Courseiva
hardMultiple ChoiceObjective-mapped

CV0-004 Practice Question: A cloud administrator is troubleshooting…

A cloud administrator is troubleshooting connectivity issues between two virtual networks in a public cloud. The networks are in the same region but different VPCs. Both VPCs have route tables and security groups configured. Instances in VPC A cannot ping instances in VPC B. Which of the following is the most likely cause?

⚠ Common exam trap

The trap here is that candidates often focus on security groups or ACLs as the default answer for connectivity issues, but the fundamental prerequisite for cross-VPC communication is the existence of a VPC peering connection or a transit gateway, not just network access controls.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

VPC peering is not established between the two VPCs.

VPC peering is a direct network connection between two VPCs that enables routing of traffic using private IPv4 or IPv6 addresses. Without an established VPC peering connection, instances in different VPCs cannot communicate, even if they are in the same region. Since the question states the VPCs are separate and no peering is mentioned, this is the most likely root cause of the connectivity failure.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • VPC peering is not established between the two VPCs.

    Why this is correct

    Without peering, traffic is isolated between VPCs.

  • The instances are not assigned public IP addresses.

    Why it's wrong here

    Private IP communication does not require public IPs.

  • Security groups are blocking ICMP traffic.

    Why it's wrong here

    Security groups are permissive by default; this could be a cause but is less likely if other traffic also fails.

  • Network ACLs are not configured to allow the traffic.

    Why it's wrong here

    NACLs are stateless but default to allow all; misconfiguration is possible but less common than missing peering.

About these practice questions

This CV0-004 question is part of Courseiva's 977-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This CV0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CV0-004 exam.