CV0-004 Deployment — 30 Questions

Question 1

A cloud architect is creating a Terraform configuration to deploy resources in AWS. The architect needs to store the state file in a remote backend that supports state locking and encryption at rest. Which backend should the architect configure?

Accepted Answer

S3 with DynamoDB for state locking. S3 with DynamoDB for locking is a recommended backend for Terraform state in AWS. Azure Blob Storage is for Azure, GCS for GCP, and local backend does not support remote state or locking.

Answer

Local file system with Terraform Cloud

Answer

Azure Blob Storage with a lease blob for locking

Answer

Google Cloud Storage with object versioning

Question 2

A DevOps team is implementing a CI/CD pipeline to deploy a microservices application on Kubernetes. The team wants to ensure that the deployment automatically rolls back if the new version fails health checks after the update. Which Kubernetes feature should be configured in the deployment manifest?

Accepted Answer

A readiness probe with a low failure threshold. A readiness probe determines if a pod is ready to serve traffic. If it fails, the rolling update pauses or rolls back depending on the deployment strategy's progressDeadlineSeconds and revisionHistoryLimit.

Answer

A startup probe with a long initial delay

Answer

A ConfigMap for health check endpoints

Answer

A liveness probe with a high failure threshold

Question 3

A company is migrating a 50 TB on-premises database to AWS RDS MySQL. The migration must have minimal downtime and support ongoing replication during the cutover. The database schema is standard MySQL. Which combination of services should the company use?

Accepted Answer

AWS Database Migration Service (DMS) with Change Data Capture (CDC) replication. AWS DMS with CDC enables minimal downtime migration by replicating ongoing changes. Schema Conversion Tool is unnecessary for MySQL to MySQL. Snowball is for large data sets offline, not for minimal downtime.

Answer

AWS DMS with schema conversion tool to convert to MySQL

Answer

AWS Snowball Edge to transfer database dump, then import to RDS

Answer

AWS DataSync to transfer database files to S3, then restore to RDS

Question 4

An organization uses CloudFormation to manage infrastructure across multiple AWS accounts. The team wants to deploy a common set of resources, such as VPCs and security groups, to all accounts in a consistent manner. Which CloudFormation feature should they use?

Accepted Answer

StackSets. StackSets allow deploying stacks across multiple accounts and regions. Change sets preview changes, drift detection checks for manual changes, and nested stacks organize templates within a single account.

Answer

Change sets

Answer

Drift detection

Answer

Nested stacks

Question 5

A cloud engineer is designing a deployment strategy for a web application that requires zero downtime. The engineer has set up two identical production environments, one active and one idle. After deploying the new version to the idle environment, the engineer switches the DNS record to point to the idle environment. This deployment method is known as:

Accepted Answer

Blue/green deployment. Blue/green deployment involves two environments (blue = current, green = new) and switching traffic via DNS or load balancer. Canary and rolling deploy gradually, while A/B testing is for feature comparison.

Answer

Rolling deployment

Answer

A/B testing deployment

Answer

Canary deployment

Question 6

A team is developing a serverless application on AWS Lambda. The application uses several third-party libraries that are large in size. To reduce deployment package size and enable reuse across functions, the team wants to include these libraries as a separate layer. However, the total unzipped size of all layers exceeds the Lambda limits. What should the team do to resolve this?

Accepted Answer

Use a container image for the Lambda function instead of layers. Lambda allows up to 5 layers with a total unzipped size of 250 MB. If exceeded, the team can split the libraries into multiple functions or use a custom runtime with a container image. Reducing concurrency does not affect package size.

Answer

Increase the Lambda function's reserved concurrency

Answer

Reduce the number of layers by combining libraries into fewer custom layers

Answer

Request a service limit increase from AWS for layer size

Question 7

An organization is using Azure DevOps to implement a CI/CD pipeline. In which stage of the pipeline would automated unit tests typically be executed?

Accepted Answer

Build. Unit tests are typically run in the build stage after compilation. Source is for code fetching, deploy for release, and verify for post-deployment checks.

Answer

Deploy

Answer

Verify

Answer

Source

Question 8

A company is migrating 100 TB of data from an on-premises NAS to Amazon S3. The network bandwidth is limited to 100 Mbps, and the transfer must complete within 30 days. Which service should the company use to meet the deadline?

Accepted Answer

AWS Snowball. At 100 Mbps, transferring 100 TB would take about 100 days over the network. AWS Snowball is a physical device for offline transfer, much faster. DataSync and S3 Transfer Acceleration still rely on network bandwidth.

Answer

AWS DataSync

Answer

Amazon S3 Transfer Acceleration

Answer

AWS Direct Connect

Question 9

A cloud administrator is writing an Ansible playbook to provision cloud resources. The administrator wants to ensure that the playbook can run without requiring any agent software on the target machines. Which Ansible feature enables this agentless operation?

Accepted Answer

SSH-based connection to managed nodes. Ansible connects via SSH (or WinRM) by default, no agent needed. Pull mode requires an agent, modules are code units, and inventory lists hosts.

Answer

Ansible inventory files that list hosts

Answer

Ansible modules that run on the control node

Answer

Pull mode from a central repository

Question 10

A DevOps team is deploying a containerized application to Google Kubernetes Engine (GKE). The team wants to automate the deployment of the application along with its dependencies, such as ConfigMaps and Services, using a single package. Which tool should the team use?

Accepted Answer

Helm charts. Helm charts package Kubernetes resources into a single deployable unit. Docker Compose is for local development, not production. kubectl apply can apply manifests but not as a package manager. Kustomize overlays but not package management.

