CompTIA CV0-004 Practice Test 11
Question 100
After correcting the following problem, what result would best confirm success? A deployment pulls mutable latest container tags from an unrestricted public registry and unexpectedly runs unreviewed code.
- An external test reaches the intended handler while closed ports remain inaccessible.
- The migrated VM runs the required OS build and its patch ownership is documented.
- After rescheduling the container, original records remain readable and backups restore successfully.
- Running pods report the approved digest and unauthorized images are rejected.
Explanation
Correct Answer
D:Running pods report the approved digest and unauthorized images are rejected. This proves the service behavior rather than just showing a changed configuration. Immutable digests identify exact artifacts; tag names can be moved and registry trust is not implied by image existence.
Incorrect Answers
A:That approach would help when a containerized API responds inside its pod but external requests time out after deployment. The required acceptance result is: Running pods report the approved digest and unauthorized images are rejected.
B:Immutable digests identify exact artifacts; tag names can be moved and registry trust is not implied by image existence. The alternative is aimed at a different condition: A logistics company must retain control of its guest operating system and network firewall while migrating an old application into cloud-hosted virtual machines.
C:Immutable digests identify exact artifacts; tag names can be moved and registry trust is not implied by image existence. The proposed measure serves a related cloud task, but the present symptom calls for a more specific response.
Question 101
The release owner investigates: a deployment pulls mutable latest container tags from an unrestricted public registry and unexpectedly runs unreviewed code. Which diagnostic inspection would isolate the immediate dependency?
- Inspect image references, signatures, scan results and admission policy.
- Profile random versus sequential reads, queue depth, working set and price-per-IOPS.
- Compare application bind address, container port, service port and effective ingress rules.
- Inspect desired replicas, readiness probes, resource requests and scheduling events.
Explanation
Correct Answer
A:Inspect image references, signatures, scan results and admission policy. This distinguishes the relevant dependency before changing cloud resources. Immutable digests identify exact artifacts; tag names can be moved and registry trust is not implied by image existence.
Incorrect Answers
B:That approach would help when a reporting database needs low random-read latency while a backup archive only streams large sequential files. Inspect image references, signatures, scan results and admission policy.
C:Compare application bind address, container port, service port and effective ingress rules. The relevant cloud response here is: Inspect image references, signatures, scan results and admission policy.
D:Inspect desired replicas, readiness probes, resource requests and scheduling events. The relevant cloud response here is: Inspect image references, signatures, scan results and admission policy.
Question 102
During an approved service change at a regional health provider, a containerized API responds inside its pod but external requests time out after deployment. Which action is the most targeted?
- Pin approved image digests from a controlled registry and scan images before deployment.
- Align container listener, service target port and ingress routing with the intended protocol.
- Declare replica count and health probes to the orchestrator with appropriate resource limits.
- Configure a site-to-site IPsec VPN with approved routing and redundant tunnels as required.
Explanation
Correct Answer
B:Container network namespaces and host/service port mappings must agree for traffic to reach the process. The change should be verified, not just applied: An external test reaches the intended handler while closed ports remain inaccessible.
Incorrect Answers
A:That approach would help when a deployment pulls mutable latest container tags from an unrestricted public registry and unexpectedly runs unreviewed code. In this case, container network namespaces and host/service port mappings must agree for traffic to reach the process.
C:An orchestrator reconciles actual replicas with the declared desired state and reschedules failed workloads. The relevant cloud response here is: Align container listener, service target port and ingress routing with the intended protocol.
D:A VPN protects traffic over an untrusted network but does not guarantee dedicated bandwidth or immunity to internet outages. The relevant cloud response here is: Align container listener, service target port and ingress routing with the intended protocol.
Question 103
During architecture review, a containerized API responds inside its pod but external requests time out after deployment. Which statement best explains why the corrective approach works?
- Immutable digests identify exact artifacts; tag names can be moved and registry trust is not implied by image existence.
- Container writable layers are often ephemeral, so durable application state belongs on separately managed persistent volumes.
- Container network namespaces and host/service port mappings must agree for traffic to reach the process.
- A CDN places cacheable objects near viewers, reducing origin latency and repeated transfer demand.
Explanation
Correct Answer
C:The evidence of success is: An external test reaches the intended handler while closed ports remain inaccessible.
Incorrect Answers
A:That approach would help when a deployment pulls mutable latest container tags from an unrestricted public registry and unexpectedly runs unreviewed code. Check the difference through: Compare application bind address, container port, service port and effective ingress rules.
