CV0-004 Operations and Support Practice Test 5 — 15 Questions

Question 1

A cloud administrator is troubleshooting a network connectivity issue between two subnets. They suspect a security group or NACL is blocking traffic. Which tool should they use to analyze the traffic flow?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

VPC Flow Logs. VPC Flow Logs capture IP traffic information to and from network interfaces in a VPC. They can be used to analyze traffic flow and determine whether security groups or NACLs are blocking traffic by showing accepted and rejected traffic. This makes them the appropriate tool for troubleshooting connectivity issues between subnets.

Answer

AWS X-Ray

Answer

AWS CloudTrail

Answer

AWS Config

Question 2

A cloud engineer needs to ensure that an auto-scaling group does not launch new instances immediately after a scale-in event to allow metrics to stabilize. Which feature should they configure?

Accepted Answer

Cooldown periods. Cooldown periods are specifically designed to prevent an Auto Scaling group from launching or terminating additional instances immediately after a scaling activity. This allows metrics to stabilize and prevents rapid, unnecessary scaling actions. By configuring a cooldown period, the engineer ensures that new instances are not launched until the cooldown expires, giving the system time to reflect the effect of the previous scaling event.

Answer

Health checks

Answer

Scheduled scaling

Answer

Lifecycle hooks

Question 3

A company wants to reduce costs by identifying underutilized EC2 instances. Which tool should they use to get rightsizing recommendations?

Accepted Answer

AWS Compute Optimizer. AWS Compute Optimizer is specifically designed to analyze resource utilization and provide rightsizing recommendations for EC2 instances, among other resources. It uses machine learning to identify underutilized instances and suggests optimal instance types, helping reduce costs.

Answer

AWS Cost Explorer

Answer

AWS Trusted Advisor

Answer

AWS Budgets

Question 4

A cloud operations team is implementing structured logging for better querying. They have decided to use JSON format. What is a key benefit of structured logging over unstructured logging?

Accepted Answer

Enables querying specific fields. Structured logging (e.g., JSON) enables efficient querying and filtering of log data.

Answer

Easier to read for humans

Answer

Reduced storage costs

Answer

Faster log ingestion

Question 5

A cloud architect is designing a disaster recovery plan that includes testing. Which TWO activities are commonly performed as part of DR testing?

Accepted Answer

Chaos engineering. Chaos engineering (C) is a valid DR testing activity because it deliberately injects failures—such as terminating instances, blocking network paths, or simulating AZ outages—to verify that failover, replication, and recovery mechanisms actually work under real fault conditions. Scheduled DR drills (D) are also a core DR testing practice, as they exercise documented runbooks and recovery procedures (for example, promoting a standby database or failing over to a secondary region) on a planned cadence to validate RTO and RPO targets. The remaining options are not DR testing activities: Reserved Instance planning (A) is a cost-optimization/billing exercise, rightsizing recommendations (B) are about matching instance capacity to utilization for efficiency, and tagging resources (E) is a governance and metadata practice that supports organization and cost allocation but does not itself test recovery.

Answer

Reserved Instance planning

Answer

Rightsizing recommendations

Answer

Tagging resources

Question 6

A cloud engineer is troubleshooting a performance issue in a microservices application. Which THREE tools can help with distributed tracing and latency diagnosis?

Accepted Answer

GCP Cloud Trace. GCP Cloud Trace (B) is correct because it is Google Cloud's native distributed tracing service, capturing latency data across microservices and rendering span waterfalls that pinpoint slow calls. Azure Application Insights (C) is correct because it provides distributed tracing via correlation IDs and the Application Map, showing end-to-end request latency across services and dependencies. AWS X-Ray (D) is correct because it traces requests through AWS-hosted microservices, building service maps and segment/subsegment timing to isolate latency bottlenecks. AWS CloudTrail (A) is not a tracing tool; it records API activity for auditing and governance, not request latency. VPC Flow Logs (E) capture IP-level network traffic metadata for connectivity and security analysis, not per-request distributed traces.

Answer

AWS CloudTrail

Answer

VPC Flow Logs

Question 7

A cloud administrator needs to monitor CPU utilization for a fleet of EC2 instances and receive notifications when utilization exceeds 80%. Which AWS service should be used to create a metric alarm that triggers an SNS notification?

Accepted Answer

Amazon CloudWatch. Amazon CloudWatch is the AWS service for monitoring metrics and creating alarms. CloudWatch Alarms can be configured to trigger SNS notifications when a metric crosses a threshold.

Answer

AWS Config

Answer

AWS Trusted Advisor

Answer

AWS CloudTrail

Question 8

A company wants to centralize logs from multiple AWS services and analyze them using SQL-like queries. Which service should they use?

