CV0-004 Operations and Support Practice Test 6 — 15 Questions

Question 1

A cloud engineer is configuring an auto-scaling group with a lifecycle hook to run a custom script when instances are launched. The script installs software and registers the instance with a load balancer. The engineer wants to ensure the instance does not receive traffic until the script completes successfully. What should the engineer do?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Use a lifecycle hook with a 'pending:wait' state and then send a 'complete-lifecycle-action' signal after the script succeeds.. Using a lifecycle hook with a 'pending:wait' state allows you to pause the instance launch process until the custom script completes. After the script succeeds, you send a 'complete-lifecycle-action' signal to the auto-scaling group, which then proceeds to put the instance into service. This ensures the instance does not receive traffic until the script is done.

Answer

Set the lifecycle hook to 'terminating:wait' to delay termination.

Answer

Configure the load balancer health check to fail until the script runs.

Answer

Configure the launch configuration with a user-data script that runs after the instance is in service.

Question 2

A cloud administrator is configuring a notification channel for critical alerts. Which TWO of the following are commonly used notification channels in cloud monitoring systems? (Select TWO.)

Accepted Answer

Amazon Simple Notification Service (SNS). Amazon Simple Notification Service (SNS) (B) is correct because it is a fully managed pub/sub messaging service that supports topics with email, SMS, HTTP/S, and Lambda subscribers, making it a standard notification channel for CloudWatch alarms. Slack webhooks (C) are correct because an incoming webhook URL lets monitoring services POST JSON messages directly to a Slack channel, a widely used integration for critical alert delivery. Amazon CloudWatch Logs (A) is a log storage and query service, not a notification channel, so it does not deliver alerts to people. AWS Organizations (D) is an account governance and consolidated billing service, and AWS CloudTrail (E) is an API activity auditing service; neither is designed to send alert notifications.

Answer

Amazon CloudWatch Logs

Answer

AWS Organizations

Answer

AWS CloudTrail

Question 3

A cloud team is planning a disaster recovery drill for their application running in a public cloud. They want to validate that the recovery process meets the defined RTO and RPO. Which THREE activities should be included in the DR drill? (Select THREE.)

Accepted Answer

Measure the time taken to restore services from backups.. The drill must validate the two key recovery objectives, so option B is correct because measuring the time taken to restore services from backups directly tests whether the actual recovery time meets the defined RTO. Option D is correct because performing a failover to the DR site and verifying application functionality proves that the recovery environment works end-to-end and that services can actually be resumed at the DR location. Option E is correct because checking the timestamp of the most recent backup or replica confirms the data loss window, which is exactly what RPO measures. Option A is not part of validating RTO/RPO; cost optimization is a separate FinOps activity. Option C, chaos engineering, tests resilience to random failures but is not a required DR drill activity for validating recovery time and data currency against RTO and RPO.

Answer

Review cost optimization recommendations for the DR environment.

Answer

Run chaos engineering experiments to introduce random failures.

Question 4

A cloud administrator needs to receive real-time notifications when CPU utilization exceeds 90% on a production server. Which AWS service should be used to trigger an alert based on a metric threshold?

Accepted Answer

CloudWatch Alarms. CloudWatch Alarms monitor CloudWatch metrics and trigger actions when a metric crosses a defined threshold, such as CPU utilization exceeding 90% for a specified number of evaluation periods. Alarms can send notifications via Amazon SNS, trigger Auto Scaling, or invoke Lambda functions. This makes CloudWatch Alarms the correct service for threshold-based alerting on metrics.

Answer

Amazon SNS

Answer

AWS Config

Answer

AWS CloudTrail

Question 5

A company uses a multi-cloud environment with AWS and Azure. They want to centralize log collection and enable advanced querying for troubleshooting. Which combination of services should they use?

Accepted Answer

AWS CloudWatch Logs and Azure Log Analytics. AWS CloudWatch Logs and Azure Log Analytics are the native log aggregation and querying services in their respective clouds. CloudWatch Logs centralizes logs from AWS resources and supports Logs Insights for querying, while Azure Log Analytics provides a powerful KQL-based query engine over data collected in a Log Analytics workspace. Using both together gives centralized collection and advanced querying across the multi-cloud environment.

Answer

AWS CloudTrail and Azure Monitor

Answer

AWS S3 and Azure Blob Storage

Answer

AWS CloudWatch and Azure Application Insights

Question 6

A cloud operations team is implementing a tagging strategy for cost attribution. They need to track costs by environment (dev, test, prod), project, and team. Which approach should they use?

Accepted Answer

Apply tags such as Environment, Project, and Team to all resources. Tags are key-value pairs that can be applied to resources and used for cost allocation, filtering, and reporting across environments, projects, and teams. Applying Environment, Project, and Team tags to all resources enables granular cost attribution in billing reports and supports chargeback/showback models.

Answer

Use resource groups to organize resources by environment

Answer

Use resource naming conventions to encode environment and project

Answer

Create separate cloud accounts for each environment

Question 7

A cloud engineer notices that an auto-scaling group is adding and removing instances too frequently, causing instability. Which configuration parameter should be adjusted to reduce this behavior?

Accepted Answer

Increase the cooldown period. Increasing the cooldown period is the correct adjustment because cooldown is the waiting time after a scaling activity before the auto-scaling group can perform another scaling action. A longer cooldown lets newly launched instances stabilize and metrics to reflect the new capacity, preventing the rapid add/remove oscillation known as thrashing. This directly reduces the instability described.

