CV0-004 Operations and Support Practice Test 7 — 15 Questions

Question 1

A company uses AWS and wants to implement structured logging for their applications to improve queryability. Which THREE practices should they follow? (Select THREE.)

Accepted Answer

Include timestamp, severity, and request ID in each log entry. Structured logging uses JSON format, includes key fields, and uses consistent schemas.

Answer

Send all logs to a single S3 bucket without partitioning

Answer

Encrypt log files at rest using AWS KMS

Question 2

An organization is using Azure and wants to implement a patch management strategy with minimal disruption. Which TWO actions should they take? (Select TWO.)

Accepted Answer

Implement rollback procedures. Maintenance windows schedule updates during low activity, and rollback procedures enable recovery if issues occur.

Answer

Use only manual patching

Answer

Patch all servers simultaneously

Answer

Disable automatic updates on all VMs

Question 3

A cloud administrator needs to receive real-time notifications when CPU utilization on a critical web server exceeds 90% for more than 5 minutes. Which cloud monitoring service should be used to create the alert?

Accepted Answer

AWS CloudWatch Alarms. CloudWatch Alarms (AWS) allow you to monitor metrics and trigger actions when thresholds are breached. Other options are not specific to AWS or not designed for alerting on metrics.

Answer

AWS CloudTrail

Answer

AWS Config

Answer

AWS Trusted Advisor

Question 4

A company uses a multi-cloud strategy with workloads in AWS and Azure. The cloud team wants a centralized log management solution to correlate security events across both platforms. Which approach is most suitable?

Accepted Answer

Deploy a third-party SIEM solution such as Splunk. Azure Log Analytics, AWS CloudWatch Logs, and GCP Cloud Logging each work only within their own cloud. A third-party SIEM like Splunk can aggregate logs from multiple clouds.

Answer

Use AWS CloudWatch Logs with cross-account log groups

Answer

Use GCP Cloud Logging with a log sink to BigQuery

Answer

Use Azure Log Analytics and forward AWS logs to it via an agent

Question 5

A cloud architect is designing a disaster recovery plan for a critical application with an RTO of 15 minutes and an RPO of 1 minute. The application runs on AWS EC2 instances with data stored on EBS volumes. Which replication strategy best meets these requirements?

Accepted Answer

Continuous replication using AWS Elastic Disaster Recovery. Continuous replication (e.g., using AWS Elastic Disaster Recovery) provides near-synchronous replication with very low RPO. Snapshot-based replication has higher RPO. Cross-region replication for S3 is for object storage.

Answer

EBS snapshots replicated to another region every hour

Answer

Daily AMI backups stored in a different region

Answer

Cross-region replication of S3 buckets

Question 6

An organization wants to reduce cloud costs by identifying underutilized EC2 instances. Which AWS service provides rightsizing recommendations?

Accepted Answer

AWS Compute Optimizer. AWS Compute Optimizer analyzes resource utilization and provides recommendations to optimize AWS resources. AWS Cost Explorer shows spending but not specific rightsizing recommendations.

Answer

AWS Budgets

Answer

AWS Trusted Advisor

Answer

AWS Cost Explorer

Question 7

A cloud administrator is configuring an auto-scaling group for a web application. The application experiences predictable traffic spikes every weekday at 9 AM. Which scaling policy is most appropriate?

Accepted Answer

Scheduled scaling to add instances before 9 AM. Scheduled scaling allows you to increase capacity at specific times. Target tracking and step scaling are reactive. Cooldown periods are settings within policies.

Answer

Step scaling with a cool-down period

Answer

Simple scaling with a 300-second cooldown

Answer

Target tracking scaling based on average CPU utilization

Question 8

A cloud engineer is troubleshooting a network connectivity issue between two VPCs in AWS. To analyze traffic patterns and identify dropped packets, which feature should be enabled?

Accepted Answer

VPC Flow Logs. VPC Flow Logs capture information about IP traffic going to and from network interfaces in a VPC, useful for troubleshooting connectivity and security issues.

