CV0-004 Deployment Practice Test 5 — 15 Questions

Question 1

A company is deploying a web application on AWS and wants to ensure that the application is resilient to failures in a single Availability Zone. The web application runs on Amazon EC2 instances behind an Application Load Balancer. Which deployment strategy should the cloud engineer use to meet this requirement?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Deploy the EC2 instances in multiple Availability Zones and attach them to the load balancer.. To achieve resilience to a single Availability Zone failure, the application must be deployed across multiple Availability Zones. The Application Load Balancer will route traffic to healthy instances in all AZs. This ensures that if one AZ fails, the application remains available through the other AZs. The other options either do not address AZ failure or provide only partial benefits.

Answer

Deploy the EC2 instances in multiple Availability Zones and configure the load balancer to use cross-zone load balancing.

Answer

Deploy the EC2 instances in a single Availability Zone and configure the load balancer to use sticky sessions.

Answer

Deploy the EC2 instances in a single Availability Zone and enable termination protection.

Question 2

A financial services company is deploying a containerized application on Amazon EKS. The application requires persistent storage for a database that must be accessible from multiple pods simultaneously. The storage must be highly available across multiple Availability Zones and support ReadWriteMany access mode. Which storage solution should the company use?

Accepted Answer

Amazon EFS with a StorageClass that uses the EFS CSI driver. Amazon EFS is a fully managed, elastic NFS file system that supports the ReadWriteMany access mode and can be mounted by multiple pods across multiple Availability Zones. The EFS CSI driver enables dynamic provisioning in Amazon EKS. This makes it the correct choice for a database requiring shared storage with high availability across AZs.

Answer

Amazon FSx for Lustre with a StorageClass that uses the FSx CSI driver

Answer

Amazon EBS with a StorageClass that provisions gp3 volumes

Answer

Amazon S3 with a CSI driver that mounts buckets as volumes

Question 3

A company is deploying a new version of a web application to a Kubernetes cluster on Amazon EKS. The deployment must update pods without downtime and allow the team to pause the rollout to verify a canary subset of pods. The team wants to use native Kubernetes features to control the rollout. Which approach should they use?

Accepted Answer

Use a Deployment with a RollingUpdate strategy, and use kubectl rollout pause and resume to control the rollout.. The native Kubernetes approach is to use a Deployment with a RollingUpdate strategy and leverage kubectl rollout pause and resume. This allows the team to pause the rollout after some pods are updated, verify the canary subset, and then continue. It meets the requirements without additional tools.

Answer

Use a Deployment with a Canary strategy defined in the pod template.

Answer

Use a Deployment with a RollingUpdate strategy and set maxSurge and maxUnavailable to control the rollout.

Answer

Use a Deployment with two ReplicaSets and manually adjust the number of replicas for each to control traffic.

Question 4

A company is migrating a 50 TB on-premises database to AWS RDS MySQL. The migration must have minimal downtime and support ongoing replication during the cutover. The database schema is standard MySQL. Which combination of services should the company use?

Accepted Answer

AWS Database Migration Service (DMS) with Change Data Capture (CDC) replication. AWS DMS with Change Data Capture (CDC) performs the initial full load and then continuously replicates ongoing changes from the source MySQL to RDS MySQL, enabling minimal-downtime cutover. Because the schema is standard MySQL, no schema conversion is needed, and CDC keeps the target in sync until the application is switched over.

Answer

AWS DMS with schema conversion tool to convert to MySQL

Answer

AWS Snowball Edge to transfer database dump, then import to RDS

Answer

AWS DataSync to transfer database files to S3, then restore to RDS

Question 5

An organization uses CloudFormation to manage infrastructure across multiple AWS accounts. The team wants to deploy a common set of resources, such as VPCs and security groups, to all accounts in a consistent manner. Which CloudFormation feature should they use?

Accepted Answer

StackSets. StackSets allow deploying stacks across multiple accounts and regions. Change sets preview changes, drift detection checks for manual changes, and nested stacks organize templates within a single account.

Answer

Change sets

Answer

Drift detection

Answer

Nested stacks

Question 6

A cloud engineer is designing a deployment strategy for a web application that requires zero downtime. The engineer has set up two identical production environments, one active and one idle. After deploying the new version to the idle environment, the engineer switches the DNS record to point to the idle environment. This deployment method is known as:

Accepted Answer

Blue/green deployment. Blue/green deployment maintains two identical environments: one live (blue) and one idle (green). After deploying the new version to the idle environment and testing it, traffic is switched from the active to the idle environment, typically via DNS or a load balancer. This provides zero downtime and instant rollback because the previous environment remains intact until the switch is validated.

Answer

Rolling deployment

Answer

A/B testing deployment

Answer

Canary deployment

Question 7

A team is developing a serverless application on AWS Lambda. The application uses several third-party libraries that are large in size. To reduce deployment package size and enable reuse across functions, the team wants to include these libraries as a separate layer. However, the total unzipped size of all layers exceeds the Lambda limits. What should the team do to resolve this?

Accepted Answer

Use a container image for the Lambda function instead of layers. AWS Lambda has a hard limit of 250 MB unzipped for the combined deployment package and all layers. When layers exceed this, packaging the function as a container image (up to 10 GB) is the supported workaround. Container images can include large third-party libraries directly in the image, bypassing the layer size limit while still allowing reuse via shared base images.

Answer

Increase the Lambda function's reserved concurrency

Answer

Reduce the number of layers by combining libraries into fewer custom layers

Answer

Request a service limit increase from AWS for layer size

Question 8

An organization is using Azure DevOps to implement a CI/CD pipeline. In which stage of the pipeline would automated unit tests typically be executed?

