CV0-004 Operations and Support Practice Test 3 — 15 Questions

Question 1

A cloud administrator needs to receive real-time notifications when CPU utilization exceeds 90% on a production server. Which AWS service should be used to trigger an alert based on a metric threshold?

Accepted Answer

CloudWatch Alarms. CloudWatch Alarms monitor metrics and trigger actions when a threshold is breached. SNS is a notification channel, not a metric monitor. CloudTrail logs API calls, and Config tracks configuration changes.

Answer

Amazon SNS

Answer

AWS Config

Answer

AWS CloudTrail

Question 2

A company uses a multi-cloud environment with AWS and Azure. They want to centralize log collection and enable advanced querying for troubleshooting. Which combination of services should they use?

Accepted Answer

AWS CloudWatch Logs and Azure Log Analytics. AWS CloudWatch Logs and Azure Log Analytics are the centralized logging services for each cloud. They can be aggregated using third-party tools, but the question asks for the native services to use. CloudWatch Logs for AWS, Log Analytics for Azure. CloudTrail is for API auditing, not general log collection.

Answer

AWS CloudTrail and Azure Monitor

Answer

AWS S3 and Azure Blob Storage

Answer

AWS CloudWatch and Azure Application Insights

Question 3

During a disaster recovery drill, a cloud engineer discovers that the RTO for a critical application is not being met. The application runs on EC2 instances with data in EBS volumes. Which change would most likely improve the RTO?

Accepted Answer

Enable cross-region replication for the EBS snapshots. Cross-region replication of EBS snapshots reduces the time to have data available in the recovery region. Changing replication frequency doesn't affect recovery time if snapshots are not pre-replicated. Using larger instances may not help if data transfer is the bottleneck. Scheduled scaling is unrelated to DR recovery.

Answer

Increase the frequency of EBS snapshots from daily to hourly

Answer

Configure scheduled scaling to pre-warm instances in the recovery region

Answer

Increase the EC2 instance size in the recovery region

Question 4

A cloud operations team is implementing a tagging strategy for cost attribution. They need to track costs by environment (dev, test, prod), project, and team. Which approach should they use?

Accepted Answer

Apply tags such as Environment, Project, and Team to all resources. Tags are key-value pairs that can be applied to resources. Using a consistent set of tags for all resources enables cost breakdown by those dimensions. Resource groups are Azure-specific and not universal. Naming conventions are less reliable. Separate accounts add overhead.

Answer

Use resource groups to organize resources by environment

Answer

Use resource naming conventions to encode environment and project

Answer

Create separate cloud accounts for each environment

Question 5

A cloud engineer notices that an auto-scaling group is adding and removing instances too frequently, causing instability. Which configuration parameter should be adjusted to reduce this behavior?

Accepted Answer

Increase the cooldown period. Cooldown periods prevent auto-scaling from launching or terminating instances too rapidly after a scaling activity. Scaling thresholds affect when scaling triggers, but the issue is frequency. Lifecycle hooks are for custom actions during scaling events. Health check grace period is for initial instance health.

Answer

Increase the health check grace period

Answer

Disable lifecycle hooks

Answer

Lower the scaling metric thresholds

Question 6

A company wants to implement automated patching for their Windows and Linux servers in AWS. They need to schedule patching during a maintenance window and have a rollback plan. Which service should they use?

Accepted Answer

AWS Systems Manager Patch Manager. AWS Systems Manager Patch Manager automates patching with maintenance windows and allows creation of patching baselines. It also supports rollback by restoring from AMIs or using AWS Backup. Inspector is for vulnerability scanning, not patching. Config is for compliance. OpsWorks is configuration management.

Answer

AWS OpsWorks

Answer

AWS Config

Answer

Amazon Inspector

Question 7

A cloud administrator wants to troubleshoot network connectivity issues between two VPCs. Which AWS feature provides detailed logs of IP traffic for analysis?

Accepted Answer

VPC Flow Logs. VPC Flow Logs capture information about IP traffic going to and from network interfaces in a VPC. CloudTrail logs API calls. CloudWatch Logs is for application logs. Route Tables define routing rules but don't log traffic.

Answer

AWS CloudTrail

Answer

VPC Route Tables

Answer

AWS CloudWatch Logs

Question 8

A cloud architect is designing a disaster recovery plan. The application requires a Recovery Time Objective (RTO) of 15 minutes and a Recovery Point Objective (RPO) of 1 hour. Which strategy best meets these requirements?