Accepted Answer

Amazon CloudWatch Logs Insights. Amazon CloudWatch Logs Insights provides an interactive query language that supports SQL-like commands (fields, filter, stats, sort, limit, parse) to analyze log data stored in CloudWatch Logs. It can query across multiple log groups from different AWS services, making it the right choice for centralized log analysis with SQL-like queries.

Answer

AWS CloudTrail

Answer

Amazon S3

Answer

AWS Config

Question 9

A cloud administrator needs to perform a disaster recovery test for a critical application running in a different AWS region. The RTO is 1 hour, and the RPO is 15 minutes. Which replication strategy should be used to meet the RPO?

Accepted Answer

Continuous replication. Continuous replication replicates data continuously, so the recovery point objective (RPO) — the maximum acceptable data loss — can be as low as seconds or minutes, meeting the 15-minute requirement. Snapshot-based approaches at hourly or daily intervals cannot meet a 15-minute RPO.

Answer

Hourly snapshot-based replication

Answer

Daily snapshot-based replication

Answer

Cross-region replication with eventual consistency

Question 10

A company uses AWS and wants to optimize costs by receiving recommendations to downsize over-provisioned EC2 instances. Which tool provides rightsizing recommendations?

Accepted Answer

AWS Compute Optimizer. AWS Compute Optimizer is the service specifically designed to analyze resource utilization metrics (such as CPU, memory, network, and disk) and generate rightsizing recommendations for EC2 instances, Auto Scaling groups, EBS volumes, and Lambda functions. It uses machine learning to identify over-provisioned or under-provisioned resources and provides actionable recommendations to downsize or upsize, directly addressing the goal of cost optimization. Unlike other tools that focus on billing or budgets, Compute Optimizer delivers instance-type-level guidance based on actual usage patterns.

Answer

AWS Budgets

Answer

AWS Trusted Advisor

Answer

AWS Cost Explorer

Question 11

A cloud engineer is troubleshooting a performance issue in a multi-tier application on AWS. The web tier shows high latency, but the application logs indicate no errors. The engineer wants to trace a request end-to-end across services. Which AWS service should be used?

Accepted Answer

AWS X-Ray. AWS X-Ray provides distributed tracing, allowing you to trace requests as they travel through your application and identify performance bottlenecks.

Answer

VPC Flow Logs

Answer

Amazon CloudWatch Logs

Answer

AWS CloudTrail

Question 12

A cloud administrator needs to apply security patches to a fleet of EC2 instances running Windows Server. The patches must be applied during a maintenance window to minimize downtime. Which AWS service can automate patching?

Accepted Answer

AWS Systems Manager Patch Manager. AWS Systems Manager Patch Manager automates the process of patching EC2 instances, including Windows Server, and supports maintenance windows to control when patches are applied. It can scan for missing patches and install them on a schedule, minimizing downtime.

Answer

AWS CloudFormation

Answer

AWS Config

Answer

Amazon Inspector

Question 13

Which GCP service provides centralized log management and analysis with the ability to create log-based metrics and alerts?

Accepted Answer

GCP Cloud Logging. Cloud Logging is Google Cloud's centralized log management service, providing ingestion, storage, search, and analysis of logs from all GCP services and custom sources. It supports log-based metrics that convert log entries into time-series data, which can then be used by Cloud Monitoring to create alerts and dashboards. This makes Cloud Logging the correct answer for centralized log management with metric and alert creation capabilities.

Answer

GCP Cloud Monitoring

Answer

GCP Cloud Audit Logs

Answer

GCP Cloud Trace

Question 14

A company wants to implement a tagging strategy for their cloud resources to track costs by department and project. Tags must be applied to resources such as virtual machines and storage buckets. Which of the following is a best practice for cost attribution using tags?

Accepted Answer

Define a set of mandatory tag keys such as CostCenter, Project, and Environment with standardized values.. Standardized, mandatory tag keys with controlled values (e.g., CostCenter, Project, Environment) ensure consistent cost allocation across all resources and prevent drift. This enables reliable grouping in billing reports and enforces governance via policies like AWS Tag Policies or Azure Policy. Without a defined schema, cost attribution becomes unreliable and reports fragment.

Answer

Apply tags to resources only after creation to avoid governance issues.

Answer

Use a single tag key 'Environment' with values 'Production' or 'Development'.

Answer

Use free-form text for tag values to allow flexibility.

Question 15

A cloud administrator is configuring an alert for an Azure virtual machine. The alert should trigger when the average CPU percentage exceeds 90% for more than 10 minutes. Which Azure service should be used to create this metric alert?

Accepted Answer

Azure Monitor Alerts. Azure Monitor Alerts allow you to create metric alerts based on conditions like CPU percentage thresholds and evaluation periods.

Answer

Azure Advisor

Answer

Azure Log Analytics

Answer

Azure Security Center