B:The alternative is aimed at a different condition: A database container loses its records whenever orchestration replaces a failed container replica. Container network namespaces and host/service port mappings must agree for traffic to reach the process.
D:The proposed measure serves a related cloud task, but the present symptom calls for a more specific response. Container network namespaces and host/service port mappings must agree for traffic to reach the process. Check the difference through: Compare application bind address, container port, service port and effective ingress rules.
Question 104
A service owner asks for a measurable acceptance test: a containerized API responds inside its pod but external requests time out after deployment. Which result should the team obtain?
- A test interruption resumes unfinished work without losing completed outputs.
- Running pods report the approved digest and unauthorized images are rejected.
- After rescheduling the container, original records remain readable and backups restore successfully.
- An external test reaches the intended handler while closed ports remain inaccessible.
Explanation
Correct Answer
D:An external test reaches the intended handler while closed ports remain inaccessible. This proves the service behavior rather than just showing a changed configuration. Container network namespaces and host/service port mappings must agree for traffic to reach the process.
Incorrect Answers
A:That approach would help when an overnight rendering job can restart tasks but fails unpredictably when its lowest-cost instances are reclaimed. The required acceptance result is: An external test reaches the intended handler while closed ports remain inaccessible.
B:Container network namespaces and host/service port mappings must agree for traffic to reach the process.
C:After rescheduling the container, original records remain readable and backups restore successfully. The relevant cloud response here is: An external test reaches the intended handler while closed ports remain inaccessible.
Question 105
Before changing production at a global distribution company, a containerized API responds inside its pod but external requests time out after deployment. Which evidence should the engineer check first?
- Compare application bind address, container port, service port and effective ingress rules.
- Inspect database IOPS, throughput, latency percentiles and volume attachment semantics.
- Review volume mounts, storage class binding and stateful workload scheduling.
- Inspect desired replicas, readiness probes, resource requests and scheduling events.
Explanation
Correct Answer
A:Compare application bind address, container port, service port and effective ingress rules. This distinguishes the relevant dependency before changing cloud resources. Container network namespaces and host/service port mappings must agree for traffic to reach the process.
Incorrect Answers
B:That approach would help when a transactional database needs a low-latency device-like volume for its database files and write-ahead log. Compare application bind address, container port, service port and effective ingress rules.
C:Review volume mounts, storage class binding and stateful workload scheduling. The relevant cloud response here is: Compare application bind address, container port, service port and effective ingress rules.
D:Inspect desired replicas, readiness probes, resource requests and scheduling events. The relevant cloud response here is: Compare application bind address, container port, service port and effective ingress rules.
Question 106
The platform team reviews a case where an operations team manually restarts failed containers after host outages even though a cluster scheduler is available. What should the team change first?
- Process time-critical alerts at the edge and synchronize historical events when links recover.
- Declare replica count and health probes to the orchestrator with appropriate resource limits.
- Align container listener, service target port and ingress routing with the intended protocol.
- Attach persistent storage through the supported volume claim and backup mechanism.
Explanation
Correct Answer
B:An orchestrator reconciles actual replicas with the declared desired state and reschedules failed workloads. The change should be verified, not just applied: A simulated node failure triggers replacement of the healthy replica count within the service objective.
Incorrect Answers
A:That approach would help when a factory sensor line must issue local safety alerts even when the internet link to central cloud is interrupted. In this case, an orchestrator reconciles actual replicas with the declared desired state and reschedules failed workloads.
C:Container network namespaces and host/service port mappings must agree for traffic to reach the process. The relevant cloud response here is: Declare replica count and health probes to the orchestrator with appropriate resource limits.
D:Container writable layers are often ephemeral, so durable application state belongs on separately managed persistent volumes. The relevant cloud response here is: Declare replica count and health probes to the orchestrator with appropriate resource limits.
Question 107
An operations team manually restarts failed containers after host outages even though a cluster scheduler is available. What underlying cloud behavior should the engineer recognize?
- Warm standby balances cost and recovery speed; a cold site may require longer provisioning and restoration.
- Immutable digests identify exact artifacts; tag names can be moved and registry trust is not implied by image existence.
- An orchestrator reconciles actual replicas with the declared desired state and reschedules failed workloads.
- Container network namespaces and host/service port mappings must agree for traffic to reach the process.
Explanation
Correct Answer
C:The evidence of success is: A simulated node failure triggers replacement of the healthy replica count within the service objective.
