CompTIA CV0-004 Practice Test 27
Question 260
The infrastructure architect at a regional health provider investigates this condition: a deployment template unexpectedly schedules a production database deletion during a simple storage change. Which explanation best accounts for it?
- Configuration templates and version-control history can expose secrets even when deployment access is restricted.
- Configuration as code enforces operating system and application settings after infrastructure provisioning.
- Declarative IaC encodes desired resource state and improves repeatability without removing the need for access controls.
- IaC execution can delete resources to reconcile the desired state, so dry-run review matters.
Explanation
Correct Answer
D:The evidence of success is: The deployment plan shows no unapproved deletion before production approval.
Incorrect Answers
A:That approach would help when an IaC template has a production API token pasted into a committed plain-text parameter file. Check the difference through: Inspect state differences, replace triggers, lifecycle guards and dependency graph.
B:The alternative is aimed at a different condition: Server instances come up successfully but application services have inconsistent users, installed packages and firewall rules. IaC execution can delete resources to reconcile the desired state, so dry-run review matters.
C:The proposed measure serves a related cloud task, but the present symptom calls for a more specific response. IaC execution can delete resources to reconcile the desired state, so dry-run review matters. Check the difference through: Inspect state differences, replace triggers, lifecycle guards and dependency graph.
Question 261
At a global distribution company, an engineer needs to close a case where a deployment template unexpectedly schedules a production database deletion during a simple storage change. What test is most decisive?
- The deployment plan shows no unapproved deletion before production approval.
- Two fresh deployments produce equivalent authorized topology and report the same resource plan.
- The final resource state matches the approved version and unauthorized changes are logged.
- A structured parser reports the expected nested fields and the application receives intended values.
Explanation
Correct Answer
A:The deployment plan shows no unapproved deletion before production approval. This proves the service behavior rather than just showing a changed configuration. IaC execution can delete resources to reconcile the desired state, so dry-run review matters.
Incorrect Answers
B:That approach would help when engineers manually create each testing environment, resulting in different subnets and load-balancer settings. The required acceptance result is: The deployment plan shows no unapproved deletion before production approval.
C:The final resource state matches the approved version and unauthorized changes are logged. The relevant cloud response here is: The deployment plan shows no unapproved deletion before production approval.
D:A structured parser reports the expected nested fields and the application receives intended values. The relevant cloud response here is: The deployment plan shows no unapproved deletion before production approval.
Question 262
At a regional health provider, this issue is reported: a deployment template unexpectedly schedules a production database deletion during a simple storage change. What should be examined before applying a fix?
- Examine conditional branches, request idempotency tokens and partial-state cleanup.
- Inspect state differences, replace triggers, lifecycle guards and dependency graph.
- Review repository history, variable sources, secret references and pipeline scope.
- Inspect desired package versions, service states, users and idempotency behavior.
Explanation
Correct Answer
B:Inspect state differences, replace triggers, lifecycle guards and dependency graph. This distinguishes the relevant dependency before changing cloud resources. IaC execution can delete resources to reconcile the desired state, so dry-run review matters.
Incorrect Answers
A:That approach would help when a cloud provisioning script creates duplicate service accounts whenever an operator retries a partially failed run. Inspect state differences, replace triggers, lifecycle guards and dependency graph.
C:Review repository history, variable sources, secret references and pipeline scope. The relevant cloud response here is: Inspect state differences, replace triggers, lifecycle guards and dependency graph.
D:Inspect desired package versions, service states, users and idempotency behavior. The relevant cloud response here is: Inspect state differences, replace triggers, lifecycle guards and dependency graph.
Question 263
At a global distribution company, an operational review finds that after a release, an operator manually broadens a cloud firewall rule and future IaC previews show unexpected changes. What is the best next step?
- Make creation conditional on resource existence and use idempotent API calls where available.
- Lint and schema-validate the YAML configuration before deployment.
- Run drift detection against the versioned declaration and reconcile through approved review.
- Require a reviewed plan and constrain destructive changes with approval policy.
Explanation
Correct Answer
C:Drift is divergence between actual resources and the desired configuration, not necessarily an intentional new baseline. The change should be verified, not just applied: The final resource state matches the approved version and unauthorized changes are logged.
Incorrect Answers
A:That approach would help when a cloud provisioning script creates duplicate service accounts whenever an operator retries a partially failed run. In this case, drift is divergence between actual resources and the desired configuration, not necessarily an intentional new baseline.
