A company has a hybrid cloud environment with a site-to-site VPN. The on-premises network uses the 10.0.0.0/16 address space, and the cloud VNet uses 10.0.0.0/16 as well. Users report that they cannot reach resources in the cloud VNet. What is the most likely cause?

The on-premises and cloud address spaces overlap

The VPN tunnel is not established

The NSG rules on the cloud VNet are blocking traffic

The VPN protocol is not compatible

You have a VNet with two subnets: SubnetA and SubnetB. SubnetA contains a web server, and SubnetB contains a database server. The web server can reach the database server, but the database server cannot reach the internet for updates. You need to allow the database server to reach the internet for updates while keeping it isolated from inbound internet traffic. What should you do?

Use a NAT gateway in SubnetB to provide outbound internet access

Place the database server in the same subnet as the web server

Add a route table to SubnetB with a default route to the internet

Assign a public IP to the database server and create an NSG rule to deny all inbound traffic

Which command-line tool is commonly used to test network connectivity to a specific port on a cloud resource?

Test-NetConnection (PowerShell)

You are configuring a VNet for a three-tier application (web, app, database). The database tier must not be reachable from the internet, and the web tier must be able to communicate with the app tier. You need to ensure that the database tier is isolated from the web tier. What should you do?

Assign public IPs to the web tier only and rely on the cloud provider's default isolation

Place all tiers in the same subnet and use NSGs to filter traffic

Use VNet peering to connect the web and app tiers, and keep the database tier in a separate VNet

Place each tier in a separate subnet and apply NSGs to restrict traffic

CompTIACloud+

Domain 1Objective 3

Cloud Networking CV0-004 Practice Questions (Page 3)

Part of the Cloud architecture domain, which accounts for 23% of the CV0-004 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–14 in this domain), expect 1–2 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

8concepts

23%of the exam

Questions 11–15

11application · medium
A company is setting up a site-to-site VPN between its on-premises network and a cloud VNet. The security policy requires strong encryption and the use of a protocol that is widely supported by both the on-premises firewall and the cloud VPN gateway. Which VPN protocol should you choose?
Select an answer first
12expert · hard
A company has a hybrid cloud environment with a site-to-site VPN. The on-premises network uses the 10.0.0.0/16 address space, and the cloud VNet uses 10.0.0.0/16 as well. Users report that they cannot reach resources in the cloud VNet. What is the most likely cause?
Select an answer first
13expert · hard
You have a VNet with two subnets: SubnetA and SubnetB. SubnetA contains a web server, and SubnetB contains a database server. The web server can reach the database server, but the database server cannot reach the internet for updates. You need to allow the database server to reach the internet for updates while keeping it isolated from inbound internet traffic. What should you do?
Select an answer first
14foundation · easy
Which command-line tool is commonly used to test network connectivity to a specific port on a cloud resource?
Select an answer first
15application · medium
You are configuring a VNet for a three-tier application (web, app, database). The database tier must not be reachable from the internet, and the web tier must be able to communicate with the app tier. You need to ensure that the database tier is isolated from the web tier. What should you do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CV0-004

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CV0-004” is a trademark of its owner, used for identification only.

Cloud Networking CV0-004 Practice Questions (Page 3)

Questions 11–15

A company is setting up a site-to-site VPN between its on-premises network and a cloud VNet. The security policy requires strong encryption and the use of a protocol that is widely supported by both the on-premises firewall and the cloud VPN gateway. Which VPN protocol should you choose?

A company has a hybrid cloud environment with a site-to-site VPN. The on-premises network uses the 10.0.0.0/16 address space, and the cloud VNet uses 10.0.0.0/16 as well. Users report that they cannot reach resources in the cloud VNet. What is the most likely cause?

Which command-line tool is commonly used to test network connectivity to a specific port on a cloud resource?

You are configuring a VNet for a three-tier application (web, app, database). The database tier must not be reachable from the internet, and the web tier must be able to communicate with the app tier. You need to ensure that the database tier is isolated from the web tier. What should you do?

Keep studying — Cloud architecture