CV0-004 Deployment Practice Test 3 — 15 Questions

Question 1

A cloud architect is designing a serverless application using Azure Functions. The function must process messages from an Azure Storage Queue. How should the architect configure the trigger?

Accepted Answer

Queue trigger. Azure Functions natively supports a Queue trigger that automatically polls an Azure Storage Queue for new messages and executes the function code when a message is detected. This is the simplest and most efficient way to process messages from a Storage Queue without custom polling logic.

Answer

Blob trigger

Answer

Event Grid trigger

Answer

HTTP trigger with queue polling

Question 2

A team uses Terraform to manage infrastructure. After running terraform apply, the state file is stored in an S3 backend with DynamoDB locking. During a subsequent terraform plan, the team notices that the state file shows resources that no longer exist in the cloud. Which command should the team run to reconcile the state with the actual cloud resources?

Accepted Answer

terraform refresh. The terraform refresh command updates the Terraform state file to match the actual state of cloud resources. When resources are deleted or modified outside of Terraform, the state becomes outdated. Running terraform refresh queries the provider for the real-world status and reconciles the state accordingly. In contrast, terraform plan only shows proposed changes, terraform import is used to bring existing resources under management, and terraform state rm removes entries from the state without syncing with reality. Therefore, terraform refresh is the correct command to reconcile the state with actual cloud resources.

Answer

terraform plan

Answer

terraform import

Answer

terraform state rm

Question 3

A company is deploying a new version of a microservice on Amazon EKS. The deployment must ensure that new pods are created and become healthy before old pods are terminated. The current deployment uses a ReplicaSet. Which Kubernetes resource and strategy should be used?

Accepted Answer

Deployment with RollingUpdate strategy. A Deployment manages ReplicaSets and supports a RollingUpdate strategy that creates new pods and waits for them to become ready before terminating old ones.

Answer

ReplicaSet with RollingUpdate strategy

Answer

DaemonSet with RollingUpdate

Answer

StatefulSet with OnDelete strategy

Question 4

A cloud engineer is migrating a legacy application to AWS. The application requires minimal downtime during the database migration from SQL Server to Aurora MySQL. Which TWO AWS services should the engineer use to achieve this?

Accepted Answer

AWS Schema Conversion Tool (SCT). The AWS Schema Conversion Tool (SCT) is used to convert the source SQL Server database schema and code to be compatible with Aurora MySQL, handling differences in data types, stored procedures, and other database objects. The AWS Database Migration Service (DMS) then performs the actual data migration with minimal downtime by continuously replicating changes from the source to the target database until a cutover is performed. Together, SCT and DMS enable a heterogeneous migration with near-zero downtime.

Answer

AWS Snowball

Answer

AWS Direct Connect

Answer

AWS DataSync

Question 5

A DevOps team is designing a CI/CD pipeline for a cloud-native application. They require a deployment strategy that supports traffic shifting in small increments and automatic rollback based on health checks. Which TWO strategies meet these requirements?

Accepted Answer

Rolling deployment. Canary deployment meets both requirements because it shifts traffic incrementally and can automatically roll back based on health checks. Rolling deployment also meets the requirements: it updates instances gradually, shifting traffic in small increments, and can be configured with health checks to trigger automatic rollback if the new version fails. Blue/green deployment does not shift traffic incrementally; it switches all at once. Recreate and immutable deployments do not support incremental traffic shifting or automatic rollback based on health checks.

Answer

Recreate deployment

Answer

Immutable deployment

Answer

Blue/green deployment

Question 6

An organization is moving 100 TB of archival data from on-premises to Google Cloud Storage. The network bandwidth is limited to 10 Mbps, and the migration must complete within two weeks. Which THREE methods should the team consider?

Accepted Answer

Direct peering with Google Cloud. (Google Cloud Data Transfer Appliance) is correct for offline transfer of large datasets when bandwidth is insufficient. Option D (Partner edge appliance) similarly allows offline transfer using a compatible partner device. Option B (Direct peering with Google Cloud) is correct because it establishes a dedicated network connection that can provide higher bandwidth than the existing limited link, enabling faster data transfer. With only 10 Mbps, transferring 100 TB would take over two years; a dedicated connection can be provisioned at higher speeds (e.g., 1 Gbps) to meet the two-week deadline. Options A and E are not viable because they rely on the existing limited network bandwidth and would not complete within the timeframe.

Answer

Google Cloud Storage Transfer Service for on-premises data

Answer

Google Cloud Storage Transfer Service for inter-cloud transfer

Question 7

A cloud engineer is writing Terraform code to provision AWS resources. They need to define the cloud provider and authentication details. Which block should they use in their HCL configuration?

Accepted Answer

provider block. In Terraform, the provider block is used to configure the cloud provider (e.g., AWS, Azure, GCP) and specify authentication settings such as region and credentials.

