hardMultiple ChoiceObjective-mapped
CV0-004 Practice Question: A cloud administrator is troubleshooting a…
A cloud administrator is troubleshooting a connectivity issue between two virtual networks in different cloud regions. The networks are connected via a VPN gateway. The administrator can ping resources in one network but not the other. Which of the following should the administrator check FIRST?
⚠ Common exam trap
The trap is that candidates assume a one-way ping means the VPN tunnel is down or ICMP is blocked, but the real issue is often a missing or misconfigured route on the side that cannot receive replies.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Review the route tables on both sides for the remote network prefix
The correct first step is to review the route tables on both sides for the remote network prefix. Since the administrator can ping resources in one direction but not the other, the issue is likely asymmetric routing or a missing route for the return traffic. Route tables control how traffic is forwarded between virtual networks, and a missing or incorrect route for the remote network prefix would prevent bidirectional communication, even if the VPN tunnel is up.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Confirm the local network gateways have the correct NIC IP addresses
Why it's wrong here
NIC IPs are typically correct if one direction works.
- ✗
Verify the VPN tunnel status on both gateways
Why it's wrong here
If one direction works, the tunnel is established.
- ✗
Check network security groups for blocking ICMP
Why it's wrong here
NSGs could block ping, but asymmetric routing is a more common cause.
- ✓
Review the route tables on both sides for the remote network prefix
Why this is correct
Missing routes cause traffic to be dropped, leading to unidirectional connectivity.
Quick reference
Asymmetric Encryption Algorithm Comparison
| Algorithm | Key Exchange | Signatures | Equivalent Security Key | Notes |
|---|---|---|---|---|
| RSA-3072 | Yes | Yes | 128-bit | Widely deployed; slow for bulk data |
| ECDSA P-256 | No | Yes | 128-bit | Fast signatures; standard TLS certs |
| ECDH / ECDHE | Yes | No | 128-bit | Perfect forward secrecy in TLS 1.3 |
| DH / DHE | Yes | No | 128-bit (3072-bit key) | Replaced by ECDHE in modern TLS |
| Ed25519 | No | Yes | ~128-bit | SSH keys, modern PKI |
Go deeper
Related to this question
About these practice questions
Courseiva writes every CV0-004 question from scratch — 977 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CV0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CV0-004 exam.