CV0-004 Operations and Support Practice Test 7 — 15 Questions

Question 1

A company uses AWS and wants to analyze cost trends and identify the top services contributing to monthly spending. Which AWS tool provides a pre-built dashboard for this purpose?

Accepted Answer

AWS Cost Explorer. AWS Cost Explorer is the native cost analysis tool that includes pre-built reports and dashboards for visualizing spend over time, forecasting, and identifying top cost-driving services by filtering on dimensions like service, linked account, or tag. It aggregates Cost and Usage Report data and presents it through a console UI with default views such as 'Cost by Service' and 'Monthly Costs by Linked Account'. This directly matches the requirement for a pre-built dashboard to analyze trends and top contributing services.

Answer

AWS Trusted Advisor

Answer

AWS Compute Optimizer

Answer

AWS Budgets

Question 2

An organization uses GCP and wants to implement a tagging strategy to track costs by project and environment. Which GCP feature should be used to assign metadata to resources for cost attribution?

Accepted Answer

Labels. Labels are the correct GCP feature for cost attribution because they are key-value pairs that can be attached to most GCP resources and are directly integrated with Cloud Billing. They allow you to filter and group costs in billing reports by dimensions like project and environment. Unlike other metadata mechanisms, labels are specifically designed for organization and cost management.

Answer

Annotations

Answer

Tags

Answer

Metadata

Question 3

A cloud administrator is designing an auto-scaling policy for a web application that experiences predictable traffic spikes during business hours. The administrator wants to ensure that the application scales out before the start of business hours to avoid performance degradation. Which scaling policy type should be used?

Accepted Answer

Scheduled scaling. Scheduled scaling allows scaling actions at specific times (e.g., before business hours).

Answer

Manual scaling

Answer

Dynamic scaling

Answer

Predictive scaling

Question 4

A cloud engineer needs to apply security patches to a group of Linux VMs running in Azure. The engineer wants to automate the patching process and ensure that patches are applied during a predefined maintenance window. Which Azure service should be used?

Accepted Answer

Azure Update Management. Azure Update Management (now part of Azure Automation) is the purpose-built service for orchestrating OS patch deployment across Windows and Linux VMs, including Azure VMs, on-premises machines, and other clouds via the Log Analytics agent. It lets you define a maintenance window, schedule recurring patch deployments, and produce compliance reports showing which patches are missing or installed. This directly satisfies the requirement to automate patching during a predefined window.

Answer

Azure Security Center

Answer

Azure Policy

Answer

Azure Backup

Question 5

A cloud administrator is troubleshooting network connectivity issues between two VPCs in AWS. The administrator wants to examine traffic flow logs to identify dropped packets. Which AWS feature provides detailed network traffic logs for VPCs?

Accepted Answer

VPC Flow Logs. VPC Flow Logs capture IP traffic metadata (source/destination IP, ports, protocol, action) for network interfaces in a VPC, and can be published to CloudWatch Logs or S3. They are the correct tool for diagnosing dropped packets and connectivity issues between VPCs, showing ACCEPT and REJECT records. CloudTrail, X-Ray, and CloudWatch Logs serve different observability purposes.

Answer

AWS X-Ray

Answer

AWS CloudTrail

Answer

Amazon CloudWatch Logs

Question 6

A cloud engineer needs to collect and query log data from multiple cloud services in a centralized location. Which cloud service should be used for centralized log management?

Accepted Answer

Logging service. A dedicated logging service is designed to ingest, store, and query log data from multiple sources in a centralized location, providing search, filtering, and retention capabilities. It is the purpose-built tool for centralized log management, unlike audit logging (which captures specific compliance events) or monitoring (which focuses on metrics and alerts).

Answer

Audit logging service

Answer

Monitoring service

Answer

Storage service

Question 7

A company wants to reduce costs by identifying underutilized EC2 instances and receiving recommendations to downsize them. Which AWS service provides rightsizing recommendations based on historical utilization metrics?

Accepted Answer

AWS Compute Optimizer. AWS Compute Optimizer analyzes historical utilization metrics of EC2 instances and provides rightsizing recommendations to downsize underutilized instances, helping reduce costs. It uses machine learning to generate recommendations based on CPU, memory, and other metrics.

Answer

AWS Cost Explorer

Answer

AWS Trusted Advisor

Answer

AWS Auto Scaling

Question 8

A cloud administrator is setting up auto-scaling for a web application that uses an SQS queue for incoming requests. The administrator wants to scale the number of EC2 instances based on the queue depth. Which two metrics are appropriate for this auto-scaling policy? (Choose TWO.)

Accepted Answer

ApproximateNumberOfMessagesVisible (queue depth). Option B, ApproximateNumberOfMessagesVisible (queue depth), is correct because it is the native CloudWatch metric that reports how many messages are available in the SQS queue, directly reflecting the incoming workload that the EC2 fleet must process. Option E, BacklogPerInstance (queue depth per instance), is correct because it is a custom metric that divides the queue backlog by the number of running instances, giving a per-instance workload signal that is ideal for target-tracking scaling policies on an SQS-backed web tier. Options A (CPU utilization) and C (memory utilization) are not appropriate here because the workload is driven by queue depth rather than instance-level compute or memory pressure, and memory utilization is not even a default CloudWatch EC2 metric. Option D (network throughput) is also unsuitable because it measures data transfer volume, not the amount of pending work in the queue, so it would not reliably track the backlog the application must drain.

