CV0-004 Operations and Support Practice Test 4 — 15 Questions

Question 1

A cloud operations team is setting up log-based alerting for security events. They want to use structured logging to facilitate querying. Which TWO practices support effective log-based alerting? (Choose TWO.)

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Centralize logs in a log management system. Structured logging (JSON) makes logs machine-parseable and easier to query. Using a centralized logging platform enables search and alerting across all logs. Verbose logging generates noise. Random log formats hinder querying. Syslog is not structured.

Answer

Enable verbose logging for all services

Answer

Use random log formats for different applications

Answer

Send all logs to syslog servers

Question 2

A cloud engineer is designing an auto-scaling solution for a stateful application. The scaling policy must ensure that instances are properly drained before termination and that new instances are fully initialized before receiving traffic. Which THREE features should be used? (Choose THREE.)

Accepted Answer

Elastic Load Balancer target group health checks. Lifecycle hooks allow custom actions during scale-in (draining) and scale-out (initialization). Health checks ensure instances are healthy before receiving traffic. Cooldown periods prevent rapid scaling. Elastic Load Balancer target group ensures traffic distribution. CloudWatch alarms trigger scaling.

Answer

Scheduled scaling actions

Answer

Cooldown periods

Question 3

A cloud administrator needs to detect unusual spikes in CPU usage across a fleet of EC2 instances. Which AWS service should be used to create an alarm that triggers when CPU utilization exceeds an expected baseline?

Accepted Answer

AWS CloudWatch Alarms with anomaly detection. CloudWatch Alarms can use anomaly detection to automatically detect unusual patterns based on historical data.

Answer

AWS Config

Answer

AWS CloudTrail

Answer

AWS Systems Manager

Question 4

A company uses Azure Log Analytics to centralize logs from multiple subscriptions. The security team requires that logs be retained for seven years to meet compliance regulations. What should the administrator configure to meet this requirement?

Accepted Answer

Set the retention policy in the Log Analytics workspace to 2555 days. Log Analytics workspaces allow setting retention policies up to 730 days (2 years) by default, but for longer retention, Azure Data Explorer or archive to Azure Storage with lifecycle management can be used. However, the question expects the correct answer as setting retention policy to 2555 days (7 years) is possible if workspace is configured for longer retention (up to 7 years with additional cost).

Answer

Export logs to Azure Blob Storage and set a lifecycle management policy

Answer

Enable Azure Sentinel

Answer

Create a log-based alert to notify when logs are about to expire

Question 5

A cloud engineer wants to receive real-time notifications when a CloudWatch Alarm enters the ALARM state. Which notification channel can be configured directly within the CloudWatch Alarm action?

Accepted Answer

Amazon Simple Notification Service (SNS). CloudWatch Alarms can directly send notifications to an SNS topic, which can then deliver to email, SMS, etc.

Answer

PagerDuty

Answer

AWS Chatbot

Answer

Slack webhook

Question 6

A company uses AWS and wants to analyze cost trends and identify the top services contributing to monthly spending. Which AWS tool provides a pre-built dashboard for this purpose?

Accepted Answer

AWS Cost Explorer. AWS Cost Explorer provides pre-built reports and dashboards for cost trend analysis.

Answer

AWS Trusted Advisor

Answer

AWS Compute Optimizer

Answer

AWS Budgets

Question 7

An organization uses GCP and wants to implement a tagging strategy to track costs by project and environment. Which GCP feature should be used to assign metadata to resources for cost attribution?

Accepted Answer

Labels. GCP labels are key-value pairs used to organize and track resources for cost allocation.

Answer

Annotations

Answer

Tags

Answer

Metadata

Question 8

A company needs to back up a critical database with a Recovery Point Objective (RPO) of 15 minutes and a Recovery Time Objective (RTO) of 2 hours. Which disaster recovery strategy should be implemented?

Accepted Answer

Cross-region replication with a read replica. Continuous replication (such as using database replication) can achieve a very low RPO like 15 minutes.

Answer

Weekly backups to an external tape library

Answer

Daily snapshots stored in the same region

Answer

Cold standby with hourly snapshots

Question 9

A cloud administrator is designing an auto-scaling policy for a web application that experiences predictable traffic spikes during business hours. The administrator wants to ensure that the application scales out before the start of business hours to avoid performance degradation. Which scaling policy type should be used?

Accepted Answer

Scheduled scaling. Scheduled scaling allows scaling actions at specific times (e.g., before business hours).

Answer

Manual scaling

Answer

Dynamic scaling

Answer

Predictive scaling

Question 10

A cloud engineer needs to apply security patches to a group of Linux VMs running in Azure. The engineer wants to automate the patching process and ensure that patches are applied during a predefined maintenance window. Which Azure service should be used?

Accepted Answer

Azure Update Management. Azure Update Management (part of Azure Automation) allows automated patching with scheduled maintenance windows.

Answer

Azure Security Center

Answer

Azure Policy

Answer

Azure Backup

Question 11

A company uses AWS and wants to verify that its disaster recovery plan meets the defined RTO and RPO objectives. Which type of testing should be performed to simulate a real failover scenario without impacting production?

Accepted Answer

Full-scale DR drill. A full-scale DR drill involves actually failing over to the DR environment to validate RTO/RPO without affecting production if isolated.

Answer

Tabletop exercise

Answer

Chaos engineering

Answer

Partial failover test

Question 12

A cloud administrator is troubleshooting network connectivity issues between two VPCs in AWS. The administrator wants to examine traffic flow logs to identify dropped packets. Which AWS feature provides detailed network traffic logs for VPCs?

Accepted Answer

VPC Flow Logs. VPC Flow Logs capture IP traffic information for network interfaces in a VPC.

Answer

AWS X-Ray

Answer

AWS CloudTrail

Answer

Amazon CloudWatch Logs

Question 13

A cloud engineer needs to collect and query log data from multiple cloud services in a centralized location. Which cloud service should be used for centralized log management?

Accepted Answer

Logging service. A centralized logging service allows log collection and querying from multiple sources, providing a single pane of glass for log analysis.

Answer

Audit logging service

Answer

Monitoring service

Answer

Storage service

Question 14

A company wants to reduce costs by identifying underutilized EC2 instances and receiving recommendations to downsize them. Which AWS service provides rightsizing recommendations based on historical utilization metrics?

Accepted Answer

AWS Compute Optimizer. AWS Compute Optimizer analyzes utilization and provides recommendations to optimize instance types.

Answer

AWS Cost Explorer

Answer

AWS Trusted Advisor

Answer

AWS Auto Scaling

Question 15

A cloud administrator is setting up auto-scaling for a web application that uses an SQS queue for incoming requests. The administrator wants to scale the number of EC2 instances based on the queue depth. Which two metrics are appropriate for this auto-scaling policy? (Choose TWO.)

Accepted Answer

ApproximateNumberOfMessagesVisible (queue depth). SQS queue depth (ApproximateNumberOfMessagesVisible) is a common metric. CPU utilization of instances is also relevant but not directly queue-related. The correct ones are ApproximateNumberOfMessagesVisible and BacklogPerInstance (which combines queue depth and instance count).

Answer

CPU utilization of instances

Answer

Memory utilization of instances

Answer

Network throughput