Answer

kubectl apply with multiple manifest files

Answer

Kustomize overlays

Answer

Docker Compose

Question 11

A company is using Azure to host a web application. The application is deployed using ARM templates. The operations team has noticed that some resources have been manually modified via the Azure portal, causing configuration drift. The team wants to detect these changes and optionally revert them to the template-defined state. Which Azure feature should they use?

Accepted Answer

Azure Resource Graph with drift detection. Azure Resource Graph provides a query interface to explore Azure resources across subscriptions. When combined with drift detection, it can compare the current configuration of resources against the desired state defined in an ARM template. This allows the team to identify manual modifications and optionally trigger remediation to reapply the template. While Azure Policy enforces compliance and Blueprints orchestrate deployments, Resource Graph specifically enables drift detection and remediation for ARM template deployments.

Answer

Azure Policy

Answer

Azure Blueprints

Answer

Resource Manager template what-if operation

Question 12

A cloud engineer is deploying a Lambda function that processes events from an SQS queue. The function must be able to handle a burst of up to 1000 concurrent invocations. Which configuration should the engineer set to ensure the function can scale to meet this demand?

Accepted Answer

Set the function's reserved concurrency to 1000. Lambda scales by increasing concurrency. The reserved concurrency sets a limit; burst concurrency is a regional limit. To handle 1000 concurrent, set reserved concurrency to at least 1000. Unreserved account concurrency is shared.

Answer

Enable provisioned concurrency for the function

Answer

Configure SQS to batch messages in groups of 100

Answer

Set the function's unreserved account concurrency to 1000

Question 13

A cloud architect is designing a CI/CD pipeline for a critical application that requires zero-downtime deployments. The architect wants to gradually shift traffic to the new version while monitoring for errors and automatically rolling back if issues are detected. Which TWO deployment strategies should the architect consider? (Select TWO.)

Accepted Answer

Blue/green deployment. Canary and blue/green both support gradual traffic shift and rollback. Rolling updates are gradual but may not have automatic rollback based on monitoring. A/B testing is not a deployment strategy. Immutable deployments replace instances but not gradual.

Answer

Rolling deployment

Answer

Immutable deployment

Answer

A/B testing deployment

Question 14

A company is adopting Infrastructure as Code (IaC) to manage its cloud resources. Which THREE statements are true about IaC? (Select THREE.)

Accepted Answer

IaC allows for automated provisioning of infrastructure. IaC enables automation, idempotency, and version control. Manual changes are not required; IaC can be used for both mutable and immutable infrastructure.

Answer

IaC eliminates the need for manual configuration changes

Answer

IaC is only applicable for immutable infrastructure

Question 15

A data scientist is migrating a 10 TB on-premises PostgreSQL database to Amazon RDS for PostgreSQL. The migration must have minimal downtime. Which TWO AWS services should the data scientist use together to achieve this? (Select TWO.)

Accepted Answer

AWS Direct Connect. AWS DMS supports ongoing replication via CDC, enabling minimal downtime. Schema Conversion Tool (SCT) is needed if converting to a different engine, but for PostgreSQL to RDS PostgreSQL, it's not required. However, SCT can still be used to assess and optimize schema. AWS DataSync is for file transfers, not databases. Snowball is for offline transfer, not minimal downtime. Direct Connect improves network but not replication.

Answer

AWS Snowball

Answer

AWS Schema Conversion Tool (SCT)

Answer

AWS DataSync

Question 16

A cloud administrator is automating the deployment of a web application on AWS. The administrator wants to define the infrastructure as code using a declarative language that supports drift detection. Which tool should the administrator use?

Accepted Answer

CloudFormation. CloudFormation is a declarative AWS service for infrastructure as code that supports drift detection, which identifies changes made to resources outside of template management.

Answer

AWS CodeDeploy

Answer

Ansible

Answer

Terraform

Question 17

A DevOps team wants to deploy a containerized application to a Kubernetes cluster with zero downtime. The team needs to gradually shift traffic from the old version to the new version, monitoring error rates and automatically rolling back if errors exceed a threshold. Which deployment strategy should the team implement?

Accepted Answer

Canary deployment. A canary deployment releases the new version to a small subset of users, monitors performance, and automatically rolls back if issues are detected, meeting the zero-downtime and auto-rollback requirements.

Answer

Blue/green deployment

Answer

Rolling deployment

Answer

Recreate deployment

Question 18

A company must migrate 50 TB of data from an on-premises NFS server to Amazon S3 within one week. The network bandwidth averages 50 Mbps. The administrator is evaluating AWS DataSync and AWS Snowball. Which service should the administrator choose?

Accepted Answer

AWS Snowball. At 50 Mbps, transferring 50 TB would take about 95 days, exceeding the one-week deadline. Snowball provides offline physical transfer, making it feasible within a week.

Answer

AWS DataSync

Answer

S3 Transfer Acceleration

Answer

AWS Database Migration Service

Question 19

An organization uses Terraform to manage multi-cloud infrastructure across AWS and Azure. The state file must be stored securely with locking to prevent concurrent modifications. Which backend configuration should the team use?

Accepted Answer

AWS S3 bucket with DynamoDB table for locking. Terraform supports remote backends like AWS S3 with DynamoDB for state locking, which provides both state storage and locking. Azure Blob Storage can also be used with blob lease locking.

Answer

GitHub repository with Terraform Cloud agent

Answer

Azure DevOps pipeline variable group

Answer

Local file system with .terraform.lock.hcl

Question 20

A cloud engineer needs to deploy a Lambda function that processes objects uploaded to an S3 bucket. The function code is stored in a .zip file. Which event trigger should the engineer configure to invoke the function automatically?

Accepted Answer

S3 event notification. S3 can send event notifications to Lambda when objects are created, making it the appropriate trigger for this use case.

Answer

API Gateway

Answer

SQS

Answer

EventBridge