CV0-004 Operations and Support Practice Test 8 — 15 Questions

Question 1

A cloud architect is designing a monitoring solution for a serverless application. The architect needs to collect custom application metrics and set up anomaly detection alerts. Which TWO services should be used? (Select TWO.)

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Cloud monitoring service. A cloud monitoring service can collect custom application metrics, and a monitoring service with anomaly detection capabilities can trigger alerts when behavior deviates from normal patterns. Cloud audit logging services are for auditing API calls, not metrics.

Answer

Configuration management service

Answer

Cloud audit logging service

Answer

Cloud logging service for log storage

Question 2

A cloud operations team wants to be notified when the average CPU utilization of an auto-scaling group exceeds 80% for 5 consecutive minutes. They also want to avoid notification storms. Which alerting configuration should they use?

Accepted Answer

Anomaly detection based on a band model with a sensitivity of 2. The question asks for an alerting configuration to notify when average CPU exceeds 80% for 5 consecutive minutes while avoiding notification storms. Options A, B, and C are scaling configurations (step scaling, simple scaling, scheduled scaling) that adjust capacity, not alert. Option D uses anomaly detection with a band model, which can dynamically define a normal range and generate alerts when metrics fall outside the band. Sensitivity 2 provides a balanced band that detects sustained anomalies, effectively alerting on consistent high CPU without storming. Thus D is the only alerting configuration among the choices.

Answer

Step scaling policy triggered by a CloudWatch Alarm with a threshold of 80% for 5 evaluation periods

Answer

Simple scaling policy with a cooldown period

Answer

Scheduled scaling action to increase capacity at peak times

Question 3

A company is migrating on-premises workloads to a public cloud. The disaster recovery plan requires an RTO of 15 minutes and an RPO of 5 minutes. Which replication strategy should be used for a critical database?

Accepted Answer

Continuous replication to a standby instance in another region. Continuous replication with synchronous or near-synchronous updates can achieve very low RPO (minutes) and low RTO. Cross-region replication may have higher latency, and snapshot-based backup typically has higher RPO and RTO.

Answer

Weekly full backups with daily incrementals stored in the same region

Answer

Scheduled snapshots every hour with cross-region copy

Answer

Daily snapshots replicated cross-region

Question 4

A cloud administrator needs to centralize logs from multiple cloud provider accounts and on-premises servers for security analysis. Which approach should be used?

Accepted Answer

Configure each account's API activity logging to deliver logs to a central storage bucket, and use a log collection agent on on-premises servers to send logs to a central log service. Centralized logging can be achieved by sending logs from multiple sources to a central storage and using a central log service for querying. API activity logging captures API calls from cloud provider accounts, and on-premises logs can be sent via a log collection agent to a central log service.

Answer

Create a serverless function that copies logs from each account to a central storage bucket in a management account

Answer

Enable virtual network flow logs in each account and store them locally

Answer

Use configuration compliance rules to aggregate logs into a single account

Question 5

A cloud engineer is implementing a tagging strategy for cost allocation. Which tags should be applied to resources to track costs by business unit and environment?

Accepted Answer

BusinessUnit and Environment. Tags like 'BusinessUnit' and 'Environment' are commonly used for cost allocation and reporting. Tags must be applied consistently for accurate cost tracking.

Answer

Owner and Department

Answer

Project and Application

Answer

Location and Region

Question 6

During a scheduled DR drill, the cloud team fails over a critical application to the secondary region. After the drill, the application is failed back. The application's RTO was 2 hours, but the actual failover took 2.5 hours. Which action should be taken to improve future failover times?

Accepted Answer

Automate the failover process using infrastructure as code and runbooks. Failing the RTO indicates the process is not meeting the target. Automating the failover process with scripts or runbooks reduces manual steps and time. Rehearsing the process more often also helps but automation directly reduces time.

Answer

Increase the frequency of DR drills

Answer

Increase the bandwidth between regions for data replication

Answer

Reduce the RTO to 1 hour to force faster execution

Question 7

A cloud administrator needs to apply security patches to a group of Windows servers during a maintenance window to minimize disruption. Which type of service should be used?

Accepted Answer

Patch automation service with maintenance window scheduling. Patch automation services allow administrators to define maintenance windows and automatically apply approved patches to managed instances, ensuring updates are applied with minimal disruption.

