How should I use these Cloud Architecture and Design practice questions?

Read each scenario carefully and choose your answer before revealing the explanation. Then check why your choice was right or wrong. Repeat until the reasoning feels automatic.

Can I practise just Cloud Architecture and Design questions in a focused session?

Yes — use the session launcher on this page to start a 10-, 20-, 30- or 50-question session drawn entirely from the Cloud Architecture and Design domain.

CV0-004 · topic practice

Cloud Architecture and Design practice questions

Practise CompTIA Cloud+ CV0-004 Cloud Architecture and Design practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.

Courseiva uses original exam-style practice questions designed for learning and revision. The goal is to understand the concepts, recognise exam patterns, and improve through explanations — not memorise copied exam dumps.

Reviewed byJohnson Ajibi· MSc IT Security

20 questionsDomain: Cloud Architecture and Design

Practice 10 questions Browse domain →

What the exam tests

What to know about Cloud Architecture and Design

Cloud concepts questions usually test the service model (IaaS/PaaS/SaaS) and deployment model (public/private/hybrid/community) appropriate for a given scenario.

IaaS, PaaS and SaaS responsibilities and examples.

Public, private, hybrid and community cloud deployment models.

On-premises vs cloud trade-offs: cost, control, scalability.

How cloud connectivity options (VPN, Direct Connect, ExpressRoute) work.

Watch out for

Common Cloud Architecture and Design exam traps

▸IaaS gives you infrastructure control; SaaS gives you only the application.
▸Hybrid cloud combines on-premises and public cloud — not two public clouds.
▸Cloud does not automatically mean cheaper or more secure.
▸Management responsibility shifts with each service model (IaaS → PaaS → SaaS).

Practice set

Cloud Architecture and Design questions

20 questions · select your answer, then reveal the explanation

Question 1easymultiple choice

Read the full NAT/PAT explanation →

A company is migrating a legacy on-premises application to a public cloud. The application currently uses a single monolithic architecture and relies on a local file system for storage. The cloud architect needs to redesign the application to take advantage of cloud-native features. Which design principle should the architect prioritize to ensure scalability and resilience?

Trap 1: Maintain the monolithic architecture and connect via VPN to…

VPN does not address scalability or resilience.

Trap 2: Use vertical scaling by increasing vCPU and RAM on a single large VM

Vertical scaling has limits and does not provide resilience.

Trap 3: Deploy the entire application in a single availability zone to…

Single availability zone lacks high availability.

Study all Cloud Architecture and Design common traps →

A
Maintain the monolithic architecture and connect via VPN to on-premises storage
Why wrong: VPN does not address scalability or resilience.
B
Use vertical scaling by increasing vCPU and RAM on a single large VM
Why wrong: Vertical scaling has limits and does not provide resilience.
C
Refactor the application into microservices deployed across multiple instances
Microservices enable independent scaling and fault isolation.
D
Deploy the entire application in a single availability zone to reduce latency
Why wrong: Single availability zone lacks high availability.

Full breakdown with real-world context →

Question 2mediummultiple choice

Read the full Cloud Architecture and Design explanation →

A cloud architect is designing a multi-tier web application in a cloud environment. The application must handle unpredictable traffic spikes while minimizing costs. The architect decides to use auto-scaling groups for the web tier and a managed database service for the data tier. Which additional design consideration is MOST important to ensure the application remains available during a regional outage?

Trap 1: Configure the auto-scaling group to burst into on-premises…

On-premises bursting is not standard and may not be feasible.

Trap 2: Increase the size of the web tier instances to handle more traffic

Vertical scaling does not provide redundancy.

Trap 3: Use a read replica of the database to distribute read traffic

Read replicas do not provide automatic failover for writes.

Study all Cloud Architecture and Design common traps →

A
Distribute the auto-scaling group across multiple availability zones
Multi-AZ deployment ensures high availability during zone failures.
B
Configure the auto-scaling group to burst into on-premises resources during spikes
Why wrong: On-premises bursting is not standard and may not be feasible.
C
Increase the size of the web tier instances to handle more traffic
Why wrong: Vertical scaling does not provide redundancy.
D
Use a read replica of the database to distribute read traffic
Why wrong: Read replicas do not provide automatic failover for writes.

Full breakdown with real-world context →

Question 3hardmultiple choice

Read the full Cloud Architecture and Design explanation →

A company is deploying a critical financial application on a private cloud. The compliance team requires that all data at rest be encrypted with a key managed by the company's hardware security module (HSM). The cloud architect must select a storage solution that supports customer-managed keys and integrates with the existing HSM. Which storage option should the architect choose?

