CV0-004 Operations and Support Practice Test 11 — 15 Questions

Question 1

A company is experiencing intermittent performance issues in a microservices application. Which TWO tools can help diagnose latency problems through distributed tracing? (Choose TWO)

Accepted Answer

Azure Application Insights. Azure Application Insights (C) is correct because it provides distributed tracing across microservices, correlating requests with dependency calls and showing end-to-end latency breakdowns via the Application Map and transaction diagnostics. AWS X-Ray (E) is correct because it natively performs distributed tracing for microservices, using trace IDs and segments/subsegments to visualize latency bottlenecks across services, including integrations with Lambda, API Gateway, and ECS. AWS CloudWatch Logs (A) only aggregates log data and does not by itself provide distributed trace correlation across services. Azure Monitor (B) is a broader monitoring platform whose distributed tracing capability comes specifically through Application Insights, so it is not the precise tracing tool here. AWS CloudTrail (D) records API activity for auditing and governance, not request-level latency tracing.

Answer

AWS CloudWatch Logs

Answer

Azure Monitor

Answer

AWS CloudTrail

Question 2

A cloud administrator wants to choose an auto-scaling policy that can respond to changing demand patterns. Which TWO policy types support dynamic adjustments based on real-time metrics? (Choose TWO)

Accepted Answer

Target tracking scaling. Target tracking scaling (B) is correct because it continuously adjusts capacity to keep a chosen metric (such as average CPU utilization or ALB request count per target) at a specified target value, reacting dynamically to real-time metric fluctuations. Step scaling (C) is also correct because it adds or removes capacity in defined step adjustments when a CloudWatch alarm breaches a threshold, allowing graduated responses to real-time metric changes. Predictive scaling (A) is not correct here because it forecasts future demand from historical patterns and provisions capacity ahead of time rather than reacting to real-time metrics. Scheduled scaling (D) is not correct because it scales based on a defined date/time schedule, not on live metrics. Simple scaling (E) is not correct because it performs a single fixed adjustment when an alarm triggers and then enforces a cooldown, so it does not provide the dynamic, metric-driven responsiveness described.

Answer

Predictive scaling

Answer

Scheduled scaling

Answer

Simple scaling

Question 3

A cloud administrator is investigating a sudden increase in cost for a production environment. The administrator wants to identify the sources of the cost increase and implement a tagging strategy for cost allocation. Which TWO actions should the administrator take? (Choose two.)

Accepted Answer

Use the cloud provider's cost explorer to analyze cost drivers.. Option B is correct because the cloud provider's cost explorer (e.g., AWS Cost Explorer or Azure Cost Management) lets the administrator visualize and filter spending by service, account, region, and tag, which directly identifies the sources of the sudden cost increase. Option C is correct because enabling detailed billing reports (such as AWS Cost and Usage Report or Azure detailed usage data) with resource tags activated provides granular, per-resource cost and usage data that is required to build and validate a tag-based cost allocation strategy. Option A is not correct because a rightsizing recommendation report only suggests instance size or type changes and does not analyze cost drivers or enable tag-based allocation. Option D is not correct because purchasing Reserved Instances for all resources is a commitment-based discount action, not an investigation or tagging strategy, and could increase risk if usage changes. Option E is not correct because a budget alert only notifies when total monthly cost crosses a threshold; it does not identify cost sources or implement tagging for allocation.

Answer

Implement a rightsizing recommendation report.

Answer

Purchase Reserved Instances for all resources.

Answer

Create a budget alert for the total monthly cost.

Question 4

A company is designing a disaster recovery plan for a critical database that requires a recovery point objective (RPO) of 1 minute and a recovery time objective (RTO) of 15 minutes. The database runs on a cloud virtual machine. Which backup strategy should the administrator implement to meet these requirements?

Accepted Answer

Implement continuous replication to a standby instance in a different region.. Continuous replication to a standby instance in a different region provides an RPO of near-zero (often seconds) and an RTO of minutes, as the standby can be promoted quickly. This meets the 1-minute RPO and 15-minute RTO requirements. It also provides cross-region disaster recovery, which is essential for critical databases.

Answer

Take daily snapshots and store them in the same region.

Answer

Perform weekly backups to tape and store offsite.

Answer

Use cross-region snapshot replication with hourly snapshots.

Question 5

A cloud application is experiencing intermittent high latency. The operations team has enabled distributed tracing using AWS X-Ray but is unable to pinpoint the source. Which additional step should the team take to identify the root cause of the latency?

Accepted Answer

Analyze traces in X-Ray to identify which service segment has the highest duration.. AWS X-Ray provides distributed tracing that captures latency data for each segment of a request. To pinpoint the source of intermittent high latency, the team should analyze the traces to identify which service segment has the highest duration. This directly reveals the bottleneck, whether it's a database call, external API, or compute-intensive operation. Other steps like VPC Flow Logs or application logs may provide additional context but are not as directly actionable for latency root cause.

