CV0-004 Deployment Practice Test 2 — 15 Questions

Question 1

A cloud administrator is automating the deployment of a web application on AWS. The administrator wants to define the infrastructure as code using a declarative language that supports drift detection. Which tool should the administrator use?

Accepted Answer

CloudFormation. CloudFormation is a declarative AWS service for infrastructure as code that supports drift detection, which identifies changes made to resources outside of template management.

Answer

AWS CodeDeploy

Answer

Ansible

Answer

Terraform

Question 2

A DevOps team wants to deploy a containerized application to a Kubernetes cluster with zero downtime. The team needs to gradually shift traffic from the old version to the new version, monitoring error rates and automatically rolling back if errors exceed a threshold. Which deployment strategy should the team implement?

Accepted Answer

Canary deployment. A canary deployment releases the new version to a small subset of users, monitors performance, and automatically rolls back if issues are detected, meeting the zero-downtime and auto-rollback requirements.

Answer

Blue/green deployment

Answer

Rolling deployment

Answer

Recreate deployment

Question 3

A company must migrate 50 TB of data from an on-premises NFS server to Amazon S3 within one week. The network bandwidth averages 50 Mbps. The administrator is evaluating AWS DataSync and AWS Snowball. Which service should the administrator choose?

Accepted Answer

AWS Snowball. At 50 Mbps, transferring 50 TB would take about 95 days, exceeding the one-week deadline. Snowball provides offline physical transfer, making it feasible within a week.

Answer

AWS DataSync

Answer

S3 Transfer Acceleration

Answer

AWS Database Migration Service

Question 4

An organization uses Terraform to manage multi-cloud infrastructure across AWS and Azure. The state file must be stored securely with locking to prevent concurrent modifications. Which backend configuration should the team use?

Accepted Answer

AWS S3 bucket with DynamoDB table for locking. Terraform supports remote backends like AWS S3 with DynamoDB for state locking, which provides both state storage and locking. Azure Blob Storage can also be used with blob lease locking.

Answer

GitHub repository with Terraform Cloud agent

Answer

Azure DevOps pipeline variable group

Answer

Local file system with .terraform.lock.hcl

Question 5

A cloud engineer needs to deploy a Lambda function that processes objects uploaded to an S3 bucket. The function code is stored in a .zip file. Which event trigger should the engineer configure to invoke the function automatically?

Accepted Answer

S3 event notification. S3 can send event notifications to Lambda when objects are created, making it the appropriate trigger for this use case.

Answer

API Gateway

Answer

SQS

Answer

EventBridge

Question 6

A team is designing a CI/CD pipeline for a microservices application. They want to automatically build, test, and deploy each service independently to a Kubernetes cluster. The pipeline must integrate with Git repositories and support parallel job execution. Which tool is best suited for this requirement?

Accepted Answer

GitLab CI. GitLab CI is integrated with Git repositories, supports parallel jobs, and can deploy to Kubernetes, making it a good fit for microservices CI/CD.

Answer

Azure DevOps

Answer

Jenkins

Answer

AWS CodePipeline

Question 7

A company is migrating an on-premises Oracle database to Amazon RDS for MySQL. The migration must have minimal downtime and must handle ongoing changes during migration. The schema needs to be converted to MySQL-compatible format. Which combination of AWS services should the team use?

Accepted Answer

AWS DMS with AWS Schema Conversion Tool (SCT). AWS DMS can perform ongoing replication using CDC, and SCT converts schemas between different database engines.

Answer

AWS SCT alone

Answer

AWS DataSync

Answer

AWS DMS alone

Question 8

An administrator is writing an Ansible playbook to provision cloud resources across multiple cloud providers. The playbook must manage instances in AWS, Azure, and GCP. Which Ansible concept should the administrator use to interact with each cloud provider's API?

Accepted Answer

Modules. Ansible modules are units of code that interact with cloud provider APIs. Each cloud provider has specific modules (e.g., ec2, azure_rm, gcp_compute).

Answer

Roles

Answer

Inventories

Answer

Playbooks

Question 9

A company wants to deploy a Kubernetes application across multiple AWS accounts using a single set of manifests. The team needs to manage the deployment centrally while allowing each account to have its own configuration values (e.g., environment-specific variables). Which approach should the team use?

