CV0-004 Operations and Support Practice Test 2 — 15 Questions

Question 1

A cloud administrator needs to monitor CPU utilization for a fleet of EC2 instances and receive notifications when utilization exceeds 80%. Which AWS service should be used to create a metric alarm that triggers an SNS notification?

Accepted Answer

Amazon CloudWatch. Amazon CloudWatch is the AWS service for monitoring metrics and creating alarms. CloudWatch Alarms can be configured to trigger SNS notifications when a metric crosses a threshold.

Answer

AWS Config

Answer

AWS Trusted Advisor

Answer

AWS CloudTrail

Question 2

A company wants to centralize logs from multiple AWS services and analyze them using SQL-like queries. Which service should they use?

Accepted Answer

Amazon CloudWatch Logs Insights. Amazon CloudWatch Logs Insights allows querying log data using a SQL-like query language. CloudWatch Logs is the centralized log management service in AWS.

Answer

AWS CloudTrail

Answer

Amazon S3

Answer

AWS Config

Question 3

A cloud engineer is configuring an auto-scaling group and wants to add instances based on a sustained increase in CPU utilization above 80% for 5 minutes. Which scaling policy type should be used?

Accepted Answer

Step scaling policy. Step scaling policies allow you to define steps that respond to metric breaches with specific actions, such as adding a certain number of instances when CPU exceeds 80% for a specified period.

Answer

Target tracking scaling policy

Answer

Simple scaling policy

Answer

Scheduled scaling policy

Question 4

A cloud administrator needs to perform a disaster recovery test for a critical application running in a different AWS region. The RTO is 1 hour, and the RPO is 15 minutes. Which replication strategy should be used to meet the RPO?

Accepted Answer

Continuous replication. Continuous replication ensures data is replicated with minimal lag, typically meeting a 15-minute RPO. Snapshot-based replication would have longer intervals.

Answer

Hourly snapshot-based replication

Answer

Daily snapshot-based replication

Answer

Cross-region replication with eventual consistency

Question 5

A company uses AWS and wants to optimize costs by receiving recommendations to downsize over-provisioned EC2 instances. Which tool provides rightsizing recommendations?

Accepted Answer

AWS Compute Optimizer. AWS Compute Optimizer analyzes instance configurations and utilization to provide rightsizing recommendations, helping reduce costs by downsizing underutilized instances.

Answer

AWS Budgets

Answer

AWS Trusted Advisor

Answer

AWS Cost Explorer

Question 6

A cloud engineer is troubleshooting a performance issue in a multi-tier application on AWS. The web tier shows high latency, but the application logs indicate no errors. The engineer wants to trace a request end-to-end across services. Which AWS service should be used?

Accepted Answer

AWS X-Ray. AWS X-Ray provides distributed tracing, allowing you to trace requests as they travel through your application and identify performance bottlenecks.

Answer

VPC Flow Logs

Answer

Amazon CloudWatch Logs

Answer

AWS CloudTrail

Question 7

A cloud administrator needs to apply security patches to a fleet of EC2 instances running Windows Server. The patches must be applied during a maintenance window to minimize downtime. Which AWS service can automate patching?

Accepted Answer

AWS Systems Manager Patch Manager. AWS Systems Manager Patch Manager automates the process of patching managed instances with security updates and allows you to define maintenance windows.

Answer

AWS CloudFormation

Answer

AWS Config

Answer

Amazon Inspector

Question 8

Which GCP service provides centralized log management and analysis with the ability to create log-based metrics and alerts?

Accepted Answer

GCP Cloud Logging. GCP Cloud Logging is the centralized logging service that supports log-based metrics and alerting.

Answer

GCP Cloud Monitoring

Answer

GCP Cloud Audit Logs

Answer

GCP Cloud Trace

Question 9

A company wants to implement a tagging strategy for their cloud resources to track costs by department and project. Tags must be applied to resources such as virtual machines and storage buckets. Which of the following is a best practice for cost attribution using tags?

Accepted Answer

Define a set of mandatory tag keys such as CostCenter, Project, and Environment with standardized values.. Using a consistent tagging strategy with key-value pairs (e.g., Department:Finance, Project:Alpha) allows cost allocation and reporting in billing dashboards.

