CV0-004 Deployment Practice Test 8 — 15 Questions

Question 1

A cloud engineer is designing a CI/CD pipeline using Azure DevOps. They need to ensure that code changes are automatically built, tested, and deployed to a staging environment, and then after manual approval, deployed to production. Which pipeline configuration should they use?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Multi-stage pipeline with environment approvals on the production stage. Azure DevOps multi-stage pipelines allow defining stages such as build, test, and deploy, with gates and approvals. An approval gate on the production stage ensures manual review before deployment.

Answer

Single stage pipeline with conditional deployment

Answer

Release pipeline with continuous deployment trigger

Answer

Build pipeline only

Question 2

A company is migrating an on-premises MySQL database to Azure SQL Database using Azure Database Migration Service. They want minimal downtime. Which migration mode should they choose?

Accepted Answer

Online migration with continuous sync. Azure DMS offers online migration mode that uses CDC to replicate ongoing changes, allowing near-zero downtime. Offline mode requires stopping writes during migration.

Answer

Bulk copy

Answer

Offline migration

Answer

Schema conversion only

Question 3

A cloud team is implementing a CI/CD pipeline for a containerized application. They want to automatically build a Docker image, push it to a registry, and deploy it to a Kubernetes cluster. Which TWO tools from the options below are commonly used as part of this pipeline? (Select 2)

Accepted Answer

Jenkins. Jenkins and GitLab CI are both CI/CD tools that can build Docker images, push to registries, and deploy to Kubernetes. Terraform and CloudFormation are IaC tools, not CI/CD. Docker Compose is for local development.

Answer

CloudFormation

Answer

Terraform

Answer

Docker Compose

Question 4

A cloud architect is designing a Kubernetes deployment for a stateless web application. The application must be highly available and automatically recover from failures. Which THREE components are required to achieve this? (Select 3)

Accepted Answer

Deployment resource. A Deployment manages replicas and supports rolling updates. A Service provides stable networking to the pods. Readiness probes ensure only healthy pods receive traffic. ConfigMaps and StatefulSets are not required for stateless HA.

Answer

ConfigMap

Answer

StatefulSet

Question 5

A cloud engineer is writing a Terraform configuration to deploy an AWS EC2 instance. Which file extension is typically used for Terraform configuration files written in HCL?

Accepted Answer

.tf. Terraform configuration files written in HCL (HashiCorp Configuration Language) typically use the .tf file extension. This is the standard convention for Terraform modules and configurations, and Terraform automatically loads files with this extension. Other extensions like .tf.json are used for JSON-based configurations, but .tf is the primary one for HCL.

Answer

.yaml

Answer

.json

Answer

.hcl

Question 6

An organization wants to deploy a new microservice to a Kubernetes cluster with zero downtime. The deployment should update pods gradually by replacing old pods with new ones, and if the new pods fail health checks, the rollout should stop. Which Kubernetes deployment strategy meets these requirements?

Accepted Answer

Rolling update. A rolling update strategy in Kubernetes replaces pods incrementally and can be configured to pause on failed health checks.

Answer

Canary

Answer

Recreate

Answer

Blue/green

Question 7

A DevOps team uses Ansible to automate cloud resource provisioning. Which of the following best describes Ansible's architecture?

Accepted Answer

It is agentless and uses SSH or WinRM to execute tasks.. Ansible is agentless and uses SSH (for Linux/Unix) or WinRM (for Windows) to execute tasks on managed nodes. The control node pushes modules to target hosts over these standard protocols, executes them, and removes them — no persistent agent or daemon is required on managed nodes.

Answer

It uses a declarative language similar to Terraform.

Answer

It uses a master-server architecture with a central controller.

Answer

It requires an agent installed on each managed node.

Question 8

A cloud engineer needs to deploy a serverless function that runs when a new object is uploaded to an S3 bucket. Which AWS service event trigger should be configured?

Accepted Answer

S3. Amazon S3 can directly invoke AWS Lambda when a new object is uploaded by configuring an S3 event notification on the bucket. This native integration allows the S3 service to trigger the function without any intermediary service, making option C the correct choice for a serverless function triggered by an S3 upload event.

Answer

API Gateway

Answer

EventBridge

Answer

SQS

Question 9

A company uses CloudFormation to manage infrastructure across multiple AWS accounts. They want to deploy a common set of resources (e.g., VPC, IAM roles) to all accounts in their organization. Which CloudFormation feature should they use?

