easyMultiple ChoiceObjective-mapped
CV0-004 Practice Question: During a cloud deployment, a virtual machine is…
During a cloud deployment, a virtual machine is created from a custom image. After boot, the VM is not accessible via SSH. Which of the following should the administrator check FIRST?
⚠ Common exam trap
A common mix-up: candidates assume the issue is with the OS or image itself (e.g., licensing or encryption) and overlook the most common and easily verified network-layer misconfiguration of security group rules.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The security group rules for inbound SSH
The most common reason a newly deployed VM is inaccessible via SSH is that the security group or network ACL does not permit inbound TCP port 22 traffic. Security groups act as a virtual firewall at the instance level, and if the rule allowing SSH from the administrator's IP is missing or misconfigured, the connection will be refused. This should be the first check because it is a frequent misconfiguration during deployment.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The security group rules for inbound SSH
Why this is correct
Security group rules are the first line of defense; if SSH (port 22) is not allowed, connection will fail.
- ✗
The boot volume is encrypted
Why it's wrong here
Volume encryption does not affect SSH access; it only protects data at rest.
- ✗
The hypervisor version compatibility
Why it's wrong here
Hypervisor compatibility is checked before deployment and is unlikely to be the cause of post-boot access issues.
- ✗
The image's OS license activation status
Why it's wrong here
OS license issues are rare and typically do not prevent network access.
Visual reference
Go deeper
Related to this question
About these practice questions
This CV0-004 question is part of Courseiva's 977-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CV0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CV0-004 exam.