easyMultiple ChoiceObjective-mapped
CV0-004 Practice Question: Protect data in transit between its on-premises…
A company wants to protect data in transit between its on-premises data center and a public cloud environment. Which technology should be used to create a secure encrypted tunnel over the internet?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
VPN
A VPN (Virtual Private Network) creates an encrypted tunnel over the internet. TLS is used for web traffic, not for site-to-site tunnels. SSH is for remote admin, and a firewall is for filtering, not encrypting tunnels.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
SSH
Why it's wrong here
SSH is for secure shell access, not for encrypting data between data centers.
- ✗
Firewall
Why it's wrong here
Firewalls filter traffic but do not inherently provide encryption or tunnel capabilities.
- ✗
TLS
Why it's wrong here
TLS is used for securing HTTP traffic, not typically for site-to-site VPN tunnels.
- ✓
VPN
Why this is correct
VPNs (IPsec or SSL VPNs) are designed to create secure tunnels over public networks.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every CV0-004 question from scratch — 977 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CV0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CV0-004 exam.