easyMultiple SelectObjective-mapped
CV0-004 Practice Question: A cloud administrator is troubleshooting an issue…
A cloud administrator is troubleshooting an issue where a virtual machine (VM) cannot connect to the internet. Which TWO of the following are valid first steps to diagnose the problem?
⚠ Common exam trap
The trap here is that candidates often jump to OS-level checks (firewall, reboot) or drastic actions (create new VM) instead of first verifying the foundational network configuration (subnet attachment and security group rules) that directly controls internet access. Note that both subnet and security group checks are valid first steps, and this question tests the ability to prioritize network-level diagnostics.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Verify the VM's network interface is attached to the correct subnet.
Verifying the VM's network interface is attached to the correct subnet is a fundamental first step in diagnosing internet connectivity issues. If the VM is on an isolated or mismatched subnet, it cannot route traffic to the internet gateway, regardless of other configurations. This check ensures the VM's virtual NIC is connected to the appropriate virtual network and subnet that has a route to the internet. Option D is also correct because checking the VM's security group rules is another essential first step. Security groups act as a virtual firewall controlling inbound and outbound traffic at the network interface level. If the security group rules do not allow outbound traffic to the internet (e.g., missing default outbound rule or overly restrictive rules), the VM will be unable to connect to the internet. Checking these rules early can quickly identify misconfigurations that block internet access. Together, verifying subnet attachment and security group rules are two of the most appropriate initial diagnostic steps, as they address the network-level controls that directly impact connectivity.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Verify the VM's network interface is attached to the correct subnet.
Why this is correct
If the network interface is in a different subnet, routing may fail; this is a fundamental check.
- ✗
Check the VM's OS firewall settings.
Why it's wrong here
While valid, checking the OS firewall is typically done after cloud-level networking checks, so it's not a first step.
- ✗
Create a new VM.
Why it's wrong here
Creating a new VM is a drastic measure and not a first step; it should only be considered after other diagnostics fail.
- ✓
Check the VM's security group rules.
Why this is correct
Security groups act as virtual firewalls; incorrect rules are a common cause of connectivity issues.
- ✗
Reboot the VM.
Why it's wrong here
Rebooting may resolve transient issues but is not a diagnostic first step; it should be done after checking network configurations.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every CV0-004 question from scratch — 977 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CV0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CV0-004 exam.