CV0-004 Deployment Practice Test 7 — 15 Questions

Question 1

A cloud engineer is using Terraform to manage infrastructure. They need to store the state file remotely for team collaboration and to enable state locking. Which THREE of the following backends support state locking? (Select THREE.)

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Consul backend. The Consul backend (A) supports state locking natively through Consul's session and key-value store mechanisms, so Terraform can acquire a lock before modifying state. Azure Blob Storage with blob lease (D) supports locking because Terraform uses Azure's blob lease feature to prevent concurrent state writes. Amazon S3 with DynamoDB for locking (E) supports locking by using a DynamoDB table to coordinate and hold the lock while state is stored in S3. The local file system (B) does not provide remote locking suitable for team collaboration, and the HTTP backend (C) does not support state locking, so neither belongs among the correct answers.

Answer

Local file system

Answer

HTTP backend

Question 2

An organization wants to deploy a new application with zero downtime by switching traffic between two identical production environments. Which deployment strategy should be used?

Accepted Answer

Blue/green deployment. Blue/green deployment maintains two identical production environments (blue and green) and switches traffic from one to the other, typically via a load balancer or DNS cutover. This provides near-zero downtime and instant rollback by simply redirecting traffic back to the previous environment if issues arise.

Answer

Rolling deployment

Answer

Canary deployment

Answer

In-place deployment

Question 3

A company is migrating a 50 TB on-premises SQL Server database to Amazon RDS for MySQL with minimal downtime. The schema must be converted from SQL Server to MySQL. Which combination of AWS services should the cloud architect use?

Accepted Answer

AWS DMS and AWS Schema Conversion Tool (SCT). AWS DMS can migrate data with minimal downtime using CDC. Schema Conversion Tool (SCT) converts the schema from SQL Server to MySQL. DMS then performs the ongoing replication.

Answer

AWS Database Migration Service (DMS) only

Answer

AWS Snowball and AWS DMS

Answer

AWS DataSync and AWS Schema Conversion Tool (SCT)

Question 4

A DevOps team uses CloudFormation to manage multi-account infrastructure. They need to deploy a common set of resources across multiple AWS accounts in an organization. Which CloudFormation feature should they use?

Accepted Answer

Stack sets. CloudFormation StackSets allow a single template to be deployed across multiple AWS accounts and regions from a central administrator account, which is exactly what the DevOps team needs for multi-account infrastructure. StackSets support automatic deployment to new accounts as they join the organization and can use service-managed permissions for Organizations integration. This makes it the correct feature for cross-account, multi-region rollouts.

Answer

Nested stacks

Answer

Drift detection

Answer

Change sets

Question 5

An engineer is deploying a Kubernetes application on EKS and needs to ensure that pods are only considered healthy after a startup delay, and that traffic stops to unhealthy pods. Which two probe types should be configured in the deployment manifest?

Accepted Answer

Startup probe and readiness probe. Startup probes delay health checks until the pod has had time to initialize, which satisfies the startup delay requirement. Readiness probes control when the pod receives traffic, stopping traffic to unhealthy pods. Together, they meet both needs. Liveness probes restart unhealthy pods but do not handle startup delay or traffic routing.

Answer

Liveness probe and startup probe

Answer

Only readiness probe

Answer

Readiness probe and liveness probe

Question 6

A company wants to deploy a Lambda function that processes objects uploaded to an S3 bucket. Which event trigger should be configured on the Lambda function?

Accepted Answer

S3 bucket event notification. S3 bucket event notifications can be configured to directly invoke a Lambda function when objects are uploaded. This is the native, serverless integration where S3 publishes an event (e.g., s3:ObjectCreated:Put) to Lambda, triggering the function automatically without any intermediary service.

Answer

API Gateway

Answer

CloudWatch Events

Answer

SQS

Question 7

A developer wants to deploy a containerized application on a Kubernetes cluster using a package manager that simplifies deployment and management. Which tool should be used?

Accepted Answer

Helm. Helm is the package manager for Kubernetes. It uses charts to define, install, and upgrade complex Kubernetes applications.