Accepted Answer

Use Helm charts with per-environment values files. Helm charts package Kubernetes manifests and support parameterization via values files, allowing centralized deployment with per-environment overrides.

Answer

Use Terraform workspaces with Kubernetes provider

Answer

Use CloudFormation StackSets with Kubernetes resources

Answer

Create separate manifests for each account

Question 10

A cloud architect is designing a serverless application using Azure Functions. The function must process messages from an Azure Storage Queue. How should the architect configure the trigger?

Accepted Answer

Queue trigger. The correct answer is C because Azure Functions natively supports a Queue trigger that automatically polls an Azure Storage Queue for new messages and executes the function code when a message is detected. This is the simplest and most efficient way to process messages from a Storage Queue without custom polling logic.

Answer

Blob trigger

Answer

Event Grid trigger

Answer

HTTP trigger with queue polling

Question 11

A team uses Terraform to manage infrastructure. After running terraform apply, the state file is stored in an S3 backend with DynamoDB locking. During a subsequent terraform plan, the team notices that the state file shows resources that no longer exist in the cloud. Which command should the team run to reconcile the state with the actual cloud resources?

Accepted Answer

terraform refresh. Terraform import is used to bring existing resources under Terraform management, but if resources are missing, terraform refresh updates the state to match reality.

Answer

terraform plan

Answer

terraform import

Answer

terraform state rm

Question 12

A company is deploying a new version of a microservice on Amazon EKS. The deployment must ensure that new pods are created and become healthy before old pods are terminated. The current deployment uses a ReplicaSet. Which Kubernetes resource and strategy should be used?

Accepted Answer

Deployment with RollingUpdate strategy. A Deployment manages ReplicaSets and supports a RollingUpdate strategy that creates new pods and waits for them to become ready before terminating old ones.

Answer

ReplicaSet with RollingUpdate strategy

Answer

DaemonSet with RollingUpdate

Answer

StatefulSet with OnDelete strategy

Question 13

A cloud engineer is migrating a legacy application to AWS. The application requires minimal downtime during the database migration from SQL Server to Aurora MySQL. Which TWO AWS services should the engineer use to achieve this?

Accepted Answer

AWS Schema Conversion Tool (SCT). The AWS Schema Conversion Tool (SCT) is used to convert the source SQL Server database schema and code to be compatible with Aurora MySQL, handling differences in data types, stored procedures, and other database objects. The AWS Database Migration Service (DMS) then performs the actual data migration with minimal downtime by continuously replicating changes from the source to the target database until a cutover is performed. Together, SCT and DMS enable a heterogeneous migration with near-zero downtime.

Answer

AWS Snowball

Answer

AWS Direct Connect

Answer

AWS DataSync

Question 14

A DevOps team is designing a CI/CD pipeline for a cloud-native application. They require a deployment strategy that supports traffic shifting in small increments and automatic rollback based on health checks. Which TWO strategies meet these requirements?

Accepted Answer

Canary deployment. Canary deploys traffic incrementally and can auto-rollback; blue/green switches all at once but can also roll back by switching back to the old environment.

Answer

Rolling deployment

Answer

Recreate deployment

Answer

Immutable deployment

Question 15

An organization is moving 100 TB of archival data from on-premises to Google Cloud Storage. The network bandwidth is limited to 10 Mbps, and the migration must complete within two weeks. Which THREE methods should the team consider?

Accepted Answer

Google Cloud Data Transfer Appliance. Option C is correct because the Google Cloud Data Transfer Appliance is a physical device designed for offline transfer of large datasets (up to 100 TB) when network bandwidth is insufficient. With 10 Mbps bandwidth, transferring 100 TB would take approximately 926 days (100 TB * 1024 GB/TB * 8 bits/byte / 10 Mbps / 86400 seconds/day), far exceeding the two-week deadline. The appliance allows shipping the data directly to Google for ingestion, bypassing network constraints entirely.

Answer

Google Cloud Storage Transfer Service for on-premises data

Answer

Direct peering with Google Cloud

Answer

Google Cloud Storage Transfer Service for inter-cloud transfer