Users report intermittent connectivity to a cloud application. A packet capture on the user's workstation shows that some TCP SYN packets are sent but never receive a SYN-ACK, while others succeed. The issue is not consistent. Which tool or approach would best help identify whether the problem is on the network path or the server?

Use a packet capture on the cloud server's network interface to see if the SYN packets arrive

Review the application's error logs for database connection failures

Check the DNS resolution time for the application's hostname

Run a continuous ping to the application's public IP and monitor for packet loss

A company relies on a single site-to-site VPN connection to its cloud environment. During a recent ISP outage, all cloud services became unreachable. The company wants to ensure that a single ISP failure does not cause a complete loss of connectivity. Which solution should they implement?

Configure a second VPN tunnel over a different ISP and use BGP for automatic failover

Enable VPN dead peer detection (DPD) on the existing tunnel

Move all cloud resources to a different region

Increase the bandwidth of the existing VPN tunnel

A cloud administrator recently deployed a new web server in a public cloud VNet. The server has a public IP and is reachable from the internet, but an on-premises application cannot connect to it over a site-to-site VPN. A packet capture on the on-premises firewall shows the traffic leaving the firewall, but no response is received. Which configuration is most likely causing the issue?

The on-premises firewall is performing NAT on the VPN traffic

The cloud network security group (NSG) is blocking inbound traffic from the on-premises VPN address space

The VPN tunnel is using the wrong encryption algorithm

The web server's default gateway is set to the public IP address

CompTIACloud+

Domain 6Objective 2

Network Connectivity CV0-004 Practice Questions (Page 2)

Part of the Troubleshooting domain, which accounts for 12% of the CV0-004 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~4–7 in this domain), expect 1–1 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

10concepts

12%of the exam

Questions 6–10

6application · medium
Users report intermittent connectivity to a cloud application. A packet capture on the user's workstation shows that some TCP SYN packets are sent but never receive a SYN-ACK, while others succeed. The issue is not consistent. Which tool or approach would best help identify whether the problem is on the network path or the server?
Select an answer first
7application · medium
A company relies on a single site-to-site VPN connection to its cloud environment. During a recent ISP outage, all cloud services became unreachable. The company wants to ensure that a single ISP failure does not cause a complete loss of connectivity. Which solution should they implement?
Select an answer first
8foundation · easy
Which of the following is a valid IP address that could be assigned to a cloud VM?
Select an answer first
9application · medium
A cloud administrator recently deployed a new web server in a public cloud VNet. The server has a public IP and is reachable from the internet, but an on-premises application cannot connect to it over a site-to-site VPN. A packet capture on the on-premises firewall shows the traffic leaving the firewall, but no response is received. Which configuration is most likely causing the issue?
Select an answer first
10foundation · easy
Which network component is specifically designed to inspect traffic and enforce security policies by allowing or denying packets based on predefined rules?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CV0-004

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CV0-004” is a trademark of its owner, used for identification only.

Network Connectivity CV0-004 Practice Questions (Page 2)

Questions 6–10

A company relies on a single site-to-site VPN connection to its cloud environment. During a recent ISP outage, all cloud services became unreachable. The company wants to ensure that a single ISP failure does not cause a complete loss of connectivity. Which solution should they implement?

Which of the following is a valid IP address that could be assigned to a cloud VM?

Which network component is specifically designed to inspect traffic and enforce security policies by allowing or denying packets based on predefined rules?

Keep studying — Troubleshooting