B:YAML whitespace can change structure; syntactically valid text may still violate the target resource schema. The relevant cloud response here is: Run drift detection against the versioned declaration and reconcile through approved review.
D:IaC execution can delete resources to reconcile the desired state, so dry-run review matters. The relevant cloud response here is: Run drift detection against the versioned declaration and reconcile through approved review.
Question 264
An operator asks why the issue arises: after a release, an operator manually broadens a cloud firewall rule and future IaC previews show unexpected changes. Which explanation is strongest?
- Configuration templates and version-control history can expose secrets even when deployment access is restricted.
- Declarative IaC encodes desired resource state and improves repeatability without removing the need for access controls.
- YAML whitespace can change structure; syntactically valid text may still violate the target resource schema.
- Drift is divergence between actual resources and the desired configuration, not necessarily an intentional new baseline.
Explanation
Correct Answer
D:The evidence of success is: The final resource state matches the approved version and unauthorized changes are logged.
Incorrect Answers
A:That approach would help when an IaC template has a production API token pasted into a committed plain-text parameter file. Check the difference through: Compare resource snapshots, IaC state, policy baselines and audit events.
B:The alternative is aimed at a different condition: Engineers manually create each testing environment, resulting in different subnets and load-balancer settings. It does not directly resolve the described failure. Drift is divergence between actual resources and the desired configuration, not necessarily an intentional new baseline. Check the difference through: Compare resource snapshots, IaC state, policy baselines and audit events.
C:The proposed measure serves a related cloud task, but the present symptom calls for a more specific response. Drift is divergence between actual resources and the desired configuration, not necessarily an intentional new baseline. Check the difference through: Compare resource snapshots, IaC state, policy baselines and audit events.
Question 265
After correcting the following problem, what result would best confirm success? After a release, an operator manually broadens a cloud firewall rule and future IaC previews show unexpected changes.
- The final resource state matches the approved version and unauthorized changes are logged.
- Two consecutive executions converge to one resource identity with no duplicate permissions.
- Two fresh deployments produce equivalent authorized topology and report the same resource plan.
- Static scanning finds no embedded secret and the deployment reads its credential through approved identity.
Explanation
Correct Answer
A:The final resource state matches the approved version and unauthorized changes are logged. This proves the service behavior rather than just showing a changed configuration. Drift is divergence between actual resources and the desired configuration, not necessarily an intentional new baseline.
Incorrect Answers
B:That approach would help when a cloud provisioning script creates duplicate service accounts whenever an operator retries a partially failed run. The required acceptance result is: The final resource state matches the approved version and unauthorized changes are logged.
C:Drift is divergence between actual resources and the desired configuration, not necessarily an intentional new baseline. The required acceptance result is: The final resource state matches the approved version and unauthorized changes are logged.
D:Drift is divergence between actual resources and the desired configuration, not necessarily an intentional new baseline. The proposed measure serves a related cloud task, but the present symptom calls for a more specific response.
Question 266
The platform team investigates: after a release, an operator manually broadens a cloud firewall rule and future IaC previews show unexpected changes. Which diagnostic inspection would isolate the immediate dependency?
- Inspect state differences, replace triggers, lifecycle guards and dependency graph.
- Compare resource snapshots, IaC state, policy baselines and audit events.
- Review repository history, variable sources, secret references and pipeline scope.
- Inspect desired package versions, service states, users and idempotency behavior.
Explanation
Correct Answer
B:Compare resource snapshots, IaC state, policy baselines and audit events. This distinguishes the relevant dependency before changing cloud resources. Drift is divergence between actual resources and the desired configuration, not necessarily an intentional new baseline.
Incorrect Answers
A:That approach would help when a deployment template unexpectedly schedules a production database deletion during a simple storage change. Compare resource snapshots, IaC state, policy baselines and audit events.
C:Review repository history, variable sources, secret references and pipeline scope. The relevant cloud response here is: Compare resource snapshots, IaC state, policy baselines and audit events.
D:Inspect desired package versions, service states, users and idempotency behavior. The relevant cloud response here is: Compare resource snapshots, IaC state, policy baselines and audit events.
Question 267
During an approved service change at a global distribution company, a deployment pipeline accepts a YAML config with misnested environment variables and an application starts with defaults. Which action is the most targeted?
- Replace embedded secrets with approved secret-store references and least-privilege pipeline identity.
- Make creation conditional on resource existence and use idempotent API calls where available.