Accepted Answer

Stack sets. CloudFormation StackSets allow you to deploy a single template across multiple AWS accounts and regions in one operation, using either self-managed permissions or AWS Organizations integration. This is the designed feature for organization-wide resource deployment like VPCs and IAM roles. StackSets handle the orchestration, rollback, and drift detection across all target accounts.

Answer

Change sets

Answer

Nested stacks

Answer

Drift detection

Question 10

An organization uses Azure DevOps for CI/CD. They want to implement a deployment strategy where a new version of an application is deployed to a small subset of users (e.g., 5%) and if no errors are detected, the percentage is gradually increased to 100%. Which deployment strategy should they use?

Accepted Answer

Canary. Canary deployment routes a small percentage of live traffic (e.g., 5%) to the new version while the majority still hits the stable version, then gradually shifts traffic as health metrics remain clean. Azure DevOps supports this natively via deployment rings, traffic-splitting in App Service/Container Apps, or feature flags. The gradual, metric-gated traffic shift is the defining characteristic of canary.

Answer

Rolling

Answer

Recreate

Answer

Blue/green

Question 11

A DevOps team is implementing a CI/CD pipeline using Jenkins. They want to ensure that code is automatically built, tested, and deployed to a staging environment before manual approval for production. Which stage should include the deployment to staging?

Accepted Answer

Deploy. In a Jenkins CI/CD pipeline, the Deploy stage is responsible for taking the built and verified artifact and releasing it to an environment — in this case, the staging environment. The pipeline flow is typically Source → Build → Test/Verify → Deploy (staging) → Manual Approval → Deploy (production). Placing staging deployment in the Deploy stage correctly separates it from build and test activities.

Answer

Build

Answer

Source

Answer

Verify

Question 12

A cloud engineer needs to deploy a containerized application on Amazon EKS. The application requires a persistent storage volume that can be dynamically provisioned. Which Kubernetes resource should be used to request storage?

Accepted Answer

PersistentVolumeClaim. A PersistentVolumeClaim (PVC) is the correct Kubernetes resource to request storage because it acts as a request for storage by a pod, specifying size, access modes, and optionally a StorageClass. In Amazon EKS, a PVC can trigger dynamic provisioning of an EBS or EFS volume via a StorageClass, decoupling the storage request from the underlying PersistentVolume. This allows the cloud engineer to deploy the containerized application without manually pre-provisioning storage.

Answer

PersistentVolume

Answer

StorageClass

Answer

ConfigMap

Question 13

A cloud architect is designing a deployment pipeline using GitHub Actions. They want to automatically run tests on every push to the main branch. Which GitHub Actions component defines the automation workflow?

Accepted Answer

Workflow. A GitHub Actions workflow is the top-level YAML file (in .github/workflows) that defines when automation runs and what jobs it contains. It is the component that binds triggers (like push to main) to jobs and steps, so it is the correct answer for 'defines the automation workflow.'

Answer

Job

Answer

Step

Answer

Action

Question 14

A company is planning to migrate a 200 TB on-premises file server to AWS S3. The network link is 1 Gbps and cannot be saturated due to other traffic. The migration must be completed within two weeks. Which TWO services or features should the cloud engineer consider to accelerate the transfer? (Choose two.)

Accepted Answer

AWS DataSync. AWS DataSync is correct because it is designed to efficiently migrate large datasets to AWS by using parallel multi-threaded transfers and incremental syncs, which can optimize the use of the available 1 Gbps link without saturating it. It can handle the 200 TB file server migration by automating the transfer and reducing the time required compared to manual copying, though the 1 Gbps link alone may still be insufficient for the two-week window, making it a partial solution.

Answer

AWS Direct Connect

Answer

AWS DMS

Answer

AWS Storage Gateway

Question 15

A cloud team uses Azure Bicep for deploying resources. They need to create a modular deployment that includes a virtual network and a subnet. Which THREE best practices should they follow when authoring Bicep files? (Choose three.)

Accepted Answer

Use modules to encapsulate and reuse resource definitions.. Using parameters for configurable values, using modules for reuse, and using symbolic names for resource references are best practices.

Answer

Use hard-coded resource names to ensure consistency.

Answer

Define all resources in a single file for simplicity.