CompTIA CV0-004 Practice Test 26
Question 250
Before changing production at a regional health provider, users still reach an obsolete workload after a successful data migration because DNS cache and TLS names were not planned. Which evidence should the engineer check first?
- Map data classifications, provider location controls and cross-region dependencies.
- Review authoritative zones, caching TTLs, certificate SANs and routing policies.
- Inspect synchronous dependencies, data ownership and contract test coverage.
- Monitor replication lag, consistency checks, cutover routing and dual-write risk.
Explanation
Correct Answer
B:Review authoritative zones, caching TTLs, certificate SANs and routing policies. This distinguishes the relevant dependency before changing cloud resources. Network names, certificate trust and cached resolutions can become independent cutover failure points.
Incorrect Answers
A:That approach would help when a provider-to-provider migration risks moving citizen records into a location prohibited by contract. Review authoritative zones, caching TTLs, certificate SANs and routing policies.
C:This distinguishes the relevant dependency before changing cloud resources. The relevant cloud response here is: Review authoritative zones, caching TTLs, certificate SANs and routing policies.
D:Monitor replication lag, consistency checks, cutover routing and dual-write risk. The relevant cloud response here is: Review authoritative zones, caching TTLs, certificate SANs and routing policies.
Question 251
The deployment lead reviews a case where engineers manually create each testing environment, resulting in different subnets and load-balancer settings. What should the team change first?
- Lint and schema-validate the YAML configuration before deployment.
- Make creation conditional on resource existence and use idempotent API calls where available.
- Use reviewed declarative IaC modules and environment-specific parameters.
- Run drift detection against the versioned declaration and reconcile through approved review.
Explanation
Correct Answer
C:Declarative IaC encodes desired resource state and improves repeatability without removing the need for access controls. The change should be verified, not just applied: Two fresh deployments produce equivalent authorized topology and report the same resource plan.
Incorrect Answers
A:That approach would help when a deployment pipeline accepts a YAML config with misnested environment variables and an application starts with defaults. In this case, declarative IaC encodes desired resource state and improves repeatability without removing the need for access controls.
B:Retry-safe automation must avoid duplicate side effects and handle partially completed prior work. The relevant cloud response here is: Use reviewed declarative IaC modules and environment-specific parameters.
D:Drift is divergence between actual resources and the desired configuration, not necessarily an intentional new baseline. The relevant cloud response here is: Use reviewed declarative IaC modules and environment-specific parameters.
Question 252
Engineers manually create each testing environment, resulting in different subnets and load-balancer settings. What underlying cloud behavior should the engineer recognize?
- Drift is divergence between actual resources and the desired configuration, not necessarily an intentional new baseline.
- Configuration as code enforces operating system and application settings after infrastructure provisioning.
- IaC execution can delete resources to reconcile the desired state, so dry-run review matters.
- Declarative IaC encodes desired resource state and improves repeatability without removing the need for access controls.
Explanation
Correct Answer
D:The evidence of success is: Two fresh deployments produce equivalent authorized topology and report the same resource plan.
Incorrect Answers
A:That approach would help when after a release, an operator manually broadens a cloud firewall rule and future IaC previews show unexpected changes. Check the difference through: Inspect manual drift, state management, dependencies and parameter separation.
B:The alternative is aimed at a different condition: Server instances come up successfully but application services have inconsistent users, installed packages and firewall rules. Declarative IaC encodes desired resource state and improves repeatability without removing the need for access controls.
C:The proposed measure serves a related cloud task, but the present symptom calls for a more specific response. Declarative IaC encodes desired resource state and improves repeatability without removing the need for access controls. Check the difference through: Inspect manual drift, state management, dependencies and parameter separation.
Question 253
During postchange validation at a global distribution company, engineers manually create each testing environment, resulting in different subnets and load-balancer settings. What outcome would prove the intended safeguard works?
- Two fresh deployments produce equivalent authorized topology and report the same resource plan.
- A re-run converges an altered test server to the approved baseline without breaking the workload.
- Two consecutive executions converge to one resource identity with no duplicate permissions.
- A structured parser reports the expected nested fields and the application receives intended values.
Explanation
Correct Answer
A:Two fresh deployments produce equivalent authorized topology and report the same resource plan. This proves the service behavior rather than just showing a changed configuration. Declarative IaC encodes desired resource state and improves repeatability without removing the need for access controls.