Answer

Increase the health check grace period

Answer

Disable lifecycle hooks

Answer

Lower the scaling metric thresholds

Question 8

A company wants to implement automated patching for their Windows and Linux servers in AWS. They need to schedule patching during a maintenance window and have a rollback plan. Which service should they use?

Accepted Answer

AWS Systems Manager Patch Manager. AWS Systems Manager Patch Manager automates the process of patching fleets of Windows and Linux servers. It allows you to define patch baselines, schedule patching during maintenance windows, and even roll back patches if needed, making it the ideal service for this requirement.

Answer

AWS OpsWorks

Answer

AWS Config

Answer

Amazon Inspector

Question 9

A cloud administrator wants to troubleshoot network connectivity issues between two VPCs. Which AWS feature provides detailed logs of IP traffic for analysis?

Accepted Answer

VPC Flow Logs. VPC Flow Logs capture IP traffic metadata (source/destination IP, ports, protocol, action) for network interfaces in a VPC, and can be published to CloudWatch Logs or S3 for analysis. This is the specific AWS feature designed for troubleshooting connectivity and analyzing traffic patterns at the network layer.

Answer

AWS CloudTrail

Answer

VPC Route Tables

Answer

AWS CloudWatch Logs

Question 10

A cloud architect is designing a disaster recovery plan. The application requires a Recovery Time Objective (RTO) of 15 minutes and a Recovery Point Objective (RPO) of 1 hour. Which strategy best meets these requirements?

Accepted Answer

Continuous replication to a warm standby site. Continuous replication to a warm standby site best meets the RTO of 15 minutes and RPO of 1 hour. Warm standby maintains a scaled-down but functional copy of the environment that can be quickly scaled up, and continuous replication ensures data loss is within minutes, satisfying the RPO.

Answer

Daily snapshots replicated to another region

Answer

Scheduled cross-region snapshots every 6 hours

Answer

Backup to tape and store offsite

Question 11

A company uses GCP and wants to implement alerting based on anomaly detection for their Compute Engine instances. Which GCP service should they use?

Accepted Answer

Cloud Monitoring. GCP's Cloud Monitoring (formerly Stackdriver) includes alerting policies that support anomaly detection. Cloud Logging is for logs. Cloud Audit Logs for auditing. Cloud Functions can be triggered but not directly for anomaly detection.

Answer

Cloud Logging

Answer

Cloud Functions

Answer

Cloud Audit Logs

Question 12

A company wants to optimize cloud costs by identifying underutilized EC2 instances. Which AWS service provides rightsizing recommendations?

Accepted Answer

AWS Compute Optimizer. AWS Compute Optimizer is the dedicated service that analyzes historical utilization metrics (CPU, memory, network, disk) from CloudWatch to generate rightsizing recommendations for EC2 instances, Auto Scaling groups, EBS volumes, and Lambda functions. It uses machine learning to identify over-provisioned or under-provisioned resources and provides specific instance type recommendations. Unlike other cost tools, Compute Optimizer is purpose-built for resource optimization and rightsizing, making it the correct choice for identifying underutilized EC2 instances.

Answer

AWS Trusted Advisor

Answer

AWS Cost Explorer

Answer

AWS Budgets

Question 13

A cloud operations team is setting up log-based alerting for security events. They want to use structured logging to facilitate querying. Which TWO practices support effective log-based alerting? (Choose TWO.)

Accepted Answer

Centralize logs in a log management system. Option B is correct because centralizing logs in a log management system (such as a SIEM, ELK/Elasticsearch, or cloud-native service like CloudWatch Logs or Cloud Logging) aggregates events from multiple sources into one queryable store, which is essential for correlating security events and defining alert rules across services. Option E is correct because outputting logs in JSON format produces structured, machine-parseable records with consistent key-value fields, enabling precise queries and filters (e.g., level:ERROR AND event:login_failure) that drive reliable log-based alerts. Option A is not appropriate because enabling verbose logging for all services generates excessive noise and cost, obscuring the security events that alerts should target. Option C is wrong because random, inconsistent log formats break parsing and make querying and alerting unreliable. Option D is not the best practice here because blindly sending all logs to syslog servers lacks the structured, centralized querying and alerting capabilities required, and syslog alone does not provide the structured format needed for effective log-based alerting.

Answer

Enable verbose logging for all services

Answer

Use random log formats for different applications

Answer

Send all logs to syslog servers

Question 14

A cloud administrator needs to detect unusual spikes in CPU usage across a fleet of EC2 instances. Which AWS service should be used to create an alarm that triggers when CPU utilization exceeds an expected baseline?

Accepted Answer

AWS CloudWatch Alarms with anomaly detection. Amazon CloudWatch Alarms supports anomaly detection bands, which use machine learning to establish a normal baseline for a metric such as CPUUtilization and then alarm when the metric falls outside the expected band. This is the correct service for detecting unusual spikes relative to a learned baseline across a fleet of EC2 instances.

Answer

AWS Config

Answer

AWS CloudTrail

Answer

AWS Systems Manager

Question 15

A cloud engineer wants to receive real-time notifications when a CloudWatch Alarm enters the ALARM state. Which notification channel can be configured directly within the CloudWatch Alarm action?

Accepted Answer

Amazon Simple Notification Service (SNS). Amazon CloudWatch Alarms natively support Amazon SNS topics as an alarm action — when the alarm transitions to ALARM state, CloudWatch publishes a message to the configured SNS topic, which then fans out to email, SMS, Lambda, SQS, or HTTP endpoints. SNS is the only notification channel that can be configured directly in the alarm's action list without additional integration services.

Answer

PagerDuty

Answer

AWS Chatbot

Answer

Slack webhook