- Lint and schema-validate the YAML configuration before deployment.
- Use reviewed declarative IaC modules and environment-specific parameters.
Explanation
Correct Answer
C:YAML whitespace can change structure; syntactically valid text may still violate the target resource schema. The change should be verified, not just applied: A structured parser reports the expected nested fields and the application receives intended values.
Incorrect Answers
A:That approach would help when an IaC template has a production API token pasted into a committed plain-text parameter file. In this case, yAML whitespace can change structure; syntactically valid text may still violate the target resource schema.
B:Retry-safe automation must avoid duplicate side effects and handle partially completed prior work. The relevant cloud response here is: Lint and schema-validate the YAML configuration before deployment.
D:Declarative IaC encodes desired resource state and improves repeatability without removing the need for access controls. The relevant cloud response here is: Lint and schema-validate the YAML configuration before deployment.
Question 268
During architecture review, a deployment pipeline accepts a YAML config with misnested environment variables and an application starts with defaults. Which statement best explains why the corrective approach works?
- Drift is divergence between actual resources and the desired configuration, not necessarily an intentional new baseline.
- Configuration as code enforces operating system and application settings after infrastructure provisioning.
- Retry-safe automation must avoid duplicate side effects and handle partially completed prior work.
- YAML whitespace can change structure; syntactically valid text may still violate the target resource schema.
Explanation
Correct Answer
D:The evidence of success is: A structured parser reports the expected nested fields and the application receives intended values.
Incorrect Answers
A:That approach would help when after a release, an operator manually broadens a cloud firewall rule and future IaC previews show unexpected changes. Check the difference through: Inspect indentation, parsed object tree and schema constraints.
B:The alternative is aimed at a different condition: Server instances come up successfully but application services have inconsistent users, installed packages and firewall rules. YAML whitespace can change structure; syntactically valid text may still violate the target resource schema.
C:The proposed measure serves a related cloud task, but the present symptom calls for a more specific response. YAML whitespace can change structure; syntactically valid text may still violate the target resource schema. Check the difference through: Inspect indentation, parsed object tree and schema constraints.
Question 269
A service owner asks for a measurable acceptance test: a deployment pipeline accepts a YAML config with misnested environment variables and an application starts with defaults. Which result should the team obtain?
- A structured parser reports the expected nested fields and the application receives intended values.
- A re-run converges an altered test server to the approved baseline without breaking the workload.
- Static scanning finds no embedded secret and the deployment reads its credential through approved identity.
- The deployment plan shows no unapproved deletion before production approval.
Explanation
Correct Answer
A:A structured parser reports the expected nested fields and the application receives intended values. This proves the service behavior rather than just showing a changed configuration. YAML whitespace can change structure; syntactically valid text may still violate the target resource schema.
Incorrect Answers
B:That approach would help when server instances come up successfully but application services have inconsistent users, installed packages and firewall rules. The required acceptance result is: A structured parser reports the expected nested fields and the application receives intended values.
C:YAML whitespace can change structure; syntactically valid text may still violate the target resource schema. The alternative is aimed at a different condition: An IaC template has a production API token pasted into a committed plain-text parameter file.
D:YAML whitespace can change structure; syntactically valid text may still violate the target resource schema. The proposed measure serves a related cloud task, but the present symptom calls for a more specific response.
Question 270
Before changing production at a regional health provider, a deployment pipeline accepts a YAML config with misnested environment variables and an application starts with defaults. Which evidence should the engineer check first?
- Compare resource snapshots, IaC state, policy baselines and audit events.
- Inspect indentation, parsed object tree and schema constraints.
- Examine conditional branches, request idempotency tokens and partial-state cleanup.
- Inspect manual drift, state management, dependencies and parameter separation.
Explanation
Correct Answer
B:Inspect indentation, parsed object tree and schema constraints. This distinguishes the relevant dependency before changing cloud resources. YAML whitespace can change structure; syntactically valid text may still violate the target resource schema.
Incorrect Answers
A:That approach would help when after a release, an operator manually broadens a cloud firewall rule and future IaC previews show unexpected changes. In this case, yAML whitespace can change structure; syntactically valid text may still violate the target resource schema.
C:YAML whitespace can change structure; syntactically valid text may still violate the target resource schema.
D:Inspect manual drift, state management, dependencies and parameter separation. The relevant cloud response here is: Inspect indentation, parsed object tree and schema constraints.