Trap 1: Object storage with server-side encryption using a cloud provider…

Provider-managed keys do not meet compliance for customer-managed keys.

Trap 2: Instance store volumes on the compute nodes

Ephemeral storage is not persistent and typically does not support customer-managed keys.

Trap 3: Network-attached storage (NAS) appliance with built-in encryption

NAS appliances usually manage their own keys, not external HSM.

Study all Cloud Architecture and Design common traps →

A
Object storage with server-side encryption using a cloud provider key
Why wrong: Provider-managed keys do not meet compliance for customer-managed keys.
B
Instance store volumes on the compute nodes
Why wrong: Ephemeral storage is not persistent and typically does not support customer-managed keys.
C
Encrypted volumes on a software-defined storage (SDS) cluster
SDS volumes can use customer-managed keys and integrate with HSMs.
D
Network-attached storage (NAS) appliance with built-in encryption
Why wrong: NAS appliances usually manage their own keys, not external HSM.

Full breakdown with real-world context →

Question 4easymultiple choice

Study the full virtualization explanation →

A cloud engineer is troubleshooting a performance issue in a virtualized environment. A critical application is running slowly, and the engineer suspects resource contention. The host server has 32 vCPUs and 256 GB of RAM, running four VMs. Which tool should the engineer use to determine if CPU ready time is causing the performance degradation?

Trap 1: Run the 'top' command inside the affected VM

'top' shows guest CPU usage, not hypervisor contention.

Trap 2: Deploy a network analyzer to capture traffic between VMs

Network analyzer does not measure CPU contention.

Trap 3: Check the performance monitor in the guest operating system

Guest OS monitors do not show hypervisor-level metrics like CPU ready.

Study all Cloud Architecture and Design common traps →

A
Run the 'top' command inside the affected VM
Why wrong: 'top' shows guest CPU usage, not hypervisor contention.
B
Deploy a network analyzer to capture traffic between VMs
Why wrong: Network analyzer does not measure CPU contention.
C
Check the performance monitor in the guest operating system
Why wrong: Guest OS monitors do not show hypervisor-level metrics like CPU ready.
D
Use the hypervisor's monitoring console to view CPU ready time
Hypervisor consoles provide CPU ready metrics indicating contention.

Full breakdown with real-world context →

Question 5mediummultiple choice

Read the full Cloud Architecture and Design explanation →

A cloud architect is designing a disaster recovery plan for a cloud-based application. The primary site is in a cloud region, and the recovery site is in a different geographic region. The application uses a relational database with synchronous replication. The recovery time objective (RTO) is 1 hour, and the recovery point objective (RPO) is 15 minutes. Which replication strategy BEST meets these objectives?

Trap 1: Perform daily backups of the database and restore at the recovery…

Daily backups result in RPO up to 24 hours, exceeding 15 minutes.

Trap 2: Use storage-level asynchronous replication between regions

Asynchronous replication may have higher RPO and slower failover.

Trap 3: Use a script to copy database logs every hour to the recovery site

Hourly log shipping results in RPO up to 1 hour, exceeding 15 minutes.

Study all Cloud Architecture and Design common traps →

A
Perform daily backups of the database and restore at the recovery site
Why wrong: Daily backups result in RPO up to 24 hours, exceeding 15 minutes.
B
Use storage-level asynchronous replication between regions
Why wrong: Asynchronous replication may have higher RPO and slower failover.
C
Use a script to copy database logs every hour to the recovery site
Why wrong: Hourly log shipping results in RPO up to 1 hour, exceeding 15 minutes.
D
Configure synchronous database replication with automated failover
Synchronous replication provides near-zero RPO and fast failover.

Full breakdown with real-world context →

Question 6mediummulti select

Read the full Cloud Architecture and Design explanation →

A cloud architect is designing a hybrid cloud environment that connects an on-premises data center to a public cloud. The architect needs to ensure secure, low-latency connectivity and isolate traffic between different business units. Which TWO solutions should the architect implement? (Choose two.)

Trap 1: Configure a NAT gateway to allow outbound internet access

NAT gateway is for internet access, not isolation.

Trap 2: Deploy a bastion host in a public subnet for administrative access

Bastion host is for management, not network isolation.

Trap 3: Use a transit gateway to interconnect all VPCs

Transit gateway centralizes connectivity but does not inherently isolate; additional routing policies are needed.

