CV0-004 Deployment Practice Test 1 — 15 Questions

Question 1

A company is using Azure to host a web application. The application is deployed using ARM templates. The operations team has noticed that some resources have been manually modified via the Azure portal, causing configuration drift. The team wants to detect these changes and optionally revert them to the template-defined state. Which Azure feature should they use?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Resource Manager template what-if operation. The 'what-if' operation in Azure Resource Manager templates allows you to preview the changes that will be applied to resources. By running a what-if operation against the current state of resources, the operations team can detect configuration drift by comparing the current state with the desired state defined in the ARM template. This feature also supports optional remediation by applying the template again. In contrast, Azure Resource Graph is a query tool for exploring resources but does not provide native drift detection or remediation.

Answer

Azure Policy

Answer

Azure Blueprints

Answer

Azure Resource Graph with drift detection

Question 2

A company is adopting a blue/green deployment strategy for their web application running on AWS. They have two identical environments (blue and green) behind an Application Load Balancer. What must they change to switch traffic from blue to green?

Accepted Answer

Change the DNS record to point to the green environment's IP. In a blue/green deployment, traffic is directed to the active environment. Since both environments are behind an Application Load Balancer, the simplest way to switch traffic from blue to green is to update the DNS record to point to the green environment's IP address. This approach ensures a seamless cutover, as the DNS record change propagates and new users are directed to the green environment. Other options like restarting the web server, updating the security group, or modifying the Auto Scaling group do not directly switch traffic between environments. Therefore, option C is correct.

Answer

Restart the web server on the green environment

Answer

Update the security group for the green environment

Answer

Modify the Auto Scaling group to replace blue instances

Question 3

A cloud engineer is using Ansible to automate cloud resource provisioning. Which statement about Ansible is true?

Accepted Answer

Ansible uses YAML for playbook definitions.. Ansible uses YAML for playbook definitions. Playbooks are YAML files that define automation tasks, making them human-readable and easy to write. Ansible is agentless (uses SSH/WinRM), not JSON, and can manage both cloud and on-premises servers.

Answer

Ansible uses JSON for configuration management.

Answer

Ansible requires an agent to be installed on each managed node.

Answer

Ansible is a cloud-only tool that cannot manage on-premises servers.

Question 4

An engineer is deploying a Kubernetes application on EKS and needs to ensure that pods are only considered healthy after a startup delay, and that traffic stops to unhealthy pods. Which two probe types should be configured in the deployment manifest?

Accepted Answer

Startup probe and readiness probe. Startup probes delay health checks until the pod has had time to initialize, which satisfies the startup delay requirement. Readiness probes control when the pod receives traffic, stopping traffic to unhealthy pods. Together, they meet both needs. Liveness probes restart unhealthy pods but do not handle startup delay or traffic routing.

Answer

Liveness probe and startup probe

Answer

Only readiness probe

Answer

Readiness probe and liveness probe

Question 5

An organization uses a CI/CD pipeline with Jenkins. The pipeline includes stages: source, build, test, deploy, and verify. During the deploy stage, the team wants to automatically roll back if the verify stage fails. Which Jenkins feature supports this?

Accepted Answer

Jenkinsfile declarative pipeline with 'post' section. In Jenkins, the declarative pipeline's 'post' section allows defining actions that run after the pipeline's stages complete, with conditions such as 'failure' to trigger a rollback. This feature directly supports automatic rollback if the verify stage fails, as the rollback can be specified in the post block. Option C, 'Post-build actions with rollback script,' refers to a legacy feature that is not part of the pipeline syntax and is less suitable for stage-based rollback. Therefore, D is correct.

Answer

Blue Ocean plugin

Answer

Multibranch Pipeline

Answer

Post-build actions with rollback script

Question 6

A cloud administrator needs to migrate 100 TB of data from an on-premises NAS to Google Cloud Storage. The on-premises network bandwidth is limited to 100 Mbps. Which service should be used to accelerate the transfer?

Accepted Answer

Snowball. For accelerating large data transfers over a limited bandwidth network, Google Cloud recommends using an offline transfer appliance such as Transfer Appliance. Among the given options, the only offline transfer device is AWS Snowball (option D). While Snowball is an AWS service, it can be used to transfer data to Google Cloud by loading data onto the device and shipping it to a Google Cloud partner facility. Storage Transfer Service (option B) is an online transfer tool that does not bypass network constraints, making it unsuitable for acceleration in this scenario.

Answer

Azure Data Box

Answer

Storage Transfer Service

Answer

AWS DataSync

Question 7

A DevOps team uses Terraform to manage cloud infrastructure. They want to store the state file in a remote backend to enable team collaboration. Which backend configuration stores Terraform state in an S3 bucket?

