CV0-004 Operations and Support Practice Test 1 — 15 Questions

Question 1

A cloud architect is designing a monitoring solution for a web application. Which service should they use to collect and visualize metrics such as CPU utilization and network throughput?

Accepted Answer

AWS CloudWatch. Amazon CloudWatch is the native AWS service for collecting, storing, and visualizing operational metrics such as CPU utilization, network throughput, disk I/O, and custom application metrics. It provides dashboards, metric math, and alarms, making it the correct choice for a monitoring solution that needs to display performance data. CloudWatch ingests both default EC2 metrics and custom metrics via the API or agent.

Answer

AWS CloudTrail

Answer

AWS Config

Answer

AWS Trusted Advisor

Question 2

A company wants to receive alerts when their cloud costs exceed a budget threshold. Which cost management feature should they use?

Accepted Answer

Cost anomaly detection alerts. Cost anomaly detection alerts are specifically designed to notify when spending patterns deviate from expected norms, including exceeding budget thresholds. This feature uses machine learning to identify unusual cost spikes and can trigger alerts via email or SNS. It directly addresses the requirement to receive alerts when costs exceed a budget threshold.

Answer

Rightsizing recommendations

Answer

Reserved Instance planning

Answer

Tagging strategy

Question 3

A cloud administrator is configuring automated scaling for a web application. The scaling policy should add two instances when CPU utilization exceeds 80% for five minutes. Which type of scaling policy should they implement?

Accepted Answer

Step scaling. Step scaling is the correct choice because it applies a specific, threshold-based adjustment — adding exactly two instances when CPU exceeds 80% for five minutes. Step scaling policies define discrete steps that increase or decrease capacity by a set amount based on the magnitude of the alarm breach, which matches the requirement of adding two instances at a defined threshold. This differs from target tracking, which automatically computes capacity to maintain a target metric value rather than applying a fixed instance count.

Answer

Scheduled scaling

Answer

Dynamic scaling

Answer

Target tracking scaling

Question 4

A systems administrator notices that an application is slow to respond. They want to analyze the latency of individual requests across microservices. Which tool should they use?

Accepted Answer

AWS X-Ray. AWS X-Ray is a distributed tracing service that instruments requests as they travel across microservices, producing a service map and trace segments with per-request latency breakdowns. This lets the administrator pinpoint which microservice or downstream call is causing the slowdown. It is purpose-built for analyzing latency in distributed architectures.

Answer

CloudWatch Logs

Answer

VPC Flow Logs

Answer

AWS CloudTrail

Question 5

A company uses multiple AWS accounts. The cloud team wants to allocate costs to specific business units. What should they implement?

Accepted Answer

Tagging strategy. A tagging strategy is the correct approach to allocate costs to specific business units across multiple AWS accounts. Tags are key-value pairs that can be applied to resources and used in cost allocation reports to categorize spending by business unit, project, or other dimensions.

Answer

Cost Explorer

Answer

AWS Budgets

Answer

AWS Organizations

Question 6

A company's disaster recovery plan requires them to restore a database to a specific point in time. Which backup strategy should they use?

Accepted Answer

Continuous replication for DR. Continuous replication (often implemented as continuous data protection or log shipping) captures every transaction or change and replicates it to a secondary location, enabling restore to any specific point in time (PITR) within the retention window. This satisfies the requirement to restore a database to a specific point in time, which full daily backups or snapshots cannot achieve at fine granularity.

Answer

Cross-region replication

Answer

Full daily backup

Answer

Snapshot-based backup

Question 7

A cloud administrator wants to be notified immediately via email when a critical alert is triggered. Which notification channel should they configure?

Accepted Answer

Email. Email is the correct notification channel because the requirement is to receive immediate notifications via email when a critical alert is triggered. Most cloud monitoring services allow configuring email as a notification channel directly within alert policies. This provides a direct and simple method to reach administrators.

Answer

AWS Config

Answer

Amazon SNS

Answer

AWS CloudTrail

Question 8

A company wants to implement automated patching for their cloud resources. Which TWO services are designed for patch management?

Accepted Answer

Azure Update Management. Azure Update Management (option D) is a native Azure service that assesses and deploys OS updates and patches to Windows and Linux machines, both in Azure and on-premises, making it a purpose-built patch management tool. AWS Systems Manager Patch Manager (option E) automates the process of patching managed nodes by scanning for missing patches and applying them via patch baselines and maintenance windows, directly fulfilling the automated patching requirement. Amazon Inspector (option A) is a vulnerability assessment service that identifies software vulnerabilities and unintended network exposure but does not deploy patches. GCP Cloud Audit Logs (option B) records administrative and data-access activity for auditing and compliance, not patching. AWS Config (option C) evaluates and records resource configuration compliance against rules but does not perform patch deployment.

Answer

Amazon Inspector

Answer

GCP Cloud Audit Logs

Answer

AWS Config

Question 9

A cloud engineer is configuring an auto-scaling group and wants to add instances based on a sustained increase in CPU utilization above 80% for 5 minutes. Which scaling policy type should be used?

Accepted Answer

Step scaling policy. A step scaling policy lets you define scaling adjustments that vary by the magnitude of the alarm breach — for example, add 1 instance when CPU is 80–90% and add 3 instances when CPU exceeds 90%. It is designed for metric-based, threshold-driven scaling with graduated responses, which matches the requirement of adding instances on a sustained CPU breach. Step policies also support warm-up and cooldown to prevent thrashing.