Answer

AWS CloudTrail

Answer

Amazon Inspector

Answer

AWS X-Ray

Question 9

A company uses AWS Systems Manager Patch Manager to automate patching. They need to ensure that patches are applied during a specific maintenance window with minimal risk of failure. Which additional step should be taken to allow quick recovery if a patch causes issues?

Accepted Answer

Create an AMI snapshot before applying patches. Creating an AMI snapshot or instance backup before patching enables rollback if a patch fails. The other options do not directly support rollback.

Answer

Use AWS CloudFormation to re-create the instance

Answer

Configure a rollback procedure using AWS Systems Manager State Manager

Answer

Enable termination protection on the instances

Question 10

An organization wants to track cloud costs by project and environment (development, testing, production). Which strategy should be employed for cost attribution?

Accepted Answer

Implement a tagging strategy for resources with Environment and Project tags. Tagging resources with key-value pairs (e.g., Project, Environment) enables cost allocation reports. Billing alerts and budgets help manage costs but not attribution.

Answer

Set up billing alerts for each account

Answer

Enable detailed billing reports with resource IDs

Answer

Use AWS Budgets to set spending limits per project

Question 11

A company is planning to migrate to AWS and wants to achieve the lowest possible compute costs for a steady-state workload that will run 24/7. Which purchasing option should be recommended?

Accepted Answer

Reserved Instances. Reserved Instances offer a significant discount over On-Demand for consistent usage. Spot Instances are cheaper but can be interrupted. Savings Plans are also cost-effective, but Reserved Instances are a traditional choice for steady-state.

Answer

Spot Instances

Answer

On-Demand Instances

Answer

Dedicated Hosts

Question 12

A cloud engineer is configuring an auto-scaling policy for a batch processing application that takes about 10 minutes to initialize before it can start processing jobs. To avoid premature termination of instances that have just started, what should the engineer configure?

Accepted Answer

Use a lifecycle hook to put the instance in a 'wait' state until initialization is complete. A lifecycle hook can put instances in a pending state until they complete initialization. Cooldown periods prevent scaling actions but do not prevent termination of new instances.

Answer

Disable scale-in for the first 10 minutes using a scheduled action

Answer

Set the health check grace period to 600 seconds

Answer

Increase the cooldown period to 600 seconds

Question 13

A cloud administrator needs to set up a centralized logging solution to collect logs from multiple projects. Which cloud service should be used?

Accepted Answer

Logging service. A centralized logging service is designed to aggregate and store logs from various sources, such as multiple projects or services, enabling administrators to search, monitor, and analyze log data in one place. The other options serve different purposes: monitoring focuses on metrics and alerts, serverless functions process events but do not natively centralize logs, and audit logs are a subset of logging typically focused on compliance and user activity.

Answer

Monitoring service

Answer

Serverless function service

Answer

Audit logs service

Question 14

A cloud operations team is preparing for a disaster recovery drill for a multi-tier application. Which TWO activities are essential for verifying the effectiveness of the DR plan? (Select TWO.)

Accepted Answer

Verify the RTO and RPO are achieved. Failover testing validates that the DR site takes over correctly, and RTO/RPO verification ensures the recovery meets business requirements. Updating documentation is important but not a verification activity.

Answer

Review the incident response plan

Answer

Update the asset inventory

Answer

Conduct a security audit

Question 15

A company uses Azure VMs and wants to automate patching with minimal downtime. The application is stateless and can tolerate instance restarts. The patch schedule must ensure that at least 2 instances remain available during the update. Which THREE actions should the administrator take? (Select THREE.)

Accepted Answer

Use Azure Update Management to schedule patch deployments. Using an availability set ensures VMs are distributed across update domains, allowing rolling updates. Azure Update Management can schedule patches. Configuring a maintenance window is essential for controlling when patches are applied.

Answer

Enable auto-scaling for the VM scale set

Answer

Create a custom script extension to apply patches