Accepted Answer

Build. In a typical CI/CD pipeline, automated unit tests are executed during the Build stage, immediately after code compilation, to validate that individual components function correctly before any deployment. This early feedback loop catches defects quickly and prevents broken code from progressing to later stages. The Build stage is where code is compiled, packaged, and unit-tested.

Answer

Deploy

Answer

Verify

Answer

Source

Question 9

A company is migrating 100 TB of data from an on-premises NAS to Amazon S3. The network bandwidth is limited to 100 Mbps, and the transfer must complete within 30 days. Which service should the company use to meet the deadline?

Accepted Answer

AWS Snowball. AWS Snowball is the correct choice because transferring 100 TB over a 100 Mbps link would take far longer than 30 days. At 100 Mbps, the theoretical maximum is about 12.5 MB/s, which over 30 days yields roughly 32 TB, well short of 100 TB. Snowball uses physical devices to ship data, bypassing network bandwidth limitations and meeting the deadline.

Answer

AWS DataSync

Answer

Amazon S3 Transfer Acceleration

Answer

AWS Direct Connect

Question 10

A cloud administrator is writing an Ansible playbook to provision cloud resources. The administrator wants to ensure that the playbook can run without requiring any agent software on the target machines. Which Ansible feature enables this agentless operation?

Accepted Answer

SSH-based connection to managed nodes. Ansible is agentless by design and connects to managed nodes over standard SSH (or WinRM for Windows). This means no Ansible agent or daemon needs to be installed on target machines — the control node pushes modules over SSH, executes them, and removes them. SSH-based connection is the foundational mechanism that enables this agentless architecture.

Answer

Ansible inventory files that list hosts

Answer

Ansible modules that run on the control node

Answer

Pull mode from a central repository

Question 11

A DevOps team is deploying a containerized application to Google Kubernetes Engine (GKE). The team wants to automate the deployment of the application along with its dependencies, such as ConfigMaps and Services, using a single package. Which tool should the team use?

Accepted Answer

Helm charts. Helm is the de facto package manager for Kubernetes and bundles all related manifests — Deployments, Services, ConfigMaps, Secrets, Ingress — into a single versioned chart that can be installed, upgraded, and rolled back with one command. This directly matches the requirement to deploy an application and its dependencies as a single package. Helm also supports templating and values files for environment-specific configuration.

Answer

kubectl apply with multiple manifest files

Answer

Kustomize overlays

Answer

Docker Compose

Question 12

A company is adopting Infrastructure as Code (IaC) to manage its cloud resources. Which THREE statements are true about IaC? (Select THREE.)

Accepted Answer

IaC allows for automated provisioning of infrastructure. Option A is correct because IaC tools such as Terraform, AWS CloudFormation, and Ansible automate the provisioning of infrastructure by declaring resources in code and applying them through APIs, removing manual click-through provisioning. Option D is correct because IaC configuration files (e.g., .tf, YAML templates, playbooks) are text-based and are normally committed to a version control system like Git, enabling change tracking, peer review, and rollback. Option E is correct because the same declarative or idempotent IaC code produces the same resulting infrastructure state on every run, giving repeatable and consistent deployments across environments. Option B is not marked correct because IaC does not eliminate manual configuration changes entirely; out-of-band or drift changes can still occur and must be detected and reconciled. Option C is not marked correct because IaC supports both mutable and immutable infrastructure models, so it is not limited to immutable infrastructure.

Answer

IaC eliminates the need for manual configuration changes

Answer

IaC is only applicable for immutable infrastructure

Question 13

A DevOps team wants to deploy a containerized application to a Kubernetes cluster with zero downtime. The team needs to gradually shift traffic from the old version to the new version, monitoring error rates and automatically rolling back if errors exceed a threshold. Which deployment strategy should the team implement?

Accepted Answer

Canary deployment. Canary deployment is correct because it introduces the new version to a small subset of users/traffic first, allowing the team to monitor error rates and metrics in production before progressively shifting more traffic. If error thresholds are breached, traffic can be instantly routed back to the stable version, achieving zero-downtime with automated rollback. This matches the requirement for gradual traffic shifting with monitoring and automatic rollback.

Answer

Blue/green deployment

Answer

Rolling deployment

Answer

Recreate deployment

Question 14

A cloud engineer needs to deploy a Lambda function that processes objects uploaded to an S3 bucket. The function code is stored in a .zip file. Which event trigger should the engineer configure to invoke the function automatically?

Accepted Answer

S3 event notification. S3 event notifications can be configured on a bucket to invoke a Lambda function when objects are created (e.g., s3:ObjectCreated:*), which directly satisfies the requirement to process uploaded objects automatically. This is the native, serverless integration between S3 and Lambda. API Gateway, SQS, and EventBridge are not triggered by S3 PUT events without additional configuration.

Answer

API Gateway

Answer

SQS

Answer

EventBridge

Question 15

A company is migrating an on-premises Oracle database to Amazon RDS for MySQL. The migration must have minimal downtime and must handle ongoing changes during migration. The schema needs to be converted to MySQL-compatible format. Which combination of AWS services should the team use?

Accepted Answer

AWS DMS with AWS Schema Conversion Tool (SCT). AWS DMS can perform ongoing replication using CDC, and SCT converts schemas between different database engines.

Answer

AWS SCT alone

Answer

AWS DataSync

Answer

AWS DMS alone