer must complete within 30 days. Which service should the company use to meet the deadline?

Accepted Answer

AWS Snowball. At 100 Mbps, transferring 100 TB would take about 100 days over the network. AWS Snowball is a physical device for offline transfer, much faster. DataSync and S3 Transfer Acceleration still rely on network bandwidth.

Answer

AWS DataSync

Answer

Amazon S3 Transfer Acceleration

Answer

AWS Direct Connect

Question 16

A cloud administrator is writing an Ansible playbook to provision cloud resources. The administrator wants to ensure that the playbook can run without requiring any agent software on the target machines. Which Ansible feature enables this agentless operation?

Accepted Answer

SSH-based connection to managed nodes. Ansible connects via SSH (or WinRM) by default, no agent needed. Pull mode requires an agent, modules are code units, and inventory lists hosts.

Answer

Ansible inventory files that list hosts

Answer

Ansible modules that run on the control node

Answer

Pull mode from a central repository

Question 17

A DevOps team is deploying a containerized application to Google Kubernetes Engine (GKE). The team wants to automate the deployment of the application along with its dependencies, such as ConfigMaps and Services, using a single package. Which tool should the team use?

Accepted Answer

Helm charts. Helm charts package Kubernetes resources into a single deployable unit. Docker Compose is for local development, not production. kubectl apply can apply manifests but not as a package manager. Kustomize overlays but not package management.

Answer

kubectl apply with multiple manifest files

Answer

Kustomize overlays

Answer

Docker Compose

Question 18

A cloud engineer is deploying a Lambda function that processes events from an SQS queue. The function must be able to handle a burst of up to 1000 concurrent invocations. Which configuration should the engineer set to ensure the function can scale to meet this demand?

Accepted Answer

Set the function's reserved concurrency to 1000. Lambda scales by increasing concurrency. The reserved concurrency sets a limit; burst concurrency is a regional limit. To handle 1000 concurrent, set reserved concurrency to at least 1000. Unreserved account concurrency is shared.

Answer

Enable provisioned concurrency for the function

Answer

Configure SQS to batch messages in groups of 100

Answer

Set the function's unreserved account concurrency to 1000

Question 19

A cloud architect is designing a CI/CD pipeline for a critical application that requires zero-downtime deployments. The architect wants to gradually shift traffic to the new version while monitoring for errors and automatically rolling back if issues are detected. Which TWO deployment strategies should the architect consider? (Select TWO.)

Accepted Answer

Blue/green deployment. Canary and blue/green both support gradual traffic shift and rollback. Rolling updates are gradual but may not have automatic rollback based on monitoring. A/B testing is not a deployment strategy. Immutable deployments replace instances but not gradual.

Answer

Rolling deployment

Answer

Immutable deployment

Answer

A/B testing deployment

Question 20

A company is adopting Infrastructure as Code (IaC) to manage its cloud resources. Which THREE statements are true about IaC? (Select THREE.)

Accepted Answer

IaC allows for automated provisioning of infrastructure. IaC enables automation, idempotency, and version control. Manual changes are not required; IaC can be used for both mutable and immutable infrastructure.

Answer

IaC eliminates the need for manual configuration changes

Answer

IaC is only applicable for immutable infrastructure