mediumMultiple ChoiceObjective-mapped
CV0-004 Practice Question: Is troubleshooting a connectivity issue between…
A cloud engineer is troubleshooting a connectivity issue between two virtual networks in different regions. The engineer has verified that the virtual networks are peered and the routing tables are correct. Which of the following is the MOST likely cause of the issue?
⚠ Common exam trap
The trap here is that candidates often overlook NSGs and jump to routing or gateway issues, but in a peered VNet scenario with correct routing, NSGs are the primary layer-4 filter that can silently drop traffic.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
A network security group blocking the traffic
Network security groups (NSGs) operate at the subnet or NIC level and can filter traffic between peered virtual networks even when routing is correctly configured. Since the engineer has verified peering and routing tables, the most likely remaining cause is an NSG rule explicitly or implicitly denying the traffic, as NSGs are stateful and evaluated after routing decisions.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Incorrect route tables on the virtual network gateway
Why it's wrong here
The engineer already verified routing, so this is not the cause.
- ✗
A physical cable disconnection in the datacenter
Why it's wrong here
The issue is in cloud virtual networks, not physical infrastructure.
- ✓
A network security group blocking the traffic
Why this is correct
NSGs are stateful firewalls that can block inter-VNet traffic if not properly configured.
- ✗
Incorrect DNS resolution
Why it's wrong here
DNS resolves names to IPs, but the connectivity issue is at the network layer.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every CV0-004 question from scratch — 977 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CV0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CV0-004 exam.