Study all Cloud Architecture and Design common traps →

A
Configure a NAT gateway to allow outbound internet access
Why wrong: NAT gateway is for internet access, not isolation.
B
Establish a dedicated VPN or direct connect between on-premises and cloud
Provides secure, low-latency connectivity.
C
Implement VPC peering to connect VPCs for different business units
VPC peering allows isolated traffic between VPCs.
D
Deploy a bastion host in a public subnet for administrative access
Why wrong: Bastion host is for management, not network isolation.
E
Use a transit gateway to interconnect all VPCs
Why wrong: Transit gateway centralizes connectivity but does not inherently isolate; additional routing policies are needed.

Full breakdown with real-world context →

Question 7hardmulti select

Read the full Cloud Architecture and Design explanation →

A cloud administrator is reviewing the security posture of a cloud deployment. The company has a policy of least privilege and must ensure that only authorized services can access storage buckets. Which THREE mechanisms should the administrator configure to enforce this policy? (Choose three.)

Trap 1: Network ACLs that block unauthorized IP ranges

Network ACLs control traffic at the subnet level, not service-level access.

Trap 2: Security groups that allow traffic from authorized services

Security groups apply to compute instances, not storage buckets.

Study all Cloud Architecture and Design common traps →

A
Network ACLs that block unauthorized IP ranges
Why wrong: Network ACLs control traffic at the subnet level, not service-level access.
B
Bucket policies that restrict access to specific AWS services
Bucket policies define who can access the bucket and under what conditions.
C
Service control policies (SCPs) to restrict permissions at the account level
SCPs set permission boundaries for accounts, enforcing least privilege across services.
D
IAM roles that grant permissions to services requiring access
IAM roles provide temporary credentials for services to access resources.
E
Security groups that allow traffic from authorized services
Why wrong: Security groups apply to compute instances, not storage buckets.

Full breakdown with real-world context →

Question 8hardmultiple choice

Read the full NAT/PAT explanation →

A company is migrating its on-premises e-commerce application to a public cloud. The application consists of a stateless web tier, a stateful application tier that stores session data in memory, and a relational database. The migration must ensure high availability, scalability, and minimal downtime during cutover. The cloud provider offers load balancers, auto-scaling groups, managed database services, and caching services. The current on-premises architecture uses a single web server, a single application server, and a single database server. The application tier stores session data in local memory, which is lost if the server fails. The team needs to redesign the architecture to be cloud-native. Which of the following is the BEST course of action?

Trap 1: Deploy the web tier behind a load balancer with auto-scaling

While this improves scalability for the web tier, the application tier remains stateful and session replication to a single secondary does not provide full high availability; a distributed cache would be better.

Trap 2: Use a load balancer for the web tier with auto-scaling

Sticky sessions tie a user to a specific instance, reducing scalability and availability. The database is still a single point of failure.

Trap 3: Deploy both web and application tiers behind a load balancer with…

Sticky sessions limit scalability because sessions are tied to specific instances. The application tier still stores session data in memory, which is lost if the instance fails.

Study all Cloud Architecture and Design common traps →

A
Deploy the web tier behind a load balancer with auto-scaling. Keep the application tier as a single instance with session replication to a secondary instance. Use a managed database with a read replica.
Why wrong: While this improves scalability for the web tier, the application tier remains stateful and session replication to a single secondary does not provide full high availability; a distributed cache would be better.
B
Deploy the web tier behind a load balancer with auto-scaling. Move session state from the application tier to a distributed caching service. Deploy the application tier behind a separate load balancer with auto-scaling. Migrate the database to a managed Multi-AZ deployment.
This design is fully cloud-native: the web and application tiers are stateless and auto-scaled, session state is stored externally in a highly available cache, and the database is managed with Multi-AZ for high availability.
C
Use a load balancer for the web tier with auto-scaling. Deploy the application tier as a single large instance with sticky sessions. Migrate the database to a larger single-instance managed database.
Why wrong: Sticky sessions tie a user to a specific instance, reducing scalability and availability. The database is still a single point of failure.
D
Deploy both web and application tiers behind a load balancer with auto-scaling. Use sticky sessions to maintain session state. Migrate the database to a managed Multi-AZ deployment.
Why wrong: Sticky sessions limit scalability because sessions are tied to specific instances. The application tier still stores session data in memory, which is lost if the instance fails.

