CV0-004 Operations and Support Practice Test 3 — 15 Questions

Question 1

A cloud administrator is configuring a notification channel for critical alerts. Which TWO of the following are commonly used notification channels in cloud monitoring systems? (Select TWO.)

Accepted Answer

Amazon Simple Notification Service (SNS). Common notification channels include email (SMTP) and integration services like Slack webhooks. SNS is an AWS notification service that can send to email or other endpoints, but PagerDuty is also a common integration.

Answer

Amazon CloudWatch Logs

Answer

AWS Organizations

Answer

AWS CloudTrail

Question 2

A cloud team is planning a disaster recovery drill for their application running in a public cloud. They want to validate that the recovery process meets the defined RTO and RPO. Which THREE activities should be included in the DR drill? (Select THREE.)

Accepted Answer

Measure the time taken to restore services from backups.. Key DR drill activities include verifying the recovery time, checking data freshness to validate RPO, and conducting failover testing to ensure the process works. Chaos engineering is for resilience testing but not specifically for RTO/RPO validation.

Answer

Review cost optimization recommendations for the DR environment.

Answer

Run chaos engineering experiments to introduce random failures.

Question 3

A cloud engineer is troubleshooting a network connectivity issue between two subnets in a VPC. The engineer wants to capture and analyze traffic metadata to identify dropped packets. Which TWO tools can provide this information? (Select TWO.)

Accepted Answer

AWS Network Firewall logs. VPC Flow Logs capture metadata about IP traffic going to and from network interfaces. AWS X-Ray provides distributed tracing but for application-level requests, not raw network traffic. AWS CloudTrail logs API calls, not traffic.

Answer

AWS X-Ray

Answer

Amazon CloudWatch Logs

Answer

AWS CloudTrail

Question 4

A cloud administrator needs to receive real-time notifications when CPU utilization exceeds 90% on a production server. Which AWS service should be used to trigger an alert based on a metric threshold?

Accepted Answer

CloudWatch Alarms. CloudWatch Alarms monitor metrics and trigger actions when a threshold is breached. SNS is a notification channel, not a metric monitor. CloudTrail logs API calls, and Config tracks configuration changes.

Answer

Amazon SNS

Answer

AWS Config

Answer

AWS CloudTrail

Question 5

A company uses a multi-cloud environment with AWS and Azure. They want to centralize log collection and enable advanced querying for troubleshooting. Which combination of services should they use?

Accepted Answer

AWS CloudWatch Logs and Azure Log Analytics. AWS CloudWatch Logs and Azure Log Analytics are the centralized logging services for each cloud. They can be aggregated using third-party tools, but the question asks for the native services to use. CloudWatch Logs for AWS, Log Analytics for Azure. CloudTrail is for API auditing, not general log collection.

Answer

AWS CloudTrail and Azure Monitor

Answer

AWS S3 and Azure Blob Storage

Answer

AWS CloudWatch and Azure Application Insights

Question 6

During a disaster recovery drill, a cloud engineer discovers that the RTO for a critical application is not being met. The application runs on EC2 instances with data in EBS volumes. Which change would most likely improve the RTO?

Accepted Answer

Enable cross-region replication for the EBS snapshots. Cross-region replication of EBS snapshots reduces the time to have data available in the recovery region. Changing replication frequency doesn't affect recovery time if snapshots are not pre-replicated. Using larger instances may not help if data transfer is the bottleneck. Scheduled scaling is unrelated to DR recovery.

Answer

Increase the frequency of EBS snapshots from daily to hourly

Answer

Configure scheduled scaling to pre-warm instances in the recovery region

Answer

Increase the EC2 instance size in the recovery region

Question 7

A cloud operations team is implementing a tagging strategy for cost attribution. They need to track costs by environment (dev, test, prod), project, and team. Which approach should they use?

Accepted Answer

Apply tags such as Environment, Project, and Team to all resources. Tags are key-value pairs that can be applied to resources. Using a consistent set of tags for all resources enables cost breakdown by those dimensions. Resource groups are Azure-specific and not universal. Naming conventions are less reliable. Separate accounts add overhead.

Answer

Use resource groups to organize resources by environment

Answer

Use resource naming conventions to encode environment and project

Answer

Create separate cloud accounts for each environment

Question 8

A cloud engineer notices that an auto-scaling group is adding and removing instances too frequently, causing instability. Which configuration parameter should be adjusted to reduce this behavior?

