CV0-004 Deployment Practice Test 2 — 15 Questions

Question 1

A cloud administrator is writing an Ansible playbook to provision cloud resources. The administrator wants to ensure that the playbook can run without requiring any agent software on the target machines. Which Ansible feature enables this agentless operation?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

SSH-based connection to managed nodes. Ansible connects via SSH (or WinRM) by default, no agent needed. Pull mode requires an agent, modules are code units, and inventory lists hosts.

Answer

Ansible inventory files that list hosts

Answer

Ansible modules that run on the control node

Answer

Pull mode from a central repository

Question 2

A DevOps team is deploying a containerized application to Google Kubernetes Engine (GKE). The team wants to automate the deployment of the application along with its dependencies, such as ConfigMaps and Services, using a single package. Which tool should the team use?

Accepted Answer

Helm charts. Helm charts package Kubernetes resources into a single deployable unit. Docker Compose is for local development, not production. kubectl apply can apply manifests but not as a package manager. Kustomize overlays but not package management.

Answer

kubectl apply with multiple manifest files

Answer

Kustomize overlays

Answer

Docker Compose

Question 3

A cloud engineer is deploying a Lambda function that processes events from an SQS queue. The function must be able to handle a burst of up to 1000 concurrent invocations. Which configuration should the engineer set to ensure the function can scale to meet this demand?

Accepted Answer

Set the function's reserved concurrency to 1000. Lambda scales by increasing concurrency. The reserved concurrency sets a limit; burst concurrency is a regional limit. To handle 1000 concurrent, set reserved concurrency to at least 1000. Unreserved account concurrency is shared.

Answer

Enable provisioned concurrency for the function

Answer

Configure SQS to batch messages in groups of 100

Answer

Set the function's unreserved account concurrency to 1000

Question 4

A cloud architect is designing a CI/CD pipeline for a critical application that requires zero-downtime deployments. The architect wants to gradually shift traffic to the new version while monitoring for errors and automatically rolling back if issues are detected. Which TWO deployment strategies should the architect consider? (Select TWO.)

Accepted Answer

Blue/green deployment. Canary and blue/green both support gradual traffic shift and rollback. Rolling updates are gradual but may not have automatic rollback based on monitoring. A/B testing is not a deployment strategy. Immutable deployments replace instances but not gradual.

Answer

Rolling deployment

Answer

Immutable deployment

Answer

A/B testing deployment

Question 5

A company is adopting Infrastructure as Code (IaC) to manage its cloud resources. Which THREE statements are true about IaC? (Select THREE.)

Accepted Answer

IaC allows for automated provisioning of infrastructure. IaC enables automation, idempotency, and version control. Manual changes are not required; IaC can be used for both mutable and immutable infrastructure.

Answer

IaC eliminates the need for manual configuration changes

Answer

IaC is only applicable for immutable infrastructure

Question 6

A data scientist is migrating a 10 TB on-premises PostgreSQL database to Amazon RDS for PostgreSQL. The migration must have minimal downtime. Which TWO AWS services should the data scientist use together to achieve this? (Select TWO.)

Accepted Answer

AWS Direct Connect. To migrate a 10 TB PostgreSQL database to RDS with minimal downtime, AWS DMS provides ongoing replication via change data capture (CDC), allowing continuous data synchronization after the full load. AWS Direct Connect offers a dedicated, stable network connection with consistent bandwidth and low latency, which is critical for replicating such a large volume of data reliably and quickly. Without Direct Connect, internet-based replication could suffer from variable performance, risking the ability to keep the target in sync during the final cutover.

Answer

AWS Snowball

Answer

AWS Schema Conversion Tool (SCT)

Answer

AWS DataSync

Question 7

A cloud administrator is automating the deployment of a web application on AWS. The administrator wants to define the infrastructure as code using a declarative language that supports drift detection. Which tool should the administrator use?

Accepted Answer

CloudFormation. CloudFormation is a declarative AWS service for infrastructure as code that supports drift detection, which identifies changes made to resources outside of template management.