Full breakdown with real-world context →

Question 9easymultiple choice

Read the full Cloud Architecture and Design explanation →

A company is migrating its on-premises application to the cloud and needs to ensure high availability. The application requires a stateless web tier and a stateful database tier. Which design approach BEST meets these requirements?

Trap 1: Deploy one large web server and one large database server.

Single instances are single points of failure.

Trap 2: Use round-robin DNS for web servers and a read replica for the…

Round-robin DNS does not handle failures; read replica is not for failover.

Trap 3: Use auto-scaling for web servers and a single database instance.

Single database instance is not highly available.

Study all Cloud Architecture and Design common traps →

A
Deploy one large web server and one large database server.
Why wrong: Single instances are single points of failure.
B
Deploy web servers behind a load balancer and use a managed database with multi-AZ replication.
Provides redundancy for both tiers.
C
Use round-robin DNS for web servers and a read replica for the database.
Why wrong: Round-robin DNS does not handle failures; read replica is not for failover.
D
Use auto-scaling for web servers and a single database instance.
Why wrong: Single database instance is not highly available.

Full breakdown with real-world context →

Question 10mediummultiple choice

Read the full Cloud Architecture and Design explanation →

A cloud architect is designing a multi-tier application that must meet a recovery time objective (RTO) of 15 minutes and a recovery point objective (RPO) of 1 hour. Which disaster recovery strategy is MOST cost-effective while meeting these requirements?

Trap 1: Backup and restore from object storage

RTO likely exceeds 15 minutes.

Trap 2: Pilot light with database replication

May not meet 15-minute RTO due to provisioning time.

Trap 3: Active-active across two regions

Costs more than necessary.

Study all Cloud Architecture and Design common traps →

A
Backup and restore from object storage
Why wrong: RTO likely exceeds 15 minutes.
B
Warm standby with database replication
Meets RTO and RPO cost-effectively.
C
Pilot light with database replication
Why wrong: May not meet 15-minute RTO due to provisioning time.
D
Active-active across two regions
Why wrong: Costs more than necessary.

Full breakdown with real-world context →

Question 11hardmultiple choice

Review the full routing breakdown →

A company has a cloud environment with multiple VPCs that need to communicate with each other using private IP addresses. The company wants a centrally managed solution that simplifies routing and security. Which networking architecture should the architect implement?

Trap 1: VPC peering between all VPCs

Does not scale well; complex full mesh.

Trap 2: Direct Connect to each VPC

Overkill for VPC-to-VPC communication.

Trap 3: VPN connections between all VPCs

Unnecessary and adds latency.

Study all Cloud Architecture and Design common traps →

A
VPC peering between all VPCs
Why wrong: Does not scale well; complex full mesh.
B
Direct Connect to each VPC
Why wrong: Overkill for VPC-to-VPC communication.
C
VPN connections between all VPCs
Why wrong: Unnecessary and adds latency.
D
Transit VPC with a VPN appliance
Centralized hub for routing and security.

Full breakdown with real-world context →

Question 12easymultiple choice

Read the full Cloud Architecture and Design explanation →

An architect is designing a cloud application that must handle unpredictable spikes in traffic. The application should automatically add resources during peak demand and remove them when demand decreases to minimize costs. Which scaling strategy should be used?

Trap 1: Scheduled scaling based on historical patterns

Cannot handle unpredictable spikes.

Trap 2: Vertical scaling of existing instances

Limited ceiling and may require downtime.

Trap 3: Manual scaling by operations team

Cannot react quickly to unpredictable spikes.

Study all Cloud Architecture and Design common traps →

A
Scheduled scaling based on historical patterns
Why wrong: Cannot handle unpredictable spikes.
B
Vertical scaling of existing instances
Why wrong: Limited ceiling and may require downtime.
C
Manual scaling by operations team
Why wrong: Cannot react quickly to unpredictable spikes.
D
Horizontal auto-scaling based on CPU utilization
Automatically adds/removes instances as needed.

Full breakdown with real-world context →

Question 13mediumdrag order

Read the full Cloud Architecture and Design explanation →

Order the steps to configure a load balancer to distribute traffic across multiple web servers.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

5Step 5

Question 14mediumdrag order

Read the full Cloud Architecture and Design explanation →

Order the steps to migrate an on-premises database to a cloud-managed database service (e.g., RDS, Cloud SQL).

