




























































































Study with the several resources on Docsity
Earn points by helping other students or get them with a premium plan
Prepare for your exams
Study with the several resources on Docsity
Earn points to download
Earn points by helping other students or get them with a premium plan
This beta exam tests candidates’ skills in developing, deploying, and managing cloud-native applications on the Cloud Foundry platform. Key areas include application lifecycle management, buildpacks, routing, service integration, logging, and scaling. Passing certifies proficiency in building and running applications on Cloud Foundry.
Typology: Exams
1 / 100
This page cannot be seen from the preview
Don't miss anything!





























































































Question 1. Which Cloud Foundry component decides where application instances run? A) Router B) Cloud Controller C) Diego Brain D) Garden Answer: C Explanation: The Diego Brain (part of the Diego system) performs scheduling decisions, assigning app instances to available Diego cells.
Question 2. **What is the primary role of the Garden component on a Diego cell? ** A) Route HTTP traffic to apps B) Manage container lifecycle and isolation C) Store build artifacts D) Authenticate users Answer: B Explanation: Garden provides the container runtime, handling creation, execution, and teardown of containers with isolation guarantees.
Question 3. In Cloud Foundry, which object defines the logical boundary for resource quotas and user roles? A) Space B) Organization (Org) C) Route D) Service instance
Answer: B Explanation: An Org groups spaces and holds quota definitions as well as role assignments like OrgManager and OrgAuditor.
Question 4. Which role can create, update, and delete spaces within an organization? A) SpaceDeveloper B) OrgManager C) SpaceAuditor D) OrgAuditor Answer: B Explanation: OrgManager has permission to manage spaces, including creation and deletion, inside its organization.
Question 5. During a cf push, what artifact is produced after the staging phase and stored in the Blobstore? A) Buildpack B) Droplet C) Route D) Service binding Answer: B Explanation: Staging compiles the app into a droplet, which is a runnable image stored in the Blobstore for later execution.
Answer: B Explanation: The “Backing services” factor requires services be treated as attached resources; Cloud Foundry injects service credentials via VCAP_SERVICES.
Question 9. What is the effect of setting health-check-type to process for an app? A) CF probes the app’s listening port B) CF checks the exit status of the start command C) CF sends HTTP GET requests to /health D) CF monitors container CPU usage Answer: B Explanation: process health checks consider the app healthy if the start command continues running without exiting.
Question 10. Which command streams live logs from an app, including recent logs from the previous instance? A) cf logs APP_NAME B) cf logs APP_NAME --recent C) cf logs APP_NAME --tail D) cf logs APP_NAME --stream Answer: A Explanation: cf logs APP_NAME streams live logs; the --recent flag only shows recent logs without streaming.
Question 11. In a blue-green deployment, what Cloud Foundry command maps a new route to the green version without downtime? A) cf map-route B) cf rename C) cf push with --no-start D) cf unmap-route Answer: A Explanation: cf map-route attaches a route to the new version; combined with cf unmap-route from the old version, traffic switches seamlessly.
Question 12. Which service type is created when you need a placeholder for an external database not present in the marketplace? A) Managed service B) User-Provided Service (CUPS) C) Service broker D) Service key Answer: B Explanation: CUPS (User-Provided Service) allows you to define arbitrary credentials for external resources.
Question 13. What does the cf create-service-key SERVICE_INSTANCE KEY_NAME command generate? A) A new service instance B) A binding between app and service C) Out-of-band credentials for the service D) A route mapping
Question 16. An Application Security Group (ASG) primarily controls which type of traffic? A) Inbound traffic to the app B) Outbound traffic from the app container C) Internal service mesh traffic D) SSH access to the cell Answer: B Explanation: ASGs define egress rules, limiting or allowing outbound connections from app containers to external destinations.
Question 17. Which component aggregates logs and metrics from all app containers before they are emitted to external drains? A) Loggregator Router B) Doppler C) Firehose D) Syslog Drain Answer: B Explanation: Doppler ingests log and metric streams from the Loggregator system and forwards them to firehose or drains.
Question 18. To export application logs to an external syslog server, which CLI command is used? A) cf create-log-drain B) cf bind-service C) cf set-log D) cf add-drain
Answer: A Explanation: cf create-log-drain creates a syslog drain URL that Loggregator forwards logs to.
Question 19. What does the cf scale APP_NAME -i 5 command accomplish? A) Increases memory allocation to 5 MB B) Sets the number of instances to five C) Changes the disk quota to 5 GB D) Adjusts the app’s log level to 5 Answer: B Explanation: The -i flag specifies the instance count, scaling the app horizontally.
Question 20. If an app’s health check fails because the process exits immediately, which health check type should be changed to avoid false negatives? A) port B) http C) process D) none Answer: C Explanation: process health checks monitor the start command; if the process exits, the health check fails. Switching to port or http can avoid this when the app listens on a port.
Answer: C Explanation: cf set-env sets an environment variable that the app can read at runtime, adhering to the Twelve-Factor “Config” principle.
Question 24. Which of the following best describes the relationship between a Droplet and a Package in Cloud Foundry? A) A Package is the compiled artifact; a Droplet is the source code B) A Package contains source code; a Droplet is the compiled, runnable image C) Both are synonyms for the same thing D) A Droplet is stored in the router; a Package is stored in the blobstore Answer: B Explanation: A Package holds the uploaded source or binary; after staging, Cloud Foundry creates a Droplet, which is the executable image.
