CV0-004 Cloud Architecture and Design Practice Question
A cloud architect is designing a VPC with multiple tiers. The web servers must be accessible from the internet, but the database servers must not be directly accessible. Which subnet design should the architect implement?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Place web servers in a public subnet and database servers in a private subnet
Public subnets for web servers and private subnets for databases, with a load balancer in the public subnet routing to web servers in a private subnet if needed; but typically web servers are in public subnets.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Place all servers in public subnets and restrict access via security groups
Why it's wrong here
Placing databases in public subnets exposes them to the internet, even with security groups.
- ✗
Place web servers in a private subnet and database servers in a public subnet
Why it's wrong here
This is the opposite of best practice; databases should not be in public subnets.
- ✗
Place all servers in private subnets and use a bastion host for access
Why it's wrong here
Web servers need direct internet access; private subnets would require a NAT gateway, adding complexity.
- ✓
Place web servers in a public subnet and database servers in a private subnet
Why this is correct
Correct. This keeps databases isolated from direct internet access.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every CV0-004 question from scratch — 977 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CV0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CV0-004 exam.