Deployment

A cloud engineer must deploy a new version of a customer-facing web application with zero downtime. Requirements state that the new version must be fully tested in a production-identical environment before receiving live traffic, and that traffic must be able to revert instantly to the previous version if post-deployment validation fails. Which deployment strategy BEST meets these requirements?

A DevOps team is deploying a containerized microservice across development, staging, and production environments. During validation they discover that the image tested in staging is not byte-for-byte identical to the image running in production, because the CI pipeline rebuilds the image from source at each environment stage. This has caused a defect that passed staging to surface only in production. Which change to the deployment workflow BEST prevents this inconsistency?

A company is migrating a 4 TB on-premises production PostgreSQL database to a managed cloud database service. The application must remain available during the migration, and the business will only tolerate a few minutes of downtime during the final cutover. Which data migration approach best meets these requirements?

A cloud engineer is migrating 8 TB of archived research files from an on-premises NAS to a cloud object storage bucket over a dedicated 1 Gbps link. After the transfer job completes, the compliance team requires proof that no files were altered or corrupted during transit before the on-premises copy is decommissioned. Which action should the engineer take to satisfy this requirement?

A deployment team provisions dozens of identical application servers each week. Currently, engineers launch a base OS image and then run lengthy configuration scripts on each instance after boot, which sometimes produces servers with slightly different package versions and settings. The team wants to eliminate this post-boot variability and speed up provisioning. Which approach best addresses the requirement?

A cloud engineer authors an infrastructure-as-code template that provisions a virtual network, subnets, a managed database, and application servers in a single deployment. On the first run, the deployment fails because the application servers attempt to launch before the subnet they reference exists. Which action should the engineer take to ensure the resources are created in the correct order?

A cloud engineer is reviewing an infrastructure-as-code template that provisions a managed database. During a code review, a colleague notices that the database administrator password is written in plaintext directly in the template file, which is committed to a shared Git repository. The team needs to remediate this before the next automated deployment while keeping the pipeline fully automated. What is the BEST approach to handle the credential going forward?

A cloud engineer manages production infrastructure using a declarative infrastructure-as-code template stored in a version control repository. Over several weeks, an on-call engineer made manual changes directly in the cloud console to resolve incidents, and now the running environment no longer matches the template. Before applying the next planned template update, which action should the engineer take FIRST to safely restore consistency?

A media company needs to migrate 400 TB of archived video footage from an on-premises datacenter to cloud object storage. Their internet connection is a shared 200 Mbps link that is also used for daily business operations, and the migration must be completed within two weeks. Which data migration approach best meets these requirements?

A deployment engineer is integrating a newly provisioned order-processing microservice with an existing inventory microservice. During peak sales events, the inventory service becomes overwhelmed by direct synchronous API calls from the order service, causing timeouts and dropped orders. The engineer must configure a deployment pattern that decouples the two services so bursts of orders are absorbed and processed reliably even when the inventory service is temporarily slow or unavailable. Which approach best meets this requirement?

A retail company runs a legacy monolithic order-processing application on aging on-premises servers. Leadership wants to reduce operational overhead, break the application into independently deployable components, and take advantage of native cloud auto-scaling that only bills when code executes. The team has budget for a multi-quarter engineering effort and is willing to rewrite portions of the codebase. Which cloud migration strategy best fits these requirements?

A company is deploying a new financial trading application in the cloud. The application backend performs IP-based allow-listing and requires the original client source IP address to be visible for its logging and fraud-detection modules. It also handles millions of concurrent TCP connections and demands ultra-low latency at Layer 4. Which load balancing configuration best meets these deployment requirements?

A cloud engineer is provisioning resources for a new analytics platform. Application servers in a private subnet must pull large datasets from a managed object storage service in the same cloud region. During a cost review, the team notices high charges for traffic routed through the NAT gateway. Which change to the resource provisioning should the engineer make to reduce these data transfer costs while keeping the servers private?

A cloud engineer is deploying a three-tier application. The web tier must accept HTTPS traffic from the internet, the application tier must only accept traffic from the web tier, and the database tier must only accept traffic from the application tier on port 5432. The engineer wants to enforce these controls at the instance-group level using stateful rules as part of the deployment. Which approach best implements this segmentation?

A company is decommissioning an Apache web server that only serves a marketing brochure site consisting of HTML, CSS, JavaScript, and image files with no server-side processing. The cloud engineer must redeploy this content in the most cost-effective and operationally simple way, while still supporting a custom domain and HTTPS. Which deployment approach best meets these requirements?

A cloud engineer maintains separate infrastructure-as-code templates for the dev, staging, and production environments. The environments are nearly identical, differing only in instance sizes, subnet CIDR ranges, and resource counts. Recent drift and copy-paste errors have caused a production outage when a fix applied to one template was forgotten in another. Which approach best prevents this class of problem while keeping deployments consistent across all three environments?

A cloud engineer has just completed deploying a new three-tier web application into a production environment using an infrastructure-as-code template. The deployment reported success with no errors, and all compute instances, the load balancer, and the managed database were provisioned. Before handing the environment over to the business, the engineer needs to confirm the deployment actually works end to end. Which action is the MOST appropriate to validate the deployment?

A company must vacate its on-premises data center in 90 days due to a lease expiration. The primary application is a legacy monolithic ERP system running on virtual machines with an unsupported operating system. The team has no time to redesign the application, and developers are unavailable to modify any code. Management's priority is meeting the deadline with the least engineering effort. Which migration strategy should the cloud engineer recommend?

A company is migrating an on-premises application that uses a self-managed MySQL server running on a physical host. The development team wants to reduce operational overhead by eliminating patching, backups, and replication management, but the application code and SQL queries must remain unchanged. Which migration strategy best meets these requirements?

A company is migrating a fleet of 40 Linux application servers from an on-premises data center to the cloud using a rehost strategy. Management requires that the cutover window be as short as possible and that the cloud copies stay continuously up to date with the source servers until the moment of switchover. The team wants to minimize manual reconfiguration of each server. Which approach best satisfies these requirements?