mediumMultiple Choice
CV0-004 Practice Question: A company uses a hybrid cloud model and…
A company uses a hybrid cloud model and experiences intermittent connectivity issues between the on-premises network and the public cloud VPC. The administrator has verified that the VPN connection is established. Which of the following should the administrator check next?
⚠ Common exam trap
Many exam-takers assume an established VPN tunnel guarantees end-to-end connectivity, but CompTIA often tests that routing misconfigurations (e.g., missing static routes or incorrect VPC route propagation) are the most common cause of intermittent connectivity when the tunnel is up.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Routing tables on both sides.
Since the VPN connection is established (tunnel is up), the issue is likely with traffic routing rather than basic connectivity. Routing tables on both the on-premises router and the cloud VPC must have correct routes pointing to the VPN gateway and the remote subnets; a missing or misconfigured route (e.g., a missing static route or incorrect VPC route table entry) will cause intermittent connectivity even when the VPN tunnel itself is active.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Firewall rules for outbound traffic.
Why it's wrong here
Firewall rules for outbound traffic govern egress filtering, not tunnel integrity, so they cannot explain intermittent drops on an established VPN. It is tempting because outbound rules are a routine first check when traffic fails entirely. They would be correct if the VPN were down or specific destinations were blocked, rather than the connection flapping.
- ✗
Public IP address of the VPN gateway.
Why it's wrong here
A public IP address is static configuration; if it were wrong the VPN would never establish, yet the stem confirms it is established. Verifying gateway addressing suits initial tunnel setup failures, not intermittent drops on an existing connection.
- ✓
Routing tables on both sides.
Why this is correct
With the VPN tunnel established, intermittent failures typically stem from asymmetric or missing routes, so routing tables on both sides must be verified. Mismatched routes cause traffic to traverse incorrect paths or be dropped, matching the intermittent hybrid connectivity symptom described.
- ✗
DNS resolution of cloud endpoints.
Why it's wrong here
The VPN tunnel is already established, so name resolution is not the transport fault; intermittent drops point to tunnel stability, MTU or routing. DNS checks suit scenarios where names fail to resolve while connectivity otherwise works.
Visual reference
Go deeper
Related to this question
About these practice questions
One of 834 original CV0-004 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CV0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CV0-004 exam.