Answer

resource block

Answer

variable block

Answer

module block

Question 8

A company is migrating a large Oracle database (2 TB) from on-premises to AWS RDS for Oracle. They require minimal downtime and need to keep the source database running during migration. Which AWS service should they use to achieve continuous replication?

Accepted Answer

AWS DMS with CDC. AWS DMS with Change Data Capture (CDC) is the correct choice because it enables continuous replication of ongoing changes from the source Oracle database to the target RDS for Oracle instance, allowing the source to remain fully operational during migration. CDC captures incremental changes (inserts, updates, deletes) from the source's redo logs, minimizing downtime to a brief cutover window. This meets the requirement of a 2 TB database with minimal downtime while keeping the source running.

Answer

AWS DataSync

Answer

AWS S3 Transfer Acceleration

Answer

AWS Snowball Edge

Question 9

A DevOps team uses Jenkins for CI/CD. They want to automatically deploy containerized applications to a Kubernetes cluster. Which Jenkins feature or plugin can integrate with Kubernetes to manage deployments?

Accepted Answer

Kubernetes plugin. The Kubernetes plugin for Jenkins allows Jenkins agents to be dynamically provisioned as pods within a Kubernetes cluster, enabling automated deployment of containerized applications. It integrates directly with the Kubernetes API to manage deployments, services, and other resources, making it the correct choice for this scenario.

Answer

Jenkins Declarative Pipeline

Answer

Jenkins Blue Ocean

Answer

Jenkins Multibranch Pipeline

Question 10

An organization uses CloudFormation to manage resources across multiple AWS accounts. They need to deploy a common set of resources (e.g., logging configuration) to all accounts in an AWS Organization. Which CloudFormation feature should they use?

Accepted Answer

StackSets. CloudFormation StackSets allow you to deploy stacks across multiple accounts and regions in a single operation, ideal for multi-account governance.

Answer

Change sets

Answer

Drift detection

Answer

Nested stacks

Question 11

A cloud administrator needs to transfer 50 TB of data from an on-premises NAS to Amazon S3. The office has limited bandwidth (50 Mbps). Which service is most suitable for this offline transfer?

Accepted Answer

AWS Snowball. AWS Snowball is designed for large offline data transfers where network bandwidth is limited. Physical devices are shipped to transfer data.

Answer

AWS VPN

Answer

AWS DataSync

Answer

S3 Transfer Acceleration

Question 12

A developer is deploying a serverless application using AWS Lambda. They want to reuse common code (e.g., database connection logic) across multiple functions without duplicating it. Which Lambda feature should they use?

Accepted Answer

Lambda layers. Lambda Layers allow you to package and share code across multiple functions, enabling code reuse and reducing deployment package size.

Answer

Lambda versions

Answer

Lambda aliases

Answer

Lambda environment variables

Question 13

An organization uses Azure DevOps for CI/CD. They need to deploy a Bicep template that creates resources in multiple Azure regions. The deployment must be idempotent and handle dependencies between resources. Which Azure DevOps task should they use?

Accepted Answer

Azure Resource Group Deployment task. The Azure Resource Group Deployment task in Azure DevOps can deploy ARM/Bicep templates and handle resource dependencies and idempotency through Azure Resource Manager.

Answer

Azure PowerShell task with New-AzResourceGroupDeployment

Answer

Azure File Copy task

Answer

Azure CLI task with az deployment group create

Question 14

A company wants to deploy a containerized application to a Kubernetes cluster using a rolling update strategy. They have defined a Kubernetes Deployment manifest. Which field controls the number of pods that can be unavailable during the update?

Accepted Answer

spec.strategy.rollingUpdate.maxUnavailable. The `spec.strategy.rollingUpdate.maxUnavailable` field in a Kubernetes Deployment manifest explicitly controls the maximum number of Pods that can be unavailable during a rolling update. This field can be set as an absolute number or a percentage of the desired Pod count, ensuring that the update proceeds without dropping below a specified availability threshold.

Answer

spec.strategy.rollingUpdate.maxSurge

Answer

spec.template.spec.containers[].readinessProbe

Answer

spec.replicas

Question 15

A DevOps team is implementing a canary deployment for a microservice running on Amazon ECS. They want to gradually shift 10% of traffic to the new version and automatically roll back if error rates exceed 1% in 5 minutes. Which combination of services should they use?

Accepted Answer

AWS CodeDeploy with CloudWatch alarms. AWS CodeDeploy natively supports canary deployments for Amazon ECS, allowing you to specify a traffic shift percentage (e.g., 10%) and integrate with CloudWatch alarms to automatically trigger a rollback when error rates exceed a defined threshold (e.g., 1% over 5 minutes). This combination directly fulfills the gradual traffic shifting and automated rollback requirements without custom scripting.

Answer

AWS CloudFormation and SSM

Answer

AWS Lambda and Step Functions

Answer

AWS Elastic Beanstalk and Route 53