Accepted Answer

Continuous replication to a warm standby site. Continuous replication to a standby environment (pilot light or warm standby) can achieve low RTO and RPO. Snapshot-based with daily backups has RPO of 1 day. Cross-region replication of snapshots can have RPO hours. Warm standby with continuous replication meets both RTO and RPO.

Answer

Daily snapshots replicated to another region

Answer

Scheduled cross-region snapshots every 6 hours

Answer

Backup to tape and store offsite

Question 9

A cloud engineer is configuring auto-scaling for a web application. The scaling policy should add 2 instances when CPU utilization exceeds 80% for 5 consecutive minutes and remove 1 instance when CPU drops below 50% for 10 minutes. Which type of scaling policy should they use?

Accepted Answer

Step scaling policy. Step scaling allows adding or removing a specific number of instances based on the size of the alarm breach. Target tracking adjusts to maintain a target metric value. Simple scaling is older and less flexible. Scheduled scaling is time-based.

Answer

Scheduled scaling policy

Answer

Target tracking scaling policy

Answer

Simple scaling policy

Question 10

A company uses GCP and wants to implement alerting based on anomaly detection for their Compute Engine instances. Which GCP service should they use?

Accepted Answer

Cloud Monitoring. GCP's Cloud Monitoring (formerly Stackdriver) includes alerting policies that support anomaly detection. Cloud Logging is for logs. Cloud Audit Logs for auditing. Cloud Functions can be triggered but not directly for anomaly detection.

Answer

Cloud Logging

Answer

Cloud Functions

Answer

Cloud Audit Logs

Question 11

A cloud administrator needs to view the console output of a VM that failed to boot. Which feature should they use to access the boot logs?

Accepted Answer

Console output / serial console. Cloud providers offer console output or serial console access to view boot logs. Screenshots are also available but console output is the direct log. CloudWatch Logs might capture logs if the OS sends them, but for boot issues, console output is the native method.

Answer

CloudWatch Logs agent

Answer

VM screenshot

Answer

System log from the hypervisor

Question 12

A company wants to optimize cloud costs by identifying underutilized EC2 instances. Which AWS service provides rightsizing recommendations?

Accepted Answer

AWS Compute Optimizer. AWS Compute Optimizer analyzes resource utilization and provides recommendations to reduce cost and improve performance. AWS Cost Explorer is for cost visualization. AWS Trusted Advisor provides general best practice checks but not specific rightsizing. AWS Budgets is for budget alerts.

Answer

AWS Trusted Advisor

Answer

AWS Cost Explorer

Answer

AWS Budgets

Question 13

A cloud operations team is setting up log-based alerting for security events. They want to use structured logging to facilitate querying. Which TWO practices support effective log-based alerting? (Choose TWO.)

Accepted Answer

Centralize logs in a log management system. Structured logging (JSON) makes logs machine-parseable and easier to query. Using a centralized logging platform enables search and alerting across all logs. Verbose logging generates noise. Random log formats hinder querying. Syslog is not structured.

Answer

Enable verbose logging for all services

Answer

Use random log formats for different applications

Answer

Send all logs to syslog servers

Question 14

A cloud engineer is designing an auto-scaling solution for a stateful application. The scaling policy must ensure that instances are properly drained before termination and that new instances are fully initialized before receiving traffic. Which THREE features should be used? (Choose THREE.)

Accepted Answer

Elastic Load Balancer target group health checks. Lifecycle hooks allow custom actions during scale-in (draining) and scale-out (initialization). Health checks ensure instances are healthy before receiving traffic. Cooldown periods prevent rapid scaling. Elastic Load Balancer target group ensures traffic distribution. CloudWatch alarms trigger scaling.

Answer

Scheduled scaling actions

Answer

Cooldown periods

Question 15

A company is planning a disaster recovery testing strategy. They want to validate both RTO and RPO without impacting production. Which THREE approaches should they consider? (Choose THREE.)

Accepted Answer

Perform regular backup restoration tests. Scheduled DR drills with isolated environments validate recovery procedures. Chaos engineering tests resilience. Backup verification ensures data integrity. Continuous monitoring does not test recovery. Load testing is for performance.

Answer

Run load tests against production systems

Answer

Enable continuous monitoring of production metrics