Answer

Enable VPC Flow Logs to analyze network traffic patterns.

Answer

Increase the auto-scaling group size to handle the load.

Answer

Examine application logs on each virtual machine.

Question 6

A cloud operations team runs a fleet of Amazon EC2 instances behind an Application Load Balancer. During a load test, the team notices that healthy targets are being marked unhealthy and removed from rotation whenever a deployment briefly pushes CPU utilization above 90 percent. The team wants the load balancer to remove an instance only when the application stops responding to HTTP requests, not when it is merely busy. Which action should the team take?

Accepted Answer

Configure the target group health check to use the HTTP protocol on the application's health endpoint with a matcher for 200 and increase the unhealthy threshold.. Health checks should reflect the actual availability of the application, not incidental resource pressure. Switching the target group to an HTTP check against a dedicated health endpoint, expecting a 200 response, and lengthening the unhealthy threshold lets the load balancer distinguish a genuinely unresponsive target from one that is simply handling heavy load. This keeps instances in service during short CPU spikes, which is exactly the deployment behavior the team wants to preserve.

Answer

Enable sticky sessions on the load balancer so that clients remain bound to the same instance throughout the deployment.

Answer

Create a CloudWatch alarm on the CPUUtilization metric and attach it to an Auto Scaling group scaling policy to replace instances above 90 percent.

Answer

Change the target group health check to TCP on the instance port and raise the healthy threshold so instances rejoin faster.

Question 7

A cloud operations engineer is responsible for a fleet of Amazon EC2 instances that run a stateless web application behind an Application Load Balancer. The engineer needs to perform a rolling replacement of the instances with a new AMI while ensuring that the application remains available and that the deployment automatically rolls back if a specified Amazon CloudWatch alarm enters the ALARM state. Which AWS deployment service should the engineer use?

Accepted Answer

AWS CodeDeploy. AWS CodeDeploy is designed for automated application deployments to EC2 instances and supports rolling deployment configurations. It integrates with CloudWatch alarms so that if a specified alarm enters the ALARM state during a deployment, CodeDeploy automatically rolls back to the last known good revision, keeping the application available and meeting the rollback requirement.

Answer

AWS OpsWorks Stacks

Answer

AWS CloudFormation

Answer

AWS Elastic Beanstalk

Question 8

A cloud operations team manages a multi-tier web application on Google Cloud. The application logs are being written to Cloud Logging, and the team needs to be alerted whenever the number of HTTP 500 errors exceeds 50 in a 5-minute window. Which action should the team take to meet this requirement?

Accepted Answer

Create a log-based metric in Cloud Logging that counts HTTP 500 entries, then create a Cloud Monitoring alerting policy based on that metric with a threshold of 50 over 5 minutes.. The correct approach is to derive a metric from the logs using a log-based metric in Cloud Logging, then use Cloud Monitoring to alert on that metric. This natively supports counting specific log entries and applying a threshold over a time window, which matches the requirement exactly without custom code.

Answer

Enable Cloud Trace on the application and create an alerting policy that triggers when the error rate exceeds 50 per 5 minutes.

Answer

Use Cloud Monitoring uptime checks to monitor the application endpoint and alert when the failure count exceeds 50 in 5 minutes.

Answer

Configure a Cloud Logging sink to Pub/Sub and create a Cloud Function that counts errors and sends an email when the count exceeds 50.

Question 9

A cloud administrator is managing a Microsoft Azure environment. The administrator needs to enforce a policy that prevents the creation of any Azure Storage account without HTTPS-only traffic enabled and without a minimum TLS version of 1.2. The policy must apply to all current and future subscriptions in the tenant and must be evaluated when resources are created or updated. Which Azure feature should the administrator use?

Accepted Answer

Azure Policy. Azure Policy is the correct choice because it evaluates resource properties during create and update operations and can deny noncompliant resources. Assigning a policy that requires HTTPS-only traffic and TLS 1.2 at a management group scope ensures the rule applies to all current and future subscriptions in the tenant, satisfying both the enforcement and scope requirements.

Answer

Azure Role-Based Access Control (RBAC)

Answer

Azure Blueprints

Answer

Microsoft Defender for Cloud

Question 10

A cloud engineer is responsible for a Kubernetes cluster on AWS EKS. The cluster runs a stateful application that requires persistent storage. The engineer must ensure that storage volumes are automatically provisioned when persistent volume claims are created, and that the storage remains available if the pod is rescheduled to a different node. Which solution should the engineer implement?

Accepted Answer

Create a StorageClass that uses the AWS EBS CSI driver with the WaitForFirstConsumer volume binding mode, and reference it in a PersistentVolumeClaim.. The AWS EBS CSI driver with a StorageClass and WaitForFirstConsumer binding mode enables dynamic provisioning of persistent EBS volumes. It ensures the volume is created in the correct availability zone and can be reattached when the pod is rescheduled, satisfying both automatic provisioning and data persistence.

