The answer is to review the VPN logs and monitor packet loss. These two actions directly address the root causes of intermittent VPN connectivity in a hybrid cloud environment, where transient issues like routing misconfigurations or network congestion can cause traffic to drop without a complete tunnel failure. VPN logs capture authentication errors, phase 2 negotiation failures, or policy mismatches, while packet loss monitoring reveals degradation that a simple ping test might miss. On the CompTIA Cloud+ CV0-004 exam, this question tests your ability to distinguish between persistent failures and intermittent problems—a common trap is to immediately blame the internet link or firewall rules, but the correct approach is to check the tunnel’s health and path integrity first. Remember the mnemonic “Logs and Loss” to recall that when connectivity comes and goes, you always start with the tunnel’s own records and a packet loss test before touching the network hardware.
CV0-004 Operations and Support Practice Question
This CV0-004 practice question tests your understanding of operations and support. The scenario asks you to isolate a root cause — eliminate options that address a different problem before choosing. After answering, compare your reasoning against the explanation and wrong-answer breakdown below. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
A company is experiencing intermittent connectivity issues between its on-premises data center and a public cloud environment over a VPN connection. Which TWO of the following should the administrator check to troubleshoot the problem?
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Validate the route tables on both sides of the VPN.
Route tables control the path that traffic takes between networks. If the route tables on either the on-premises VPN device or the cloud virtual network gateway do not have the correct entries (e.g., missing routes for the remote subnet or incorrect next-hop IPs), traffic can be dropped or misdirected, causing intermittent connectivity. Validating these routes ensures that packets destined for the cloud or on-premises are properly forwarded over the VPN tunnel.
Key principle: Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
✗
Verify that the internet bandwidth is sufficient.
Why it's wrong here
Bandwidth saturation might cause latency but not connectivity intermittent failures.
✓
Validate the route tables on both sides of the VPN.
Why this is correct
Incorrect routes can cause traffic to be dropped or misrouted.
Related concept
Read the scenario before looking for a memorised answer.
✗
Ensure the cloud storage performance is adequate.
Why it's wrong here
Storage performance is unrelated to VPN connectivity.
✗
Check the DNS resolution of cloud endpoints.
Why it's wrong here
DNS is not used for VPN connectivity; VPN uses IP addresses.
✓
Review the VPN logs and monitor packet loss.
Why this is correct
Logs and packet loss metrics help identify connectivity issues.
Related concept
Read the scenario before looking for a memorised answer.
Common exam traps
Common exam trap: answer the scenario, not the keyword
CompTIA often tests the misconception that intermittent VPN issues are always bandwidth-related, but the real culprit is usually routing misconfiguration or tunnel instability, which is why route validation and log/packet-loss analysis are the correct pair.
Detailed technical explanation
How to think about this question
VPN tunnels rely on static or dynamic routing (e.g., BGP) to exchange prefixes between on-premises and cloud. A missing route in the cloud's route table (e.g., for the on-premises subnet) or an incorrect next-hop IP (e.g., pointing to the wrong VPN gateway) can cause asymmetric routing or blackholing. Additionally, VPN logs and packet loss monitoring (Option E) are critical because they reveal tunnel flapping, rekey failures, or high latency that cause intermittent drops—common with IPsec/IKEv2 tunnels where DPD (Dead Peer Detection) timeouts or MTU mismatches can trigger brief outages.
KKey Concepts to Remember
Read the scenario before looking for a memorised answer.
Find the constraint that changes the correct option.
Eliminate answers that are true in general but not in this case.
TExam Day Tips
→Watch for words such as best, first, most likely and least administrative effort.
→Review why wrong options are wrong, not only why the correct option is correct.
Key takeaway
Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Real-world example
How this comes up in practice
A small business has 20 workstations on the 192.168.1.0/24 network and one public IP from its ISP. The router uses PAT (NAT overload) so all 20 devices share one public address using different source ports. NAT questions test whether you understand the four address terms and which direction each translation applies.
What to study next
Got this wrong? Here's your next step.
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
Operations and Support — This question tests Operations and Support — Read the scenario before looking for a memorised answer..
What is the correct answer to this question?
The correct answer is: Validate the route tables on both sides of the VPN. — Route tables control the path that traffic takes between networks. If the route tables on either the on-premises VPN device or the cloud virtual network gateway do not have the correct entries (e.g., missing routes for the remote subnet or incorrect next-hop IPs), traffic can be dropped or misdirected, causing intermittent connectivity. Validating these routes ensures that packets destined for the cloud or on-premises are properly forwarded over the VPN tunnel.
What should I do if I get this CV0-004 question wrong?
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
What is the key concept behind this question?
Read the scenario before looking for a memorised answer.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A company uses a hybrid cloud model and experiences intermittent connectivity issues between the on-premises network and the public cloud VPC. The administrator has verified that the VPN connection is established. Which of the following should the administrator check next?
medium
A.Firewall rules for outbound traffic.
B.Public IP address of the VPN gateway.
✓ C.Routing tables on both sides.
D.DNS resolution of cloud endpoints.
Why C: Since the VPN connection is established (tunnel is up), the issue is likely with traffic routing rather than basic connectivity. Routing tables on both the on-premises router and the cloud VPC must have correct routes pointing to the VPN gateway and the remote subnets; a missing or misconfigured route (e.g., a missing static route or incorrect VPC route table entry) will cause intermittent connectivity even when the VPN tunnel itself is active.
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
This CV0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CV0-004 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.