Answer

Target tracking scaling policy

Answer

Simple scaling policy

Answer

Scheduled scaling policy

Question 10

A company uses AWS and wants to implement a disaster recovery plan with an RTO of 4 hours and RPO of 1 hour. They have a primary site in us-east-1 and a DR site in us-west-2. The application data is stored in Amazon RDS for MySQL. Which strategy meets both RTO and RPO with minimal data loss?

Accepted Answer

Create a cross-region read replica in us-west-2 and promote it during failover.. A cross-region read replica in us-west-2 replicates asynchronously from the primary RDS MySQL instance, typically with sub-minute lag, meeting the 1-hour RPO. During failover, promoting the replica takes minutes, well within the 4-hour RTO, and minimizes data loss compared to snapshot-based approaches.

Answer

Use AWS Database Migration Service (DMS) for continuous replication to a separate RDS instance in us-west-2.

Answer

Export data to S3 using AWS Backup and restore in us-west-2.

Answer

Take daily automated snapshots of the RDS instance and copy them to us-west-2.

Question 11

A cloud engineer is troubleshooting a network connectivity issue between two subnets in a VPC. The engineer wants to capture and analyze traffic metadata to identify dropped packets. Which TWO tools can provide this information? (Select TWO.)

Accepted Answer

AWS Network Firewall logs. VPC Flow Logs (E) capture IP traffic metadata for network interfaces in a VPC, including source/destination IP, ports, protocol, and ACCEPT/REJECT actions, which directly reveals dropped packets between subnets. AWS Network Firewall logs (C) record traffic that passes through the firewall, including alert and flow logs that show allowed and blocked (dropped) packets, making them suitable for diagnosing connectivity failures. AWS X-Ray (A) is an application-level tracing service for distributed request tracing, not network packet metadata. Amazon CloudWatch Logs (B) is a general log storage and monitoring service that only shows network data if another service such as Flow Logs or Network Firewall publishes it there. AWS CloudTrail (D) records API activity and management events, not data-plane packet flows between subnets.

Answer

AWS X-Ray

Answer

Amazon CloudWatch Logs

Answer

AWS CloudTrail

Question 12

During a disaster recovery drill, a cloud engineer discovers that the RTO for a critical application is not being met. The application runs on EC2 instances with data in EBS volumes. Which change would most likely improve the RTO?

Accepted Answer

Enable cross-region replication for the EBS snapshots. Cross-region replication of EBS snapshots reduces the time to have data available in the recovery region. Changing replication frequency doesn't affect recovery time if snapshots are not pre-replicated. Using larger instances may not help if data transfer is the bottleneck. Scheduled scaling is unrelated to DR recovery.

Answer

Increase the frequency of EBS snapshots from daily to hourly

Answer

Configure scheduled scaling to pre-warm instances in the recovery region

Answer

Increase the EC2 instance size in the recovery region

Question 13

A cloud engineer is configuring auto-scaling for a web application. The scaling policy should add 2 instances when CPU utilization exceeds 80% for 5 consecutive minutes and remove 1 instance when CPU drops below 50% for 10 minutes. Which type of scaling policy should they use?

Accepted Answer

Step scaling policy. Step scaling allows adding or removing a specific number of instances based on the size of the alarm breach. Target tracking adjusts to maintain a target metric value. Simple scaling is older and less flexible. Scheduled scaling is time-based.

Answer

Scheduled scaling policy

Answer

Target tracking scaling policy

Answer

Simple scaling policy

Question 14

A cloud administrator needs to view the console output of a VM that failed to boot. Which feature should they use to access the boot logs?

Accepted Answer

Console output / serial console. The console output or serial console feature allows access to the boot logs of a VM, including BIOS messages, bootloader output, and kernel messages. This is essential when a VM fails to boot and you need to diagnose issues before the OS logging agent starts. It provides a direct view of the VM's console, similar to a physical monitor.

Answer

CloudWatch Logs agent

Answer

VM screenshot

Answer

System log from the hypervisor

Question 15

A cloud engineer is designing an auto-scaling solution for a stateful application. The scaling policy must ensure that instances are properly drained before termination and that new instances are fully initialized before receiving traffic. Which THREE features should be used? (Choose THREE.)

Accepted Answer

Elastic Load Balancer target group health checks. Option E (Lifecycle hooks) is correct because lifecycle hooks let the Auto Scaling group pause an instance in the terminating:wait state so it can be drained (e.g., deregistered from the load balancer and have connections closed) before termination, and pause in the pending:wait state so initialization scripts can finish before the instance is put into service. Option B (Elastic Load Balancer target group health checks) is correct because the target group health check determines whether an instance is healthy and eligible to receive traffic; an instance that is still initializing or failing checks is not routed traffic, and unhealthy instances can be replaced, which supports the requirement that new instances be fully initialized before serving requests. Option C (Auto-scaling group launch configurations with user data) is correct because user data in the launch configuration runs bootstrap/initialization scripts at instance launch, ensuring the stateful application is configured and ready before the instance is considered in service. Option A (Scheduled scaling actions) is not correct because scheduled scaling only adjusts desired capacity at specific times and does not drain instances or verify initialization. Option D (Cooldown periods) is not correct because cooldowns merely prevent the scaling group from launching or terminating additional instances immediately after a scaling activity; they do not perform connection draining or initialization checks.

Answer

Scheduled scaling actions

Answer

Cooldown periods