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

5Step 5

Question 15mediummatching

Read the full Cloud Architecture and Design explanation →

Match each cloud deployment model to its description.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts

Matches

Shared infrastructure over the internet

Dedicated to a single organization

Combination of public and private

Shared by several organizations with common concerns

Question 16mediummatching

Read the full Cloud Architecture and Design explanation →

Match each cost management concept to its description.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts

Matches

Prepaid compute for discounted rate

Cheap compute with possible termination

Adjust resources based on demand

Label resources for cost allocation

Upfront purchase vs operational expense

Question 17easymultiple choice

Read the full Cloud Architecture and Design explanation →

A startup is deploying a web application on a public cloud and expects variable traffic throughout the day. The team wants to minimize costs while ensuring that the application can handle sudden spikes in demand. Which scaling strategy best meets these requirements?

Trap 1: Horizontal scaling using a fixed schedule

Fixed schedule cannot handle unexpected demand.

Trap 2: Vertical scaling during off-peak hours

Vertical scaling is limited by instance size and causes downtime.

Trap 3: Manual scaling based on historical data

Manual scaling cannot react to sudden spikes.

Study all Cloud Architecture and Design common traps →

A
Auto scaling based on CPU utilization thresholds
Auto scaling adjusts resources dynamically to meet demand.
B
Horizontal scaling using a fixed schedule
Why wrong: Fixed schedule cannot handle unexpected demand.
C
Vertical scaling during off-peak hours
Why wrong: Vertical scaling is limited by instance size and causes downtime.
D
Manual scaling based on historical data
Why wrong: Manual scaling cannot react to sudden spikes.

Full breakdown with real-world context →

Question 18mediummultiple choice

Read the full Cloud Architecture and Design explanation →

A company is migrating its on-premises application to the cloud and wants to ensure high availability across multiple geographic regions. The application consists of stateless web servers and a stateful database. Which architecture should the company implement?

Trap 1: Active-passive web servers in two regions with a single database in…

Single database is a single point of failure.

Trap 2: Active-active web servers in two regions with read replicas in each…

Read replicas do not handle write failures.

Trap 3: Active-active web servers in one region with a standby database in…

Standby database may not be promoted quickly enough.

Study all Cloud Architecture and Design common traps →

A
Active-passive web servers in two regions with a single database in the primary region
Why wrong: Single database is a single point of failure.
B
Active-active web servers in two regions with read replicas in each region
Why wrong: Read replicas do not handle write failures.
C
Active-active web servers in two regions with a multi-region database replication
Multi-region replication allows failover for both reads and writes.
D
Active-active web servers in one region with a standby database in another region
Why wrong: Standby database may not be promoted quickly enough.

Full breakdown with real-world context →

Question 19hardmultiple choice

Read the full Cloud Architecture and Design explanation →

A financial services company must store sensitive customer data in the cloud. The compliance team requires that data at rest be encrypted using customer-managed keys (CMK), and that the keys are rotated every 90 days. Additionally, the cloud provider must not have access to the keys. Which key management solution should the company choose?

Trap 1: Store the encryption keys in the cloud provider's parameter store…

Not a dedicated HSM.

Trap 2: Use the cloud provider's default server-side encryption with a…

Provider has access to managed keys.

Trap 3: Implement client-side encryption using a third-party key management…

May not be fully integrated.

Study all Cloud Architecture and Design common traps →

A
Store the encryption keys in the cloud provider's parameter store with rotation policy
Why wrong: Not a dedicated HSM.
B
Use the cloud provider's default server-side encryption with a managed key
Why wrong: Provider has access to managed keys.
C
Use a dedicated HSM (hardware security module) with automated key rotation
Dedicated HSM ensures exclusive customer control and supports rotation.
D
Implement client-side encryption using a third-party key management service
Why wrong: May not be fully integrated.

Full breakdown with real-world context →

Question 20easymultiple choice

Read the full Cloud Architecture and Design explanation →

A company is designing a cloud architecture that must meet a recovery time objective (RTO) of 4 hours and a recovery point objective (RPO) of 1 hour for a critical database. The database is 500 GB and runs on a virtual machine. Which backup strategy should be used?

Trap 1: Take full backups weekly and differential backups daily

Cannot achieve 1-hour RPO.

Trap 2: Use continuous database replication to a standby instance

This is a high-availability solution, not a backup strategy.

Trap 3: Perform block-level incremental backups every 4 hours

Exceeds 1-hour RPO.

Study all Cloud Architecture and Design common traps →

A
Take daily snapshots and transaction log backups every hour
Meets both RTO and RPO.
B
Take full backups weekly and differential backups daily
Why wrong: Cannot achieve 1-hour RPO.
C
Use continuous database replication to a standby instance
Why wrong: This is a high-availability solution, not a backup strategy.
D
Perform block-level incremental backups every 4 hours
Why wrong: Exceeds 1-hour RPO.

