CV0-004 Deployment Practice Test 6 — 15 Questions

Question 1

An organization wants to deploy a new microservice to a Kubernetes cluster with zero downtime. The deployment should update pods gradually by replacing old pods with new ones, and if the new pods fail health checks, the rollout should stop. Which Kubernetes deployment strategy meets these requirements?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Rolling update. A rolling update strategy in Kubernetes replaces pods incrementally and can be configured to pause on failed health checks.

Answer

Canary

Answer

Recreate

Answer

Blue/green

Question 2

A company wants to migrate a 50 TB on-premises SQL Server database to Amazon RDS for MySQL with minimal downtime. The source database is 3 TB and continues to receive writes. Which service should the cloud architect use to perform the migration with ongoing replication?

Accepted Answer

AWS DMS. AWS Database Migration Service (DMS) supports ongoing replication via change data capture (CDC) to migrate with minimal downtime.

Answer

AWS Snowball

Answer

AWS S3 Transfer Acceleration

Answer

AWS DataSync

Question 3

A DevOps team uses Ansible to automate cloud resource provisioning. Which of the following best describes Ansible's architecture?

Accepted Answer

It is agentless and uses SSH or WinRM to execute tasks.. Ansible is agentless and uses SSH or WinRM to connect to managed nodes, executing YAML playbooks.

Answer

It uses a declarative language similar to Terraform.

Answer

It uses a master-server architecture with a central controller.

Answer

It requires an agent installed on each managed node.

Question 4

A cloud engineer needs to deploy a serverless function that runs when a new object is uploaded to an S3 bucket. Which AWS service event trigger should be configured?

Accepted Answer

S3. Amazon S3 can directly invoke AWS Lambda when a new object is uploaded by configuring an S3 event notification on the bucket. This native integration allows the S3 service to trigger the function without any intermediary service, making option C the correct choice for a serverless function triggered by an S3 upload event.

Answer

API Gateway

Answer

EventBridge

Answer

SQS

Question 5

A company uses CloudFormation to manage infrastructure across multiple AWS accounts. They want to deploy a common set of resources (e.g., VPC, IAM roles) to all accounts in their organization. Which CloudFormation feature should they use?

Accepted Answer

Stack sets. CloudFormation StackSets allow deploying stacks across multiple accounts and regions.

Answer

Change sets

Answer

Nested stacks

Answer

Drift detection

Question 6

An organization uses Azure DevOps for CI/CD. They want to implement a deployment strategy where a new version of an application is deployed to a small subset of users (e.g., 5%) and if no errors are detected, the percentage is gradually increased to 100%. Which deployment strategy should they use?

Accepted Answer

Canary. Canary deployment releases to a small subset and gradually increases traffic while monitoring.

Answer

Rolling

Answer

Recreate

Answer

Blue/green

Question 7

A DevOps team is implementing a CI/CD pipeline using Jenkins. They want to ensure that code is automatically built, tested, and deployed to a staging environment before manual approval for production. Which stage should include the deployment to staging?

Accepted Answer

Deploy. In a typical CI/CD pipeline, the deploy stage follows build and test, and before production.

Answer

Build

Answer

Source

Answer

Verify

Question 8

A company uses Terraform to manage infrastructure as code. After running terraform apply, the state file is stored locally. The team wants to enable collaboration by storing state remotely with locking to prevent concurrent modifications. Which backend should be configured?

Accepted Answer

S3 with DynamoDB locking. S3 provides a scalable, durable remote backend for Terraform state, and DynamoDB locking prevents concurrent modifications by acquiring a lock via a DynamoDB table before state operations. This combination is the standard AWS-native solution for team collaboration, as it supports state versioning, encryption, and consistent locking via DynamoDB's conditional writes.

Answer

Consul

Answer

HTTP

Answer

local

Question 9

A cloud engineer needs to deploy a containerized application on Amazon EKS. The application requires a persistent storage volume that can be dynamically provisioned. Which Kubernetes resource should be used to request storage?

Accepted Answer

PersistentVolumeClaim. A PersistentVolumeClaim (PVC) is the correct Kubernetes resource to request storage because it acts as a request for storage by a pod, specifying size, access modes, and optionally a StorageClass. In Amazon EKS, a PVC can trigger dynamic provisioning of an EBS or EFS volume via a StorageClass, decoupling the storage request from the underlying PersistentVolume. This allows the cloud engineer to deploy the containerized application without manually pre-provisioning storage.

Answer

PersistentVolume

Answer

StorageClass

Answer

ConfigMap

Question 10

A cloud architect is designing a deployment pipeline using GitHub Actions. They want to automatically run tests on every push to the main branch. Which GitHub Actions component defines the automation workflow?

Accepted Answer

Workflow. A workflow is a configurable automated process defined in YAML in the .github/workflows directory.

Answer

Job

Answer

Step

Answer

Action

Question 11

A company is planning to migrate a 200 TB on-premises file server to AWS S3. The network link is 1 Gbps and cannot be saturated due to other traffic. The migration must be completed within two weeks. Which TWO services or features should the cloud engineer consider to accelerate the transfer? (Choose two.)

Accepted Answer

AWS DataSync. AWS DataSync is correct because it is designed to efficiently migrate large datasets to AWS by using parallel multi-threaded transfers and incremental syncs, which can optimize the use of the available 1 Gbps link without saturating it. It can handle the 200 TB file server migration by automating the transfer and reducing the time required compared to manual copying, though the 1 Gbps link alone may still be insufficient for the two-week window, making it a partial solution.

Answer

AWS Direct Connect

Answer

AWS DMS

Answer

AWS Storage Gateway

Question 12

A cloud team uses Azure Bicep for deploying resources. They need to create a modular deployment that includes a virtual network and a subnet. Which THREE best practices should they follow when authoring Bicep files? (Choose three.)

Accepted Answer

Use modules to encapsulate and reuse resource definitions.. Using parameters for configurable values, using modules for reuse, and using symbolic names for resource references are best practices.

Answer

Use hard-coded resource names to ensure consistency.

Answer

Define all resources in a single file for simplicity.

Question 13

A company is implementing a canary deployment for a web application running on AWS. Which TWO components are essential for this strategy? (Choose two.)

Accepted Answer

A load balancer to distribute traffic between versions. A load balancer to route traffic and monitoring to detect issues are essential for canary deployments.

Answer

A blue environment running the old version

Answer

A CI/CD pipeline with automated testing

Answer

An auto scaling group for the new version

Question 14

A cloud engineer is writing a Terraform configuration to deploy an AWS EC2 instance. The engineer wants to pass the AMI ID and instance type into the configuration at runtime without hardcoding them. Which Terraform feature should be used?

Accepted Answer

Variables. Variables in Terraform allow you to define parameters that can be supplied at runtime, making configurations reusable and flexible.

Answer

Locals

Answer

Outputs

Answer

Data sources

Question 15

A company uses AWS CloudFormation to manage its infrastructure. After updating a stack, a developer notices that the actual infrastructure differs from the expected template. Which CloudFormation feature should be used to identify these differences?

Accepted Answer

Drift detection. Drift detection allows you to detect whether a stack's actual configuration differs from its expected template configuration.

Answer

Stack sets

Answer

Change sets

Answer

Rollback triggers