Answer

Vulnerability assessment service

Answer

Configuration compliance service

Answer

Configuration management and automation service

Question 8

A cloud architect is designing an auto-scaling policy for a web application. The application's traffic spikes predictably every weekday at 9 AM and decreases after 5 PM. Which scaling policy is most cost-effective?

Accepted Answer

Scheduled scaling policy that increases capacity at 8:45 AM and decreases at 5:15 PM. Scheduled scaling can add capacity before 9 AM and remove it after 5 PM, aligning capacity with predictable patterns without reacting to real-time metrics.

Answer

Step scaling policy that adds instances when CPU > 70%

Answer

Simple scaling policy with a cooldown of 300 seconds

Answer

Target tracking policy with a target CPU of 50%

Question 9

A cloud engineer is troubleshooting a web application that is experiencing slow response times. The engineer suspects a network bottleneck. Which tool should be used to analyze network traffic patterns and identify dropped packets?

Accepted Answer

VPC Flow Logs. VPC Flow Logs capture information about IP traffic going to and from network interfaces in a VPC and can be used to analyze traffic patterns and identify issues like dropped packets.

Answer

AWS X-Ray

Answer

Amazon CloudWatch Logs

Answer

AWS CloudTrail

Question 10

A cloud administrator needs to ensure that log data is retained for one year to meet compliance requirements. Which action should be taken for the log group in CloudWatch Logs?

Accepted Answer

Set the log group's retention policy to 365 days. CloudWatch Logs allows setting a retention policy on log groups to automatically expire log events after a specified number of days. Setting it to 365 days meets the one-year requirement.

Answer

Create a CloudWatch Events rule to delete logs after one year

Answer

Increase the log group's data durability by enabling encryption

Answer

Export logs to Amazon S3 and delete the log group

Question 11

A company uses a hybrid cloud environment with workloads in AWS and on-premises. They want to use a single monitoring dashboard to view metrics from both environments. Which solution should they implement?

Accepted Answer

Install the CloudWatch agent on on-premises servers and send metrics to CloudWatch, then create a CloudWatch dashboard. Amazon CloudWatch can collect metrics from on-premises servers using the CloudWatch agent, and from AWS services natively. A single CloudWatch dashboard can then display all metrics.

Answer

Deploy a third-party monitoring tool in AWS and replicate all logs to it

Answer

Set up a VPN connection and use VPC Flow Logs for on-premises traffic

Answer

Use AWS CloudTrail to log on-premises activity

Question 12

A cloud administrator is configuring an auto-scaling group for a stateless application. The scaling policy should add 2 instances when the average CPU utilization exceeds 80% for 5 minutes, and remove 1 instance when CPU drops below 40% for 5 minutes. Which type of scaling policy should be used?

Accepted Answer

Step scaling policy. Step scaling allows specifying different scaling adjustments based on the size of the alarm breach. It can add a specific number of instances for a high CPU breach and remove a specific number for a low CPU breach.

Answer

Simple scaling policy

Answer

Scheduled scaling policy

Answer

Target tracking scaling policy

Question 13

A cloud operations team is implementing automated patching for Linux servers using AWS Systems Manager Patch Manager. They need to ensure patches are applied with minimal disruption and have a rollback plan. Which TWO actions should they take? (Select TWO.)

Accepted Answer

Create AMI snapshots of instances before patching. Using maintenance windows ensures patches are applied during off-peak hours. Creating AMI snapshots before patching allows rollback if a patch causes issues.

Answer

Enable auto-scaling to replace instances if patching fails

Answer

Use AWS Config to verify patch compliance after patching

Answer

Set the patch baseline to automatically approve all patches

Question 14

A company is performing a disaster recovery test for a critical application. The test reveals that the application's RTO of 1 hour is not being met due to slow database restoration. Which THREE actions could help improve the restoration time? (Select THREE.)

Accepted Answer

Implement continuous replication to a standby database. Pre-warming standby instances reduces launch time, using faster storage like Provisioned IOPS speeds up data access, and implementing continuous replication reduces the amount of data to restore.

Answer

Disable encryption on the database to reduce overhead

Answer

Increase the retention period of automated backups

Question 15

A cloud administrator wants to set up cost monitoring and receive alerts when spending exceeds the budget. Which TWO AWS services should they use? (Select TWO.)

Accepted Answer

AWS Budgets. AWS Budgets allows you to set custom budgets and receive alerts when costs exceed thresholds. Cost Explorer provides visualization and analysis of costs and usage.

Answer

Amazon CloudWatch Billing Metrics

Answer

AWS Trusted Advisor

Answer

AWS Config