Full breakdown with real-world context →

Continue with 20-question session →

Free account

Track your progress over time

Create a free account to save your results and see which topics improve across sessions.

Focused Cloud Architecture and Design sessions

Start a Cloud Architecture and Design only practice session

Every question in these sessions is drawn from the Cloud Architecture and Design domain — nothing else.

10 questions 20 questions 30 questions 50 questions

Browse all Cloud Architecture and Design questions →Mixed CV0-004 session

Frequently asked questions

What does the CV0-004 exam test about Cloud Architecture and Design?: Cloud concepts questions usually test the service model (IaaS/PaaS/SaaS) and deployment model (public/private/hybrid/community) appropriate for a given scenario.
How should I use these practice questions?: Select your answer before revealing the explanation. Then read why each option is right or wrong — this active recall approach builds retention far faster than re-reading notes.
Can I practise just Cloud Architecture and Design questions in a focused session?: Yes — the session launcher on this page draws every question from the Cloud Architecture and Design domain. Use a 10-question session first to gauge your baseline, then move to 20 or 30 once the weak spots are clear.
Where can I practise other CV0-004 topics?: Use the topic links above to move to related areas, or go back to the CV0-004 question bank to see all topics.
Are these real exam questions or dumps?: These are original practice questions written to test the same concepts the CV0-004 exam covers. They are not copied from any real exam or dump site.

Cloud Architecture and Design only

10 questions 20 questions 30 questions 50 questions

Mixed CV0-004 session

Track your progress

A free account saves results across sessions and highlights which topics need work.

Study resources

All CV0-004 questions Cloud Architecture and Design domain overview CV0-004 exam guide

Exam traps to avoid

▸IaaS gives you infrastructure control; SaaS gives you only the application.
▸Hybrid cloud combines on-premises and public cloud — not two public clouds.
▸Cloud does not automatically mean cheaper or more secure.
▸Management responsibility shifts with each service model (IaaS → PaaS → SaaS).

Cloud Architecture and Design practice questions

What to know about Cloud Architecture and Design

Common Cloud Architecture and Design exam traps

Cloud Architecture and Design questions

A cloud architect is designing a hybrid cloud environment that connects an on-premises data center to a public cloud. The architect needs to ensure secure, low-latency connectivity and isolate traffic between different business units. Which TWO solutions should the architect implement? (Choose two.)

A cloud administrator is reviewing the security posture of a cloud deployment. The company has a policy of least privilege and must ensure that only authorized services can access storage buckets. Which THREE mechanisms should the administrator configure to enforce this policy? (Choose three.)

A company is migrating its on-premises application to the cloud and needs to ensure high availability. The application requires a stateless web tier and a stateful database tier. Which design approach BEST meets these requirements?

A cloud architect is designing a multi-tier application that must meet a recovery time objective (RTO) of 15 minutes and a recovery point objective (RPO) of 1 hour. Which disaster recovery strategy is MOST cost-effective while meeting these requirements?

A company has a cloud environment with multiple VPCs that need to communicate with each other using private IP addresses. The company wants a centrally managed solution that simplifies routing and security. Which networking architecture should the architect implement?

An architect is designing a cloud application that must handle unpredictable spikes in traffic. The application should automatically add resources during peak demand and remove them when demand decreases to minimize costs. Which scaling strategy should be used?

Order the steps to configure a load balancer to distribute traffic across multiple web servers.

Order the steps to migrate an on-premises database to a cloud-managed database service (e.g., RDS, Cloud SQL).

Match each cloud deployment model to its description.

Match each cost management concept to its description.

A startup is deploying a web application on a public cloud and expects variable traffic throughout the day. The team wants to minimize costs while ensuring that the application can handle sudden spikes in demand. Which scaling strategy best meets these requirements?

A company is migrating its on-premises application to the cloud and wants to ensure high availability across multiple geographic regions. The application consists of stateless web servers and a stateful database. Which architecture should the company implement?

A company is designing a cloud architecture that must meet a recovery time objective (RTO) of 4 hours and a recovery point objective (RPO) of 1 hour for a critical database. The database is 500 GB and runs on a virtual machine. Which backup strategy should be used?

Track your progress over time

Start a Cloud Architecture and Design only practice session

Related CV0-004 topic practice pages

Operations and Support practice questions