CV0-004 Operations and Support Practice Question
A cloud engineer is investigating intermittent latency in a three-tier application hosted in Google Cloud. The engineer suspects that a specific Compute Engine instance is experiencing packet loss to its database backend. The engineer needs to capture and analyze the traffic at the packet level on the instance without installing third-party agents on the instance and without disrupting production traffic. Which Google Cloud feature should the engineer use?
⚠ Common exam trap
The trap here is assuming that VPC Flow Logs, which capture flow metadata, provide the same packet-level detail as an actual packet capture mechanism.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Packet Mirroring
Packet Mirroring is the correct choice because it clones traffic at the VPC level and forwards it to a collector without requiring an agent on the source instance and without affecting production traffic. This gives the engineer full packet-level visibility to analyze retransmissions, dropped packets, and TCP behavior between the instance and the database.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Cloud NAT logging
Why it's wrong here
Cloud NAT logging records information about NAT translations and errors for outbound traffic through Cloud NAT. It is used to troubleshoot NAT allocation and connectivity issues, not to capture packet-level data between an instance and its database backend. It would not provide the TCP-level detail needed to confirm packet loss.
- ✗
Firewall Rules Logging
Why it's wrong here
Firewall Rules Logging records allowed and denied connections based on firewall rule evaluation. It can show whether traffic is permitted or blocked, but it does not capture packet contents or TCP retransmission behavior. It is a security and connectivity auditing tool, not a packet capture mechanism for latency diagnosis.
- ✓
Packet Mirroring
Why this is correct
Packet Mirroring clones traffic from a specified instance or subnet and sends it to a collector instance for analysis. It operates at the VPC level, requires no agent on the monitored instance, and does not disrupt production traffic. This allows the engineer to capture and analyze packet-level details to diagnose the suspected packet loss.
- ✗
VPC Flow Logs
Why it's wrong here
VPC Flow Logs capture metadata about IP traffic flows, such as source and destination IP, ports, protocol, and bytes, but they do not capture packet payloads or TCP flags needed to diagnose packet loss at the packet level. They are useful for traffic analysis and security, but they cannot provide the detailed packet capture the scenario requires.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CV0-004 question from scratch — 834 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official CompTIA exam blueprint
This CV0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CV0-004 exam.