hardMultiple ChoiceObjective-mapped
CV0-004 Practice Question: Runs the commands shown in the exhibit
Exhibit
Refer to the exhibit.
```
[user@bastion ~]$ gcloud compute instances list --format="value(name,zone,status)"
web-server-1 us-central1-a RUNNING
web-server-2 us-central1-b RUNNING
db-server us-central1-a RUNNING
[user@bastion ~]$ gcloud compute ssh web-server-1 --command="sudo systemctl status nginx"
● nginx.service - A high performance web server
Loaded: loaded (/usr/lib/systemd/system/nginx.service; enabled; vendor preset: disabled)
Active: active (running) since Mon 2024-03-14 10:23:45 UTC; 1h 30min ago
[user@bastion ~]$ gcloud compute firewall-rules list --filter="allowed=('tcp:22')"
NAME NETWORK DIRECTION PRIORITY ALLOW DENY DISABLED
allow-ssh default INGRESS 1000 tcp:22 False
[user@bastion ~]$ gcloud compute firewall-rules describe allow-ssh
allowed:
- IPProtocol: tcp
ports:
- '22'
sourceRanges:
- 0.0.0.0/0
```A cloud engineer runs the commands shown in the exhibit. Based on the output, which security issue is present?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The firewall rule allows SSH access from any source IP.
The firewall rule 'allow-ssh' allows SSH (tcp:22) from all source IP addresses (0.0.0.0/0), which is a security risk. Option A is incorrect because the bastion host is not shown to be unused for SSH access; the issue is the firewall rule, not the use of the bastion host. Option B is incorrect because the output shows the web servers are running (status RUNNING). Option D is incorrect because the concern is not the number of rules but that the single rule allows SSH from any IP.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The bastion host is not used for SSH access.
Why it's wrong here
The exhibit shows a bastion host is being used, but the firewall rule still allows direct SSH from anywhere.
- ✗
The web servers are not running.
Why it's wrong here
The status shows they are running.
- ✓
The firewall rule allows SSH access from any source IP.
Why this is correct
The sourceRanges is 0.0.0.0/0, meaning all IPs can SSH into the instances.
- ✗
There are too many firewall rules allowing SSH.
Why it's wrong here
Only one rule is shown, not too many.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CV0-004 question from scratch — 977 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CV0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CV0-004 exam.