Drag steps to the numbered slots on the right, or tap a step then tap a slot.
CV0-004 Practice Question: Arrange the steps to configure a VPN connection…
Arrange the steps to configure a VPN connection between an on-premises network and a cloud VPC.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
Create cloud-side VPN gateway, then create on-premises gateway representation, then configure on-premises VPN device, then create VPN connection, then configure routing.
Start with cloud-side gateway, on-premises gateway representation, configure on-prem device, create connection, then routing.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Create cloud-side VPN gateway, then create on-premises gateway representation, then configure on-premises VPN device, then create VPN connection, then configure routing.
Why this is correct
This is the correct order because you must first establish the cloud-side gateway, then represent the on-premises gateway in the cloud, configure the on-premises device with the cloud gateway details, create the connection to pair them, and finally update routing to enable traffic flow.
- ✗
Create cloud-side VPN gateway, then create on-premises gateway representation, then create VPN connection, then configure on-premises VPN device, then configure routing.
Why it's wrong here
This is incorrect because creating the VPN connection before configuring the on-premises device would cause the connection to be established without the proper device settings, leading to authentication or IPsec mismatch errors.
- ✗
Create on-premises gateway representation, then create cloud-side VPN gateway, then configure on-premises VPN device, then create VPN connection, then configure routing.
Why it's wrong here
This is incorrect because the cloud-side gateway must be created first, as the on-premises gateway representation references the cloud gateway's endpoint. Starting with the on-premises representation would lack the necessary cloud-side configuration.
- ✗
Create cloud-side VPN gateway, then configure on-premises VPN device, then create on-premises gateway representation, then create VPN connection, then configure routing.
Why it's wrong here
This is incorrect because configuring the on-premises device before creating the on-premises gateway representation in the cloud would mean the device configuration lacks the cloud gateway's public IP and tunnel settings, which are required for successful setup.
Go deeper
Related to this question
About these practice questions
One of 977 original CV0-004 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CV0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CV0-004 exam.