Answer

AWS CodeDeploy

Answer

Ansible

Answer

Terraform

Question 8

A DevOps team wants to deploy a containerized application to a Kubernetes cluster with zero downtime. The team needs to gradually shift traffic from the old version to the new version, monitoring error rates and automatically rolling back if errors exceed a threshold. Which deployment strategy should the team implement?

Accepted Answer

Canary deployment. A canary deployment releases the new version to a small subset of users, monitors performance, and automatically rolls back if issues are detected, meeting the zero-downtime and auto-rollback requirements.

Answer

Blue/green deployment

Answer

Rolling deployment

Answer

Recreate deployment

Question 9

A company must migrate 50 TB of data from an on-premises NFS server to Amazon S3 within one week. The network bandwidth averages 50 Mbps. The administrator is evaluating AWS DataSync and AWS Snowball. Which service should the administrator choose?

Accepted Answer

AWS Snowball. At 50 Mbps, transferring 50 TB would take about 95 days, exceeding the one-week deadline. Snowball provides offline physical transfer, making it feasible within a week.

Answer

AWS DataSync

Answer

S3 Transfer Acceleration

Answer

AWS Database Migration Service

Question 10

An organization uses Terraform to manage multi-cloud infrastructure across AWS and Azure. The state file must be stored securely with locking to prevent concurrent modifications. Which backend configuration should the team use?

Accepted Answer

AWS S3 bucket with DynamoDB table for locking. Terraform supports remote backends like AWS S3 with DynamoDB for state locking, which provides both state storage and locking. Azure Blob Storage can also be used with blob lease locking.

Answer

GitHub repository with Terraform Cloud agent

Answer

Azure DevOps pipeline variable group

Answer

Local file system with .terraform.lock.hcl

Question 11

A cloud engineer needs to deploy a Lambda function that processes objects uploaded to an S3 bucket. The function code is stored in a .zip file. Which event trigger should the engineer configure to invoke the function automatically?

Accepted Answer

S3 event notification. S3 can send event notifications to Lambda when objects are created, making it the appropriate trigger for this use case.

Answer

API Gateway

Answer

SQS

Answer

EventBridge

Question 12

A team is designing a CI/CD pipeline for a microservices application. They want to automatically build, test, and deploy each service independently to a Kubernetes cluster. The pipeline must integrate with Git repositories and support parallel job execution. Which tool is best suited for this requirement?

Accepted Answer

GitLab CI. GitLab CI is integrated with Git repositories, supports parallel jobs, and can deploy to Kubernetes, making it a good fit for microservices CI/CD.

Answer

Azure DevOps

Answer

Jenkins

Answer

AWS CodePipeline

Question 13

A company is migrating an on-premises Oracle database to Amazon RDS for MySQL. The migration must have minimal downtime and must handle ongoing changes during migration. The schema needs to be converted to MySQL-compatible format. Which combination of AWS services should the team use?

Accepted Answer

AWS DMS with AWS Schema Conversion Tool (SCT). AWS DMS can perform ongoing replication using CDC, and SCT converts schemas between different database engines.

Answer

AWS SCT alone

Answer

AWS DataSync

Answer

AWS DMS alone

Question 14

An administrator is writing an Ansible playbook to provision cloud resources across multiple cloud providers. The playbook must manage instances in AWS, Azure, and GCP. Which Ansible concept should the administrator use to interact with each cloud provider's API?

Accepted Answer

Modules. Ansible modules are units of code that interact with cloud provider APIs. Each cloud provider has specific modules (e.g., ec2, azure_rm, gcp_compute).

Answer

Roles

Answer

Inventories

Answer

Playbooks

Question 15

A company wants to deploy a Kubernetes application across multiple AWS accounts using a single set of manifests. The team needs to manage the deployment centrally while allowing each account to have its own configuration values (e.g., environment-specific variables). Which approach should the team use?

Accepted Answer

Use Helm charts with per-environment values files. Helm charts package Kubernetes manifests and support parameterization via values files, allowing centralized deployment with per-environment overrides.

Answer

Use Terraform workspaces with Kubernetes provider

Answer

Use CloudFormation StackSets with Kubernetes resources

Answer

Create separate manifests for each account