Incorrect Answers
B:That approach would help when server instances come up successfully but application services have inconsistent users, installed packages and firewall rules. The required acceptance result is: Two fresh deployments produce equivalent authorized topology and report the same resource plan.
C:Declarative IaC encodes desired resource state and improves repeatability without removing the need for access controls. The alternative is aimed at a different condition: A cloud provisioning script creates duplicate service accounts whenever an operator retries a partially failed run.
D:Declarative IaC encodes desired resource state and improves repeatability without removing the need for access controls. The proposed measure serves a related cloud task, but the present symptom calls for a more specific response.
Question 254
A review identifies this symptom: engineers manually create each testing environment, resulting in different subnets and load-balancer settings. Which read-only investigation is most useful?
- Examine conditional branches, request idempotency tokens and partial-state cleanup.
- Inspect manual drift, state management, dependencies and parameter separation.
- Compare resource snapshots, IaC state, policy baselines and audit events.
- Inspect desired package versions, service states, users and idempotency behavior.
Explanation
Correct Answer
B:Inspect manual drift, state management, dependencies and parameter separation. This distinguishes the relevant dependency before changing cloud resources. Declarative IaC encodes desired resource state and improves repeatability without removing the need for access controls.
Incorrect Answers
A:That approach would help when a cloud provisioning script creates duplicate service accounts whenever an operator retries a partially failed run. Inspect manual drift, state management, dependencies and parameter separation.
C:Compare resource snapshots, IaC state, policy baselines and audit events. The relevant cloud response here is: Inspect manual drift, state management, dependencies and parameter separation.
D:Inspect desired package versions, service states, users and idempotency behavior. The relevant cloud response here is: Inspect manual drift, state management, dependencies and parameter separation.
Question 255
At a global distribution company, server instances come up successfully but application services have inconsistent users, installed packages and firewall rules. Which response most directly addresses this specific cloud challenge?
- Make creation conditional on resource existence and use idempotent API calls where available.
- Lint and schema-validate the YAML configuration before deployment.
- Apply versioned configuration-as-code policies to the guest systems.
- Run drift detection against the versioned declaration and reconcile through approved review.
Explanation
Correct Answer
C:Configuration as code enforces operating system and application settings after infrastructure provisioning. The change should be verified, not just applied: A re-run converges an altered test server to the approved baseline without breaking the workload.
Incorrect Answers
A:That approach would help when a cloud provisioning script creates duplicate service accounts whenever an operator retries a partially failed run. In this case, configuration as code enforces operating system and application settings after infrastructure provisioning.
B:YAML whitespace can change structure; syntactically valid text may still violate the target resource schema. The relevant cloud response here is: Apply versioned configuration-as-code policies to the guest systems.
D:Drift is divergence between actual resources and the desired configuration, not necessarily an intentional new baseline. The relevant cloud response here is: Apply versioned configuration-as-code policies to the guest systems.
Question 256
In a technical review for a regional health provider, server instances come up successfully but application services have inconsistent users, installed packages and firewall rules. Which cloud principle is most relevant?
- Declarative IaC encodes desired resource state and improves repeatability without removing the need for access controls.
- Configuration templates and version-control history can expose secrets even when deployment access is restricted.
- Drift is divergence between actual resources and the desired configuration, not necessarily an intentional new baseline.
- Configuration as code enforces operating system and application settings after infrastructure provisioning.
Explanation
Correct Answer
D:The evidence of success is: A re-run converges an altered test server to the approved baseline without breaking the workload.
Incorrect Answers
A:That approach would help when engineers manually create each testing environment, resulting in different subnets and load-balancer settings. Check the difference through: Inspect desired package versions, service states, users and idempotency behavior.
B:The alternative is aimed at a different condition: An IaC template has a production API token pasted into a committed plain-text parameter file. It does not directly resolve the described failure. Configuration as code enforces operating system and application settings after infrastructure provisioning. Check the difference through: Inspect desired package versions, service states, users and idempotency behavior.
C:The proposed measure serves a related cloud task, but the present symptom calls for a more specific response. Configuration as code enforces operating system and application settings after infrastructure provisioning. Check the difference through: Inspect desired package versions, service states, users and idempotency behavior.
Question 257
The security administrator has addressed this condition: server instances come up successfully but application services have inconsistent users, installed packages and firewall rules. Which observation verifies the outcome?
- A re-run converges an altered test server to the approved baseline without breaking the workload.
- Two consecutive executions converge to one resource identity with no duplicate permissions.