Answer

Use hostPath volumes in the pod specification to provide local storage on each node.

Answer

Configure a PersistentVolume manually for each pod and use node affinity to pin the pod to the node where the volume is located.

Answer

Use an emptyDir volume with a persistent volume claim template to provide storage that survives pod restarts.

Question 11

A cloud operations team runs a three-tier web application on AWS. During a recent incident, the on-call engineer received hundreds of Amazon CloudWatch alarms within minutes and could not identify the root cause. The team wants to reduce alarm fatigue while still capturing meaningful signals. Which action should the team take FIRST?

Accepted Answer

Create composite alarms that combine related metric and state alarms using AND/OR logic, and route only the composite alarm to the notification topic.. Composite alarms exist specifically to reduce noise by evaluating multiple child alarms with Boolean operators and firing a single notification only when the combined condition is met. This preserves granular child alarms for troubleshooting while giving on-call engineers one correlated, actionable signal, which is the fastest way to reduce alarm fatigue without losing observability.

Answer

Increase each alarm's evaluation period from 1 minute to 60 minutes so that fewer state transitions occur during an incident.

Answer

Delete all metric alarms and rely solely on AWS Health Dashboard notifications for operational awareness.

Answer

Configure the SNS topic to buffer notifications and deliver them as a single daily digest email to the operations team.

Question 12

A cloud engineer is investigating intermittent latency in a three-tier application hosted in Google Cloud. The engineer suspects that a specific Compute Engine instance is experiencing packet loss to its database backend. The engineer needs to capture and analyze the traffic at the packet level on the instance without installing third-party agents on the instance and without disrupting production traffic. Which Google Cloud feature should the engineer use?

Accepted Answer

Packet Mirroring. Packet Mirroring is the correct choice because it clones traffic at the VPC level and forwards it to a collector without requiring an agent on the source instance and without affecting production traffic. This gives the engineer full packet-level visibility to analyze retransmissions, dropped packets, and TCP behavior between the instance and the database.

Answer

Cloud NAT logging

Answer

Firewall Rules Logging

Answer

VPC Flow Logs

Question 13

A cloud administrator manages an Amazon EC2 Auto Scaling group behind an Application Load Balancer. Users report intermittent 502 errors during scale-in events. Logs show that instances are terminated while still serving in-flight requests. Which configuration change should the administrator make to resolve this?

Accepted Answer

Enable connection draining on the load balancer and increase the deregistration delay to allow in-flight requests to complete before instance termination.. The 502 errors occur because instances are terminated while still processing requests. Enabling connection draining with an appropriate deregistration delay makes Auto Scaling wait until the load balancer confirms the target is no longer receiving traffic before terminating it, allowing in-flight requests to complete and eliminating the error condition.

Answer

Increase the Auto Scaling group's cooldown period so that scale-in events occur less frequently throughout the day.

Answer

Enable sticky sessions on the load balancer so that each user's requests are consistently routed to the same backend instance.

Answer

Change the health check type from ELB to EC2 so that the Auto Scaling group relies on instance status checks instead of load balancer health.

Question 14

A cloud operations team runs a fleet of Amazon EC2 instances behind an Application Load Balancer. During a recent incident, the team discovered that a single unhealthy instance continued to receive traffic for several minutes before being removed. The team wants to reduce the time it takes for the load balancer to detect and stop routing traffic to unhealthy targets. Which action should the administrator take to meet this requirement?

Accepted Answer

Reduce the health check interval and unhealthy threshold in the target group health check settings.. Health check behavior for an Application Load Balancer target group is governed by the interval, timeout, healthy threshold, and unhealthy threshold. Lowering the interval and reducing the number of consecutive failures required to mark a target unhealthy shortens detection time, which directly addresses the requirement to remove unhealthy instances from rotation faster.

Answer

Increase the deregistration delay so connections drain gracefully before instances are removed.

Answer

Change the load balancer scheme from internet-facing to internal to reduce probe latency.

Answer

Enable sticky sessions on the target group so clients remain bound to a single healthy instance.

Question 15

A cloud administrator is responsible for a set of Linux virtual machines in AWS. The administrator needs to run a script on all of the instances at a scheduled time each night to rotate application logs. The script must run without the administrator logging in to each instance, and the administrator wants to avoid managing SSH keys for this task. Which AWS service should the administrator use?

Accepted Answer

AWS Systems Manager Run Command. AWS Systems Manager Run Command is designed to run commands and scripts on managed instances at scale without requiring SSH access. It uses the Systems Manager agent and IAM roles for authentication, and it can be scheduled through maintenance windows or EventBridge rules, which matches the nightly log rotation requirement without SSH key management.

Answer

AWS Trusted Advisor

Answer

AWS CloudTrail

Answer

AWS Config