Answer

Apply tags to resources only after creation to avoid governance issues.

Answer

Use a single tag key 'Environment' with values 'Production' or 'Development'.

Answer

Use free-form text for tag values to allow flexibility.

Question 10

A cloud administrator is configuring an alert for an Azure virtual machine. The alert should trigger when the average CPU percentage exceeds 90% for more than 10 minutes. Which Azure service should be used to create this metric alert?

Accepted Answer

Azure Monitor Alerts. Azure Monitor Alerts allow you to create metric alerts based on conditions like CPU percentage thresholds and evaluation periods.

Answer

Azure Advisor

Answer

Azure Log Analytics

Answer

Azure Security Center

Question 11

A cloud engineer is configuring an auto-scaling group with a lifecycle hook to run a custom script when instances are launched. The script installs software and registers the instance with a load balancer. The engineer wants to ensure the instance does not receive traffic until the script completes successfully. What should the engineer do?

Accepted Answer

Use a lifecycle hook with a 'pending:wait' state and then send a 'complete-lifecycle-action' signal after the script succeeds.. Lifecycle hooks pause the instance launch process until you complete an action and notify the auto-scaling group to continue. By setting the hook to 'pending:wait', the instance remains in a pending state and does not become healthy until you send a 'complete-lifecycle-action' signal.

Answer

Set the lifecycle hook to 'terminating:wait' to delay termination.

Answer

Configure the load balancer health check to fail until the script runs.

Answer

Configure the launch configuration with a user-data script that runs after the instance is in service.

Question 12

A company uses AWS and wants to implement a disaster recovery plan with an RTO of 4 hours and RPO of 1 hour. They have a primary site in us-east-1 and a DR site in us-west-2. The application data is stored in Amazon RDS for MySQL. Which strategy meets both RTO and RPO with minimal data loss?

Accepted Answer

Create a cross-region read replica in us-west-2 and promote it during failover.. Cross-region read replicas for Amazon RDS provide asynchronous replication with a typical RPO of less than 5 minutes, easily meeting the 1-hour requirement. In a disaster, you can promote the replica to a primary instance within minutes, meeting the 4-hour RTO.

Answer

Use AWS Database Migration Service (DMS) for continuous replication to a separate RDS instance in us-west-2.

Answer

Export data to S3 using AWS Backup and restore in us-west-2.

Answer

Take daily automated snapshots of the RDS instance and copy them to us-west-2.

Question 13

A cloud administrator is configuring a notification channel for critical alerts. Which TWO of the following are commonly used notification channels in cloud monitoring systems? (Select TWO.)

Accepted Answer

Amazon Simple Notification Service (SNS). Common notification channels include email (SMTP) and integration services like Slack webhooks. SNS is an AWS notification service that can send to email or other endpoints, but PagerDuty is also a common integration.

Answer

Amazon CloudWatch Logs

Answer

AWS Organizations

Answer

AWS CloudTrail

Question 14

A cloud team is planning a disaster recovery drill for their application running in a public cloud. They want to validate that the recovery process meets the defined RTO and RPO. Which THREE activities should be included in the DR drill? (Select THREE.)

Accepted Answer

Measure the time taken to restore services from backups.. Key DR drill activities include verifying the recovery time, checking data freshness to validate RPO, and conducting failover testing to ensure the process works. Chaos engineering is for resilience testing but not specifically for RTO/RPO validation.

Answer

Review cost optimization recommendations for the DR environment.

Answer

Run chaos engineering experiments to introduce random failures.

Question 15

A cloud engineer is troubleshooting a network connectivity issue between two subnets in a VPC. The engineer wants to capture and analyze traffic metadata to identify dropped packets. Which TWO tools can provide this information? (Select TWO.)

Accepted Answer

AWS Network Firewall logs. VPC Flow Logs capture metadata about IP traffic going to and from network interfaces. AWS X-Ray provides distributed tracing but for application-level requests, not raw network traffic. AWS CloudTrail logs API calls, not traffic.

Answer

AWS X-Ray

Answer

Amazon CloudWatch Logs

Answer

AWS CloudTrail