CV0-004 Deployment Practice Test 9 — 15 Questions

Question 1

A cloud engineer is writing a Terraform configuration to deploy an AWS EC2 instance. The engineer wants to pass the AMI ID and instance type into the configuration at runtime without hardcoding them. Which Terraform feature should be used?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Variables. Variables in Terraform allow you to define parameters that can be supplied at runtime, making configurations reusable and flexible.

Answer

Locals

Answer

Outputs

Answer

Data sources

Question 2

A company uses AWS CloudFormation to manage its infrastructure. After updating a stack, a developer notices that the actual infrastructure differs from the expected template. Which CloudFormation feature should be used to identify these differences?

Accepted Answer

Drift detection. Drift detection allows you to detect whether a stack's actual configuration differs from its expected template configuration.

Answer

Stack sets

Answer

Change sets

Answer

Rollback triggers

Question 3

An organization is implementing a CI/CD pipeline for a critical application. The team wants to deploy a new version to a small subset of users initially to validate performance and functionality before rolling out to the entire user base. Which deployment strategy best fits this requirement?

Accepted Answer

Canary deployment. Canary deployment releases the new version to a small percentage of users, monitors its performance, and gradually increases traffic if successful.

Answer

Rolling deployment

Answer

Blue/green deployment

Answer

Immutable deployment

Question 4

A DevOps engineer is configuring a Kubernetes deployment for a microservices application. The application requires that new pods receive traffic only after a health check endpoint returns HTTP 200. Which Kubernetes feature should be configured on the pods?

Accepted Answer

Readiness probe. A readiness probe determines whether a pod is ready to receive traffic. If the readiness probe fails, the pod is removed from the endpoints of the service, preventing traffic from being sent to it until it passes. This matches the requirement that new pods receive traffic only after a health check endpoint returns HTTP 200.

Answer

Startup probe

Answer

Liveness probe

Answer

Resource limits

Question 5

A company needs to migrate 50 TB of data from an on-premises file server to a cloud storage service. The network bandwidth is limited and the migration must be completed within one week. Which cloud service is specifically designed for offline data transfer of large datasets?

Accepted Answer

Offline data transfer via physical device. Offline data transfer via physical device is specifically designed for offline data transfer of large datasets, such as 50 TB, when network bandwidth is limited. It provides physical storage devices that are shipped to the customer, loaded with data, and returned to the cloud provider for ingestion into the cloud storage service, bypassing network constraints entirely. This makes it the ideal choice for completing a 50 TB migration within one week over a limited bandwidth connection.

Answer

Online data transfer service

Answer

Batch processing service

Answer

Data transfer acceleration

Question 6

An Azure administrator needs to deploy a cloud-native application using Azure DevOps. The team wants to define the entire Azure infrastructure as code using a declarative language that is concise and integrated with Azure. Which tool should the administrator use?

Accepted Answer

Bicep. Bicep is a domain-specific language for deploying Azure resources that provides a simpler syntax than ARM templates while being fully integrated with Azure.

Answer

Terraform

Answer

Ansible

Answer

ARM templates (JSON)

Question 7

A cloud engineer is using Ansible to automate the configuration of cloud resources. The engineer needs to ensure that the automation does not require any agent software to be installed on the target nodes. Which characteristic of Ansible makes this possible?

Accepted Answer

It is agentless. Ansible is agentless because it communicates with managed nodes over standard SSH (Linux/Unix) or WinRM (Windows) rather than requiring a persistent agent daemon to be installed and maintained on each target. The control node pushes Python-based modules to the target at runtime, executes them, and removes them afterward. This is why option C directly answers the requirement that no agent software be installed on target nodes.

Answer

It uses PowerShell Desired State Configuration

Answer

It uses a master-agent architecture

Answer

It requires a pull-based model

Question 8

An organization is migrating a MySQL database to Amazon Aurora with minimal downtime. The migration must capture ongoing changes from the source database and apply them to the target during the cutover. Which AWS Database Migration Service (DMS) feature should be used?

Accepted Answer

Change data capture (CDC). Change data capture (CDC) in AWS DMS continuously reads the source database's transaction log (binary log for MySQL) and applies ongoing changes to the target, enabling near-zero-downtime cutover. It is the specific DMS feature designed to replicate changes that occur after the initial full load.

Answer

Validation

Answer

Full load only

Answer

Schema conversion

Question 9

A developer is deploying a serverless function that processes images uploaded to an S3 bucket. The function should be triggered automatically whenever a new object is created in the bucket. Which event source should be configured to invoke the Lambda function?