Accepted Answer

backend 's3'. Terraform's 's3' backend is specifically designed to store state files in an AWS S3 bucket, enabling team collaboration through remote state locking and versioning. This backend uses the AWS SDK to interact with S3, supporting features like DynamoDB-based state locking and encryption with KMS.

Answer

backend 'consul'

Answer

backend 'azurerm'

Answer

backend 'gcs'

Question 8

A cloud architect is creating a Terraform configuration to deploy resources in AWS. The architect needs to store the state file in a remote backend that supports state locking and encryption at rest. Which backend should the architect configure?

Accepted Answer

S3 with DynamoDB for state locking. S3 with DynamoDB for locking is a recommended backend for Terraform state in AWS. Azure Blob Storage is for Azure, GCS for GCP, and local backend does not support remote state or locking.

Answer

Local file system with Terraform Cloud

Answer

Azure Blob Storage with a lease blob for locking

Answer

Google Cloud Storage with object versioning

Question 9

A DevOps team is implementing a CI/CD pipeline to deploy a microservices application on Kubernetes. The team wants to ensure that the deployment automatically rolls back if the new version fails health checks after the update. Which Kubernetes feature should be configured in the deployment manifest?

Accepted Answer

A readiness probe with a low failure threshold. A readiness probe determines if a pod is ready to serve traffic. If it fails, the rolling update pauses or rolls back depending on the deployment strategy's progressDeadlineSeconds and revisionHistoryLimit.

Answer

A startup probe with a long initial delay

Answer

A ConfigMap for health check endpoints

Answer

A liveness probe with a high failure threshold

Question 10

A company is migrating a 50 TB on-premises database to AWS RDS MySQL. The migration must have minimal downtime and support ongoing replication during the cutover. The database schema is standard MySQL. Which combination of services should the company use?

Accepted Answer

AWS Database Migration Service (DMS) with Change Data Capture (CDC) replication. AWS DMS with CDC enables minimal downtime migration by replicating ongoing changes. Schema Conversion Tool is unnecessary for MySQL to MySQL. Snowball is for large data sets offline, not for minimal downtime.

Answer

AWS DMS with schema conversion tool to convert to MySQL

Answer

AWS Snowball Edge to transfer database dump, then import to RDS

Answer

AWS DataSync to transfer database files to S3, then restore to RDS

Question 11

An organization uses CloudFormation to manage infrastructure across multiple AWS accounts. The team wants to deploy a common set of resources, such as VPCs and security groups, to all accounts in a consistent manner. Which CloudFormation feature should they use?

Accepted Answer

StackSets. StackSets allow deploying stacks across multiple accounts and regions. Change sets preview changes, drift detection checks for manual changes, and nested stacks organize templates within a single account.

Answer

Change sets

Answer

Drift detection

Answer

Nested stacks

Question 12

A cloud engineer is designing a deployment strategy for a web application that requires zero downtime. The engineer has set up two identical production environments, one active and one idle. After deploying the new version to the idle environment, the engineer switches the DNS record to point to the idle environment. This deployment method is known as:

Accepted Answer

Blue/green deployment. Blue/green deployment involves two environments (blue = current, green = new) and switching traffic via DNS or load balancer. Canary and rolling deploy gradually, while A/B testing is for feature comparison.

Answer

Rolling deployment

Answer

A/B testing deployment

Answer

Canary deployment

Question 13

A team is developing a serverless application on AWS Lambda. The application uses several third-party libraries that are large in size. To reduce deployment package size and enable reuse across functions, the team wants to include these libraries as a separate layer. However, the total unzipped size of all layers exceeds the Lambda limits. What should the team do to resolve this?

Accepted Answer

Use a container image for the Lambda function instead of layers. Lambda allows up to 5 layers with a total unzipped size of 250 MB. If exceeded, the team can split the libraries into multiple functions or use a custom runtime with a container image. Reducing concurrency does not affect package size.

Answer

Increase the Lambda function's reserved concurrency

Answer

Reduce the number of layers by combining libraries into fewer custom layers

Answer

Request a service limit increase from AWS for layer size

Question 14

An organization is using Azure DevOps to implement a CI/CD pipeline. In which stage of the pipeline would automated unit tests typically be executed?

Accepted Answer

Build. Unit tests are typically run in the build stage after compilation. Source is for code fetching, deploy for release, and verify for post-deployment checks.

Answer

Deploy

Answer

Verify

Answer

Source

Question 15

A company is migrating 100 TB of data from an on-premises NAS to Amazon S3. The network bandwidth is limited to 100 Mbps, and the transfer must complete within 30 days. Which service should the company use to meet the deadline?

Accepted Answer

AWS Snowball. At 100 Mbps, transferring 100 TB would take about 100 days over the network. AWS Snowball is a physical device for offline transfer, much faster. DataSync and S3 Transfer Acceleration still rely on network bandwidth.

Answer

AWS DataSync

Answer

Amazon S3 Transfer Acceleration

Answer

AWS Direct Connect