Incorrect Answers
A:That approach would help when a regional claims service has a four-hour recovery target but cannot justify a continuously active second production stack. Check the difference through: Inspect desired replicas, readiness probes, resource requests and scheduling events.
B:The alternative is aimed at a different condition: A deployment pulls mutable latest container tags from an unrestricted public registry and unexpectedly runs unreviewed code. It does not directly resolve the described failure. An orchestrator reconciles actual replicas with the declared desired state and reschedules failed workloads. Check the difference through: Inspect desired replicas, readiness probes, resource requests and scheduling events.
D:The proposed measure serves a related cloud task, but the present symptom calls for a more specific response. An orchestrator reconciles actual replicas with the declared desired state and reschedules failed workloads. Check the difference through: Inspect desired replicas, readiness probes, resource requests and scheduling events.
Question 108
During postchange validation at a regional health provider, an operations team manually restarts failed containers after host outages even though a cluster scheduler is available. What outcome would prove the intended safeguard works?
- After rescheduling the container, original records remain readable and backups restore successfully.
- Each consumer processes the same test event independently and failures do not block the others.
- An external test reaches the intended handler while closed ports remain inaccessible.
- A simulated node failure triggers replacement of the healthy replica count within the service objective.
Explanation
Correct Answer
D:A simulated node failure triggers replacement of the healthy replica count within the service objective. This proves the service behavior rather than just showing a changed configuration. An orchestrator reconciles actual replicas with the declared desired state and reschedules failed workloads.
Incorrect Answers
A:That approach would help when a database container loses its records whenever orchestration replaces a failed container replica. The required acceptance result is: A simulated node failure triggers replacement of the healthy replica count within the service objective.
B:Each consumer processes the same test event independently and failures do not block the others. The relevant cloud response here is: A simulated node failure triggers replacement of the healthy replica count within the service objective.
C:An external test reaches the intended handler while closed ports remain inaccessible. The relevant cloud response here is: A simulated node failure triggers replacement of the healthy replica count within the service objective.
Question 109
A review identifies this symptom: an operations team manually restarts failed containers after host outages even though a cluster scheduler is available. Which read-only investigation is most useful?
- Inspect desired replicas, readiness probes, resource requests and scheduling events.
- Map stage dependencies, retry limits, state checkpoints and rollback semantics.
- Inspect image references, signatures, scan results and admission policy.
- Review volume mounts, storage class binding and stateful workload scheduling.
Explanation
Correct Answer
A:Inspect desired replicas, readiness probes, resource requests and scheduling events. This distinguishes the relevant dependency before changing cloud resources. An orchestrator reconciles actual replicas with the declared desired state and reschedules failed workloads.
Incorrect Answers
B:That approach would help when a multi-stage ingestion job leaves partial data when one downstream transformation fails halfway through. Inspect desired replicas, readiness probes, resource requests and scheduling events.
C:Inspect image references, signatures, scan results and admission policy. The relevant cloud response here is: Inspect desired replicas, readiness probes, resource requests and scheduling events.
D:Review volume mounts, storage class binding and stateful workload scheduling. The relevant cloud response here is: Inspect desired replicas, readiness probes, resource requests and scheduling events.
Question 110
At a regional health provider, engineers clone a production VM with embedded credentials to create development machines. Which response most directly addresses this specific cloud challenge?
- Apply supported host affinity constraints and assess their availability impact.
- Build sanitized reusable golden images and personalize instances through approved initialization.
- Attach a suitable block volume with required IOPS and availability characteristics.
- Evaluate SAN-backed shared block volumes and supported multipathing across hosts.
Explanation
Correct Answer
B:VM cloning duplicates disk state including credentials unless generalized and sanitized, increasing secret reuse risk. The change should be verified, not just applied: New VMs start with unique credentials and consistent baseline configuration without production tokens.
Incorrect Answers
A:That approach would help when a license tied to a designated physical host is violated when the scheduler migrates the workload to another server. In this case, vM cloning duplicates disk state including credentials unless generalized and sanitized, increasing secret reuse risk.
C:Block storage exposes addressable volumes suited to file systems and databases but may require host-level formatting and backup. The relevant cloud response here is: Build sanitized reusable golden images and personalize instances through approved initialization.
D:SAN presents block devices to hosts, whereas NAS provides network file shares with different file-level semantics. The relevant cloud response here is: Build sanitized reusable golden images and personalize instances through approved initialization.