Accepted Answer

Amazon S3. Amazon S3 is the correct event source because it natively supports event notifications that can directly invoke AWS Lambda functions when objects are created, deleted, or modified in a bucket. This integration is built into the S3 service and requires no additional services or polling. The developer simply configures an S3 bucket notification to trigger the Lambda function on 's3:ObjectCreated:*' events, which is the standard serverless pattern for processing uploaded files.

Answer

Amazon SQS

Answer

Amazon EventBridge

Answer

API Gateway

Question 10

A company is adopting a CI/CD pipeline using Jenkins to deploy a web application. The pipeline must include steps to compile code, run unit tests, package the application, deploy to a test environment, and then deploy to production. Which pipeline stage should be configured immediately after the build stage?

Accepted Answer

Test. In a typical CI/CD pipeline, after build (compile) comes test (e.g., unit tests) to validate the code before proceeding to deploy.

Answer

Verify

Answer

Deploy to production

Answer

Source

Question 11

A cloud architect is designing a multi-account AWS environment and wants to deploy CloudFormation stacks consistently across many accounts. The architect needs a solution that can manage stack instances across multiple accounts and Regions from a single administrator account. Which AWS feature should be used?

Accepted Answer

Stack sets. AWS CloudFormation StackSets allow you to deploy stacks across multiple accounts and Regions from a single administrator account. They are designed for consistent, scalable deployments, enabling you to create, update, or delete stacks in many accounts simultaneously using a single CloudFormation template and set of parameters.

Answer

Drift detection

Answer

Nested stacks

Answer

Change sets

Question 12

A DevOps team wants to deploy a Kubernetes application using a package manager that simplifies the deployment process by bundling all Kubernetes resources into a single package. Which tool should the team use?

Accepted Answer

Helm. Helm is the package manager for Kubernetes that uses charts to define, install, and upgrade even the most complex Kubernetes applications.

Answer

Kustomize

Answer

Ansible

Answer

Terraform

Question 13

A cloud engineer is planning a database migration from an on-premises Oracle database to Amazon RDS for PostgreSQL. The migration must minimize downtime and preserve ongoing changes. Which TWO services should the engineer consider using together? (Choose two.)

Accepted Answer

AWS Database Migration Service (DMS). Option C, AWS Database Migration Service (DMS), is correct because DMS is purpose-built for migrating databases to AWS with minimal downtime, supporting ongoing replication (change data capture) from the source Oracle database to the target RDS for PostgreSQL so that changes made during the migration are continuously applied. Option E, AWS Schema Conversion Tool (SCT), is correct because migrating from Oracle to PostgreSQL involves heterogeneous engine conversion, and SCT automatically converts the source schema, stored procedures, and other database objects into a PostgreSQL-compatible format that DMS can then use for the data migration. The unmarked options do not belong: AWS DataSync (A) is for transferring file and object data, not for database replication; AWS Snowball (B) is a physical device for bulk offline data transfer; and Amazon S3 Transfer Acceleration (D) only speeds up uploads to S3 and has no role in database migration or schema conversion.

Answer

AWS DataSync

Answer

AWS Snowball

Answer

Amazon S3 Transfer Acceleration

Question 14

A cloud engineer is tasked with deploying a containerized application on Kubernetes. The application must handle varying loads, and the deployment should automatically replace failed containers. Which Kubernetes object should the engineer use to achieve self-healing and scalability?

Accepted Answer

Deployment. A Deployment is the correct Kubernetes object because it manages ReplicaSets to provide declarative updates, self-healing (automatic replacement of failed pods), and scalability (adjusting replica counts). Unlike a standalone Pod, a Deployment ensures the desired state is maintained, automatically rescheduling containers if they fail.

Answer

ConfigMap

Answer

Service

Answer

Pod

Question 15

A DevOps team uses Terraform to manage cloud infrastructure. They want to store the state file in a remote backend to enable team collaboration. Which backend configuration stores Terraform state in an S3 bucket?

Accepted Answer

backend 's3'. Terraform's 's3' backend is specifically designed to store state files in an AWS S3 bucket, enabling team collaboration through remote state locking and versioning. This backend uses the AWS SDK to interact with S3, supporting features like DynamoDB-based state locking and encryption with KMS.

Answer

backend 'consul'

Answer

backend 'azurerm'

Answer

backend 'gcs'