- The final resource state matches the approved version and unauthorized changes are logged.
- Two fresh deployments produce equivalent authorized topology and report the same resource plan.
Explanation
Correct Answer
A:A re-run converges an altered test server to the approved baseline without breaking the workload. This proves the service behavior rather than just showing a changed configuration. Configuration as code enforces operating system and application settings after infrastructure provisioning.
Incorrect Answers
B:That approach would help when a cloud provisioning script creates duplicate service accounts whenever an operator retries a partially failed run. The required acceptance result is: A re-run converges an altered test server to the approved baseline without breaking the workload.
C:The final resource state matches the approved version and unauthorized changes are logged. The relevant cloud response here is: A re-run converges an altered test server to the approved baseline without breaking the workload.
D:Two fresh deployments produce equivalent authorized topology and report the same resource plan. The relevant cloud response here is: A re-run converges an altered test server to the approved baseline without breaking the workload.
Question 258
During initial triage, server instances come up successfully but application services have inconsistent users, installed packages and firewall rules. Which check best narrows down the cause?
- Compare resource snapshots, IaC state, policy baselines and audit events.
- Inspect desired package versions, service states, users and idempotency behavior.
- Examine conditional branches, request idempotency tokens and partial-state cleanup.
- Review repository history, variable sources, secret references and pipeline scope.
Explanation
Correct Answer
B:Inspect desired package versions, service states, users and idempotency behavior. This distinguishes the relevant dependency before changing cloud resources. Configuration as code enforces operating system and application settings after infrastructure provisioning.
Incorrect Answers
A:That approach would help when after a release, an operator manually broadens a cloud firewall rule and future IaC previews show unexpected changes. Inspect desired package versions, service states, users and idempotency behavior.
C:Examine conditional branches, request idempotency tokens and partial-state cleanup. The relevant cloud response here is: Inspect desired package versions, service states, users and idempotency behavior.
D:Review repository history, variable sources, secret references and pipeline scope. The relevant cloud response here is: Inspect desired package versions, service states, users and idempotency behavior.
Question 259
For the affected cloud environment, a deployment template unexpectedly schedules a production database deletion during a simple storage change. Which remedy best fits the requirement?
- Replace embedded secrets with approved secret-store references and least-privilege pipeline identity.
- Run drift detection against the versioned declaration and reconcile through approved review.
- Require a reviewed plan and constrain destructive changes with approval policy.
- Use reviewed declarative IaC modules and environment-specific parameters.
Explanation
Correct Answer
C:IaC execution can delete resources to reconcile the desired state, so dry-run review matters. The change should be verified, not just applied: The deployment plan shows no unapproved deletion before production approval.
Incorrect Answers
A:That approach would help when an IaC template has a production API token pasted into a committed plain-text parameter file. In this case, iaC execution can delete resources to reconcile the desired state, so dry-run review matters.
B:Drift is divergence between actual resources and the desired configuration, not necessarily an intentional new baseline. The relevant cloud response here is: Require a reviewed plan and constrain destructive changes with approval policy.
D:Declarative IaC encodes desired resource state and improves repeatability without removing the need for access controls. The relevant cloud response here is: Require a reviewed plan and constrain destructive changes with approval policy.
Question 260
The infrastructure architect at a regional health provider investigates this condition: a deployment template unexpectedly schedules a production database deletion during a simple storage change. Which explanation best accounts for it?
- Configuration templates and version-control history can expose secrets even when deployment access is restricted.
- Configuration as code enforces operating system and application settings after infrastructure provisioning.
- Declarative IaC encodes desired resource state and improves repeatability without removing the need for access controls.
- IaC execution can delete resources to reconcile the desired state, so dry-run review matters.
Explanation
Correct Answer
D:The evidence of success is: The deployment plan shows no unapproved deletion before production approval.
Incorrect Answers
A:That approach would help when an IaC template has a production API token pasted into a committed plain-text parameter file. Check the difference through: Inspect state differences, replace triggers, lifecycle guards and dependency graph.
B:The alternative is aimed at a different condition: Server instances come up successfully but application services have inconsistent users, installed packages and firewall rules. IaC execution can delete resources to reconcile the desired state, so dry-run review matters.
C:The proposed measure serves a related cloud task, but the present symptom calls for a more specific response. IaC execution can delete resources to reconcile the desired state, so dry-run review matters. Check the difference through: Inspect state differences, replace triggers, lifecycle guards and dependency graph.