Question 25. If you need to limit an app to only communicate with a specific internal service over port 5432, which Cloud Foundry feature would you configure? A) Route mapping B) Application Security Group (ASG) egress rule C) Service binding D) Network policy Answer: D Explanation: A network policy can restrict outbound traffic from one app to another on a specific protocol and port, providing fine-grained C2C control.
Question 26. Which command displays the current memory and disk usage of an app’s instances? A) cf app APP_NAME B) cf memory APP_NAME C) cf stats APP_NAME D) cf resources APP_NAME Answer: A Explanation: cf app shows a summary including memory limit, disk limit, and current usage per instance.
Question 27. **What does the --no-route flag do when pushing an application? ** A) Prevents the app from being assigned any routes B) Disables HTTP health checks C) Stops the app from starting after staging D) Skips the buildpack detection step Answer: A Explanation: --no-route tells CF not to create a default route for the app, useful for background workers.
Question 28. In a multi-app manifest, which top-level key groups the individual app definitions? A) applications B) apps C) services D) deployments
Question 31. Which CLI command would you use to retrieve the VCAP_SERVICES JSON for a running app? A) cf env APP_NAME B) cf services APP_NAME C) cf get-env APP_NAME D) cf vcap APP_NAME Answer: A Explanation: cf env displays environment variables, including the VCAP_SERVICES block that contains bound service credentials.
Question 32. When binding a service to an app, what happens to the app’s environment? A) No change; the app must fetch credentials manually B) The VCAP_SERVICES variable is updated with the service’s credentials C) A new route is automatically created D) The app’s memory limit is increased Answer: B Explanation: Binding injects the service’s credentials into the VCAP_SERVICES environment variable, making them available to the app.
Question 33. What is the default health check type for a newly staged Cloud Foundry app? A) process B) port C) http D) none
Answer: B Explanation: By default, Cloud Foundry uses a port health check, probing the container’s listening port.
Question 34. Which of the following statements about the Cloud Controller is true? A) It routes incoming HTTP traffic to containers B) It stores and retrieves buildpack binaries C) It handles API requests for org/space management and app lifecycle actions D) It runs the container runtime on each cell Answer: C Explanation: The Cloud Controller is the API layer that processes user requests for orgs, spaces, apps, and service bindings.
Question 35. If an application needs to read a configuration file that changes per environment, which Twelve-Factor practice should be used? A) Store the file in the app’s root directory B) Use environment variables via cf set-env C) Mount a persistent volume with the file D) Hard-code the values in source code Answer: B Explanation: The “Config” factor recommends storing configuration in environment variables, not in code or files.
Answer: B Explanation: cf add-buildpack registers a custom buildpack with the Cloud Controller, making it selectable by name or URL.
Question 39. What does the cf restage APP_NAME command do? A) Restarts the app without rebuilding the droplet B) Re-runs the staging process to create a new droplet, then restarts the app C) Clears all environment variables D) Deletes all routes associated with the app Answer: B Explanation: cf restage forces Cloud Foundry to re-execute the staging pipeline, generating a fresh droplet.
Question 40. Which log prefix indicates that a message originated from the Diego cell’s container runtime? A) RTR B) STG C) APP D) CELL Answer: D Explanation: CELL logs are emitted by the Diego cell, covering container lifecycle events.
Question 41. If an app’s route is myapp.example.com and you need to add a sub-domain v2.myapp.example.com, which command would you use?
A) cf map-route myapp example.com --hostname v2 B) cf rename-route myapp v2.myapp.example.com C) cf add-subdomain v2.myapp.example.com D) cf bind-route-service myapp v2 Answer: A Explanation: cf map-route with --hostname creates a new route using the specified sub-domain.
Question 42. Which component validates the authenticity of the user’s CLI token before processing a request? A) Router B) UAA (User Account and Authentication) C) Diego Brain D) Loggregator Answer: B Explanation: UAA handles OAuth token issuance and validation for all Cloud Foundry API calls.
Question 43. When an app is scaled vertically by increasing its memory limit, which of the following must also be considered? A) The number of routes attached to the app B) The cell’s available memory resources C) The app’s buildpack version D) The number of service bindings Answer: B
B) cf ssh APP_NAME then cat /var/log/syslog C) cf events APP_NAME then cf logs APP_NAME D) cf restart APP_NAME then cf scale APP_NAME -i 1 Answer: C Explanation: cf events shows recent state changes (including crashes); cf logs provides the runtime output that often reveals the root cause.
Question 47. What is the purpose of the cf curl /v2/info command? A) To retrieve the list of all apps in the current org B) To display the Cloud Foundry API endpoint and authentication info C) To download the latest buildpacks D) To list all bound services for an app Answer: B Explanation: cf curl /v2/info returns the API’s version, token endpoint, and other metadata about the CF deployment.
Question 48. Which of the following best describes “Zero-Downtime Deployments” in Cloud Foundry? A) Deploying an app with a single instance and no health checks B) Using blue-green or canary strategies to route traffic only to healthy instances C) Setting --no-start during cf push D) Disabling logging while deploying Answer: B Explanation: Zero-downtime is achieved by deploying a new version alongside the old one and switching routes only after the new version passes health checks.
Question 49. When a service broker is added to a Cloud Foundry foundation, which CLI command registers it? A) cf create-service-broker B) cf add-broker C) cf register-broker D) cf bind-service-broker Answer: A Explanation: cf create-service-broker registers a broker’s URL, authentication, and name with the Cloud Controller.
Question 50. What does the cf delete-orphaned-routes command accomplish? A) Removes routes that are not bound to any app B orphans?** C) Deletes all routes in the current space D) Clears the router cache Answer: A Explanation: Orphaned routes are leftover route entries after an app is deleted; this command cleans them up.
Question 51. Which of the following statements about the “Blobstore” is correct? A) It stores only application source code uploaded via cf push B) It holds buildpacks, droplets, and app bits for later retrieval