hardMultiple Choice
CV0-004 Practice Question: Migrating its on-premises application to a public…
A company is migrating its on-premises application to a public cloud. The application requires low-latency access to a legacy database that cannot be moved to the cloud. The cloud deployment must use a hybrid architecture. Which network connectivity solution should the cloud architect recommend to minimize latency and provide secure, reliable communication?
⚠ Common exam trap
CompTIA often tests the misconception that a site-to-site VPN is sufficient for low-latency hybrid connectivity, but the trap here is that VPNs over the internet cannot guarantee consistent latency or bandwidth, whereas a dedicated private connection provides a Service Level Agreement (SLA) for performance and reliability.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use a dedicated private connection via a cloud provider's direct connect service.
A dedicated private connection via a cloud provider's direct connect service (e.g., AWS Direct Connect, Azure ExpressRoute, or Google Cloud Interconnect) establishes a private, physical link between the on-premises data center and the cloud VPC. This bypasses the public internet entirely, providing consistent low-latency performance, higher bandwidth, and a more reliable connection for hybrid architectures where the legacy database remains on-premises.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Use a dedicated private connection via a cloud provider's direct connect service.
Why this is correct
A dedicated private interconnect bypasses the public internet, providing deterministic paths and low jitter to the on-premises legacy database. This satisfies the hybrid architecture's latency-minimisation and reliability constraints better than site-to-site VPN over shared internet links.
- ✗
Route traffic through the public internet with encryption.
Why it's wrong here
Public internet routing adds variable hop-by-hop latency and jitter, so it cannot guarantee the low-latency, reliable path the legacy database access requires. It tempts because encrypted internet traffic is cheap and quick to set up, and is the correct choice when workloads tolerate variable latency and no dedicated circuit is justified.
- ✗
Deploy a CloudFront distribution to cache database queries.
Why it's wrong here
CloudFront caches HTTP objects at edge locations; it cannot proxy live database queries, so the application still reaches the legacy database over the same hybrid link. It tempts because edge caching genuinely reduces latency for static or cacheable web content, which is the correct scenario for a CloudFront distribution.
- ✗
Establish a site-to-site VPN over the internet.
Why it's wrong here
A site-to-site VPN still traverses the public internet, so its encrypted tunnel inherits the same variable latency and jitter that dedicated private connectivity avoids. It tempts because it is secure and inexpensive, and is the correct choice when traffic volumes are modest and latency-sensitive, deterministic paths are not required.
Go deeper
Related to this question
About these practice questions
This CV0-004 question is part of Courseiva's 834-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CV0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CV0-004 exam.