CV0-004 Cloud Architecture and Design Practice Question
A cloud administrator is deploying a microservices application on Kubernetes in a public cloud. The services must be able to discover each other dynamically and route traffic without hardcoded IP addresses. Which Kubernetes resource should the administrator use to provide a stable network endpoint for a set of pods?
⚠ Common exam trap
It's easy for candidates to confuse Ingress with Service; Ingress is for external access and HTTP routing, not for internal service discovery.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Service
A Kubernetes Service is the correct resource for providing a stable network endpoint and enabling dynamic service discovery. It abstracts pod IPs and offers load balancing, which is essential for microservices communication without hardcoded addresses.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
ConfigMap
Why it's wrong here
A ConfigMap is used to store non-confidential configuration data as key-value pairs. It does not provide network endpoints or service discovery. Using a ConfigMap to store service IPs would still require manual updates and does not offer dynamic discovery.
- ✗
NetworkPolicy
Why it's wrong here
A NetworkPolicy defines rules for pod communication, such as allowing or denying traffic between pods. It does not provide a stable network endpoint or service discovery. It is a security and traffic control mechanism, not a discovery mechanism.
- ✓
Service
Why this is correct
A Kubernetes Service provides a stable virtual IP and DNS name that abstracts a set of pods. It enables dynamic discovery and load balancing across pods, even as they are created or destroyed. This matches the requirement for a stable network endpoint without hardcoded IPs.
- ✗
Ingress
Why it's wrong here
An Ingress manages external HTTP/HTTPS access to services in a cluster, typically providing URL routing and TLS termination. It does not provide a stable internal endpoint for service-to-service discovery. While it can route to services, it is not the primary resource for dynamic service discovery.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every CV0-004 question from scratch — 834 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official CompTIA exam blueprint
This CV0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CV0-004 exam.