Answer

Docker Compose

Answer

Terraform

Answer

Ansible

Question 8

A cloud engineer is writing a Bicep file to deploy Azure resources. Bicep is a domain-specific language (DSL) that transpiles to ARM templates. Which of the following is a benefit of using Bicep over ARM JSON templates?

Accepted Answer

Bicep reduces code verbosity and supports modules. Bicep provides a simpler syntax with less boilerplate, modularity, and reusable modules. It reduces complexity compared to raw ARM JSON.

Answer

Bicep automatically manages state

Answer

Bicep is natively executed by Azure Resource Manager

Answer

Bicep supports imperative scripting

Question 9

A company uses GitLab CI for its CI/CD pipeline. The pipeline includes a 'deploy' job that runs only when a tag is pushed. Which GitLab CI keyword should be used to control job execution based on tags?

Accepted Answer

only. The 'only' keyword in GitLab CI controls when a job runs based on conditions such as tags, branches, or changes. Using 'only: tags' ensures the deploy job executes only when a tag is pushed, which matches the requirement.

Answer

stage

Answer

except

Answer

needs

Question 10

A cloud engineer is managing infrastructure as code using Terraform. Which command should be run to preview changes before applying them to the cloud environment?

Accepted Answer

terraform plan. The terraform plan command creates an execution plan, showing what actions Terraform will take to change the infrastructure. It is used as a dry run before applying changes.

Answer

terraform apply

Answer

terraform destroy

Answer

terraform init

Question 11

A DevOps team is setting up a CI/CD pipeline using GitHub Actions. They want the pipeline to automatically deploy a containerized application to a Kubernetes cluster only when changes are pushed to the main branch. Which GitHub Actions component should they use to trigger the deployment?

Accepted Answer

A workflow with an on.push trigger for the main branch. GitHub Actions workflows are defined in YAML and can include an 'on' trigger specifying events such as push to a branch. This allows automation of the deployment when code is pushed to main.

Answer

A cron job that checks the repository every hour

Answer

A GitHub webhook configured in the repository settings

Answer

A pull request review requirement

Question 12

A cloud architect is designing a serverless application on AWS Lambda. The function needs to process messages from an SQS queue. Which event trigger should be configured for the Lambda function?

Accepted Answer

SQS trigger. AWS Lambda can be triggered by SQS messages. By configuring an SQS trigger, Lambda automatically polls the queue and invokes the function with each message.

Answer

API Gateway

Answer

S3 bucket event

Answer

EventBridge rule

Question 13

A team is using Kubernetes for container orchestration. They want to ensure that a new deployment does not cause downtime by gradually updating pods with a rolling update strategy. Which parameter in a Deployment manifest controls the number of pods that can be unavailable during the update?

Accepted Answer

spec.strategy.rollingUpdate.maxUnavailable. The `spec.strategy.rollingUpdate.maxUnavailable` parameter in a Kubernetes Deployment manifest specifies the maximum number of pods that can be unavailable during a rolling update. This ensures that a controlled number of pods are taken down at a time, preventing downtime by maintaining a minimum number of available pods throughout the update process.

Answer

spec.minReadySeconds

Answer

spec.replicas

Answer

spec.strategy.rollingUpdate.maxSurge

Question 14

An organization is using CloudFormation to manage AWS infrastructure. They need to detect if any manual changes have been made to resources outside of CloudFormation. Which CloudFormation feature should they use?

Accepted Answer

Drift detection. CloudFormation drift detection compares the current state of resources with the expected state defined in the stack template. It identifies resources that have been modified manually, known as drift.

Answer

Change sets

Answer

Stack sets

Answer

Resource signals

Question 15

A developer wants to deploy an application using Azure Bicep. What is a key benefit of using Bicep over ARM templates?

Accepted Answer

Bicep has simpler, more readable syntax than ARM JSON. Bicep is a domain-specific language that provides a cleaner, more readable, and more concise syntax than ARM JSON templates. It abstracts away much of the JSON boilerplate, such as parameters, variables, and resource declarations, while still compiling to ARM JSON for deployment. This makes authoring and maintaining infrastructure-as-code easier.

Answer

Bicep can be used to manage any cloud provider

Answer

Bicep eliminates the need for resource providers

Answer

Bicep supports imperative scripting