Answer

CPU utilization of instances

Answer

Memory utilization of instances

Answer

Network throughput

Question 9

A company uses AWS and wants to implement a structured logging format to simplify querying and analysis of application logs. Which three best practices should be followed when implementing structured logging? (Choose THREE.)

Accepted Answer

Include a unique request ID for each transaction. Option B is correct because including a unique request ID for each transaction enables correlation of log entries across distributed services, making it possible to trace a single request through multiple components during querying and analysis. Option C is correct because using consistent key names across all services ensures that queries and dashboards work uniformly, avoiding the need to map different field names for the same data in tools like CloudWatch Logs Insights or Athena. Option D is correct because JSON is a structured, machine-readable format that supports native parsing and filtering of fields, which directly simplifies querying and analysis compared to unstructured text. Option A is not appropriate because plain text logs are unstructured, defeating the purpose of structured logging and making querying harder, even if storage costs are lower. Option E is not appropriate because embedding binary data in log messages bloats log size, harms readability, and is not queryable, so it does not support structured logging best practices.

Answer

Write logs in plain text to reduce storage costs

Answer

Embed binary data in log messages for performance

Question 10

A cloud administrator needs to monitor CPU utilization of a group of virtual machines and automatically add more instances when utilization exceeds 80% for 5 minutes. Which cloud service should the administrator use to define this scaling policy?

Accepted Answer

Auto scaling service. An auto scaling service is purpose-built to define scaling policies based on metrics such as CPU utilization, with thresholds and duration windows (e.g., >80% for 5 minutes) that trigger adding or removing instances. It integrates with CloudWatch-style alarms and launch templates to automatically adjust capacity.

Answer

Configuration management service

Answer

Audit logging service

Answer

Systems management service

Question 11

A company wants to implement a disaster recovery strategy with an RTO of 15 minutes and an RPO of 1 hour for a critical application running on AWS. Which approach would best meet these requirements?

Accepted Answer

Continuous replication to a warm standby environment with automated failover. Continuous replication to a standby environment with automatic failover provides the lowest RTO and RPO, meeting the requirements.

Answer

Backup to AWS S3 and restore using AWS CloudFormation

Answer

Cross-region replication with a read replica and manual promotion

Answer

Daily snapshots of EBS volumes to another region

Question 12

A cloud administrator is troubleshooting a performance issue where an application occasionally experiences high latency. The application runs on AWS and uses EC2, ELB, and RDS. Which combination of tools would best help trace the request flow and identify the bottleneck?

Accepted Answer

AWS X-Ray and VPC Flow Logs. AWS X-Ray traces requests through the application, including calls to downstream services like RDS, and VPC Flow Logs capture IP traffic to and from network interfaces, helping identify network-level bottlenecks. Together, they provide end-to-end visibility from the request entry point to the database and network layer. This combination is best for tracing request flow and pinpointing latency issues.

Answer

AWS Trusted Advisor and AWS Personal Health Dashboard

Answer

Amazon CloudWatch Logs and AWS Shield

Answer

AWS CloudTrail and AWS Config

Question 13

A company wants to be notified when their monthly AWS spending exceeds $10,000. Which AWS service should they use to set up this alert?

Accepted Answer

AWS Budgets. AWS Budgets allows you to set custom cost budgets and configure alerts when actual or forecasted spending exceeds a defined threshold, such as $10,000 per month. It sends notifications via email or SNS when the threshold is breached, directly satisfying the requirement to be notified about monthly spending exceeding a specific amount.

Answer

AWS Trusted Advisor

Answer

AWS Cost Explorer

Answer

AWS CloudWatch Alarms

Question 14

A cloud administrator needs to apply security patches to a fleet of 50 Linux servers running on AWS without interrupting business hours. Which approach should the administrator use to schedule patching during a maintenance window?

Accepted Answer

Use AWS Systems Manager Patch Manager with a maintenance window. AWS Systems Manager Patch Manager is designed to automate the process of patching fleets of instances. It integrates with Maintenance Windows, allowing administrators to define a schedule (e.g., outside business hours) during which patching tasks run. This approach is scalable, auditable, and does not require manual intervention or custom scripting, making it the correct choice for patching 50 Linux servers without interrupting business hours.

Answer

Create a Lambda function that stops instances, patches them, and restarts

Answer

Manually SSH into each server and run yum update

Answer

Use AWS Config to apply patch baselines

Question 15

A company is using Azure VMs and wants to centralize logs from multiple applications for security analysis. The logs must be retained for 2 years. Which Azure service should they use?

Accepted Answer

Azure Log Analytics. Azure Log Analytics is the service designed to collect, store, and query log data from multiple sources, including applications, VMs, and Azure resources. It supports configurable retention (including long-term retention beyond the default 30 days) and provides KQL-based querying for security analysis. This makes it the correct choice for centralizing logs with a 2-year retention requirement.

Answer

Azure Activity Log

Answer

Azure Application Insights

Answer

Azure Storage Analytics