mediumMultiple ChoiceObjective-mapped
CV0-004 Internal load balancer Practice Question
A company is migrating a legacy on-premises application to a cloud VM. The application requires a static private IP address for compliance. During a disaster recovery failover, the VM must automatically retain the same IP address in the secondary region. Which solution should be used?
⚠ Common exam trap
Candidates might assume that a reserved static private IP can be moved across regions, but cloud providers restrict static private IPs to a single region. The correct solution uses a load balancer's static IP as the consistent endpoint.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use a load balancer with a fixed IP and point it to the VM's current private IP.
An internal load balancer can be configured with a static private IP address that persists across regions during disaster recovery. The load balancer distributes traffic to the VM in the secondary region without requiring the VM's own private IP to remain the same. This satisfies the compliance requirement for a static private IP endpoint. Option A is incorrect because reserved static private IP addresses are tied to a specific region and cannot be moved across regions; thus, the same IP cannot be retained in the secondary region. Option B is incorrect because a dynamic IP would change after failover, requiring DNS updates. Option D is incorrect because elastic IPs are public, not private, and a VPN does not help retain a private IP.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Provision a reserved static private IP address that can be reassigned to the new VM.
Why it's wrong here
Reserved static private IP addresses are region-specific and cannot be reassigned to a VM in a different region. Therefore, this approach does not retain the same IP in the secondary region.
- ✗
Use a dynamic IP address and update DNS after failover.
Why it's wrong here
Dynamic IP addresses change after failover, so the VM would not retain the same IP, violating compliance.
- ✓
Use a load balancer with a fixed IP and point it to the VM's current private IP.
Why this is correct
An internal load balancer with a static private IP provides a consistent IP address across regions. The load balancer's IP stays the same, and it forwards traffic to the VM in the secondary region, meeting the compliance requirement.
- ✗
Assign an elastic IP (public) and configure a VPN.
Why it's wrong here
Elastic IPs are public, not private, and a VPN does not help retain a private IP for the VM.
Go deeper
Related to this question
About these practice questions
One of 977 original CV0-004 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CV0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CV0-004 exam.