How many Troubleshooting Scenario Questions questions are on this page?

This page has 15 Troubleshooting Scenario Questions scenario questions for the CV0-004 exam, each with detailed explanations and wrong-answer analysis.

How should I approach CV0-004 scenario questions?

Read the full scenario before looking at the answer options. Identify the constraint or requirement in the scenario, then eliminate options that are generally true but wrong for this specific case. Scenario questions reward careful reading over pattern matching.

← Back to CompTIA Cloud+ CV0-004 questions

Scenario-based practice

Troubleshooting Scenario Questions

Practise CompTIA Cloud+ CV0-004 practice questions — original exam-style scenarios covering every exam domain, with detailed explanations, wrong-answer analysis, and common exam traps.

Start full practice test Read exam guide

scenario questions

CV0-004

exam code

CompTIA

vendor

Scenario guide

How to approach troubleshooting scenario questions

These questions describe a network symptom and ask you to identify the root cause or the correct fix. They appear across all certification exams and reward systematic thinking over memorisation. The best candidates follow a consistent troubleshooting framework even under time pressure.

Quick answer

Troubleshooting Scenario Questions questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Practice scenarios

Question 1mediumdrag order

Full question →

Sequence the steps to troubleshoot a cloud-based application that is not accessible from the internet.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

5Step 5

Question 2hardmultiple choice

Full question →

A cloud engineer is troubleshooting a web application that is not responding. The engineer examines the serial console output of the web-server instance and finds the error shown in the exhibit. What is the MOST likely cause of this issue?

Exhibit

Refer to the exhibit.

```
$ gcloud compute instances list
NAME        ZONE        MACHINE_TYPE  PREEMPTIBLE  STATUS
web-server  us-east1-b  e2-medium     true         RUNNING
db-server   us-east1-b  e2-standard-2               STOPPED

$ gcloud compute instances describe web-server --format='get(status,serviceAccounts.email)'
status: RUNNING
serviceAccounts.email: default@project.iam.gserviceaccount.com

$ gcloud compute instances get-serial-port-output web-server
...
[   10.123456] cloud-init: User data script started
[   10.654321] cloud-init: ERROR: Failed to fetch metadata from metadata server
...
```

A
The service account associated with the instance is missing the required permissions.
Why wrong: Missing permissions would cause API call failures, not metadata fetch errors.
B
The instance is in a STOPPED state and cannot execute user data scripts.
Why wrong: The serial output shows the instance is RUNNING.
C
The instance does not have a public IP address assigned.
Why wrong: Metadata server is accessible regardless of public IP; it's a link-local address.
D
A firewall rule is blocking traffic to the metadata server IP address 169.254.169.254.
The metadata server is accessed via link-local address; blocking this traffic prevents metadata retrieval.

Full breakdown with real-world context →

Question 3mediummultiple choice

Review the full subnetting walkthrough →

A cloud administrator is troubleshooting connectivity to a virtual machine with IP address 10.10.10.10 from another VM on the same subnet. The output of ping and traceroute commands is shown. What is the most likely cause of the connectivity issue?

Exhibit

Refer to the exhibit.

```
$ ping 10.10.10.10
PING 10.10.10.10 (10.10.10.10) 56(84) bytes of data.
From 10.10.10.1 icmp_seq=1 Destination Host Unreachable
From 10.10.10.1