Accepted Answer

Increase the cooldown period. Cooldown periods prevent auto-scaling from launching or terminating instances too rapidly after a scaling activity. Scaling thresholds affect when scaling triggers, but the issue is frequency. Lifecycle hooks are for custom actions during scaling events. Health check grace period is for initial instance health.

Answer

Increase the health check grace period

Answer

Disable lifecycle hooks

Answer

Lower the scaling metric thresholds

Question 9

A company wants to implement automated patching for their Windows and Linux servers in AWS. They need to schedule patching during a maintenance window and have a rollback plan. Which service should they use?

Accepted Answer

AWS Systems Manager Patch Manager. AWS Systems Manager Patch Manager automates patching with maintenance windows and allows creation of patching baselines. It also supports rollback by restoring from AMIs or using AWS Backup. Inspector is for vulnerability scanning, not patching. Config is for compliance. OpsWorks is configuration management.

Answer

AWS OpsWorks

Answer

AWS Config

Answer

Amazon Inspector

Question 10

A cloud administrator wants to troubleshoot network connectivity issues between two VPCs. Which AWS feature provides detailed logs of IP traffic for analysis?

Accepted Answer

VPC Flow Logs. VPC Flow Logs capture information about IP traffic going to and from network interfaces in a VPC. CloudTrail logs API calls. CloudWatch Logs is for application logs. Route Tables define routing rules but don't log traffic.

Answer

AWS CloudTrail

Answer

VPC Route Tables

Answer

AWS CloudWatch Logs

Question 11

A cloud architect is designing a disaster recovery plan. The application requires a Recovery Time Objective (RTO) of 15 minutes and a Recovery Point Objective (RPO) of 1 hour. Which strategy best meets these requirements?

Accepted Answer

Continuous replication to a warm standby site. Continuous replication to a standby environment (pilot light or warm standby) can achieve low RTO and RPO. Snapshot-based with daily backups has RPO of 1 day. Cross-region replication of snapshots can have RPO hours. Warm standby with continuous replication meets both RTO and RPO.

Answer

Daily snapshots replicated to another region

Answer

Scheduled cross-region snapshots every 6 hours

Answer

Backup to tape and store offsite

Question 12

A cloud engineer is configuring auto-scaling for a web application. The scaling policy should add 2 instances when CPU utilization exceeds 80% for 5 consecutive minutes and remove 1 instance when CPU drops below 50% for 10 minutes. Which type of scaling policy should they use?

Accepted Answer

Step scaling policy. Step scaling allows adding or removing a specific number of instances based on the size of the alarm breach. Target tracking adjusts to maintain a target metric value. Simple scaling is older and less flexible. Scheduled scaling is time-based.

Answer

Scheduled scaling policy

Answer

Target tracking scaling policy

Answer

Simple scaling policy

Question 13

A company uses GCP and wants to implement alerting based on anomaly detection for their Compute Engine instances. Which GCP service should they use?

Accepted Answer

Cloud Monitoring. GCP's Cloud Monitoring (formerly Stackdriver) includes alerting policies that support anomaly detection. Cloud Logging is for logs. Cloud Audit Logs for auditing. Cloud Functions can be triggered but not directly for anomaly detection.

Answer

Cloud Logging

Answer

Cloud Functions

Answer

Cloud Audit Logs

Question 14

A cloud administrator needs to view the console output of a VM that failed to boot. Which feature should they use to access the boot logs?

Accepted Answer

Console output / serial console. Cloud providers offer console output or serial console access to view boot logs. Screenshots are also available but console output is the direct log. CloudWatch Logs might capture logs if the OS sends them, but for boot issues, console output is the native method.

Answer

CloudWatch Logs agent

Answer

VM screenshot

Answer

System log from the hypervisor

Question 15

A company wants to optimize cloud costs by identifying underutilized EC2 instances. Which AWS service provides rightsizing recommendations?

Accepted Answer

AWS Compute Optimizer. AWS Compute Optimizer analyzes resource utilization and provides recommendations to reduce cost and improve performance. AWS Cost Explorer is for cost visualization. AWS Trusted Advisor provides general best practice checks but not specific rightsizing. AWS Budgets is for budget alerts.

Answer

AWS Trusted Advisor

Answer

AWS Cost Explorer

Answer

AWS Budgets