mediumMultiple ChoiceObjective-mapped
CV0-004 Practice Question: A cloud architect is designing a multi-tier…
A cloud architect is designing a multi-tier application. To ensure secure communication between the web tier and the application tier within the same VPC, which approach should be used?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use internal IP addresses with network ACLs allowing all traffic from the web tier subnet.
Using internal IP addresses within the same VPC avoids exposure to the internet, and network ACLs provide subnet-level stateless traffic filtering, allowing only the required traffic from the web tier subnet to the application tier. Option A is unnecessary since both tiers are in the same VPC; VPN is for connecting external networks. Option C uses public IPs, which introduces unnecessary internet exposure and security risks. Option D is overkill as transit gateway with encryption is designed for complex network interconnections, not simple intra-VPC traffic.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use a VPN between tiers.
Why it's wrong here
VPN adds complexity and overhead for internal traffic.
- ✓
Use internal IP addresses with network ACLs allowing all traffic from the web tier subnet.
Why this is correct
Internal IPs and network ACLs securely isolate traffic within the VPC.
- ✗
Use public IP addresses with security groups.
Why it's wrong here
Public IPs are unnecessary and increase exposure.
- ✗
Use a transit gateway with encryption.
Why it's wrong here
Transit gateways are for multi-VPC connectivity, not needed within a single VPC.
Visual reference
Go deeper
Related to this question
About these practice questions
This CV0-004 question is part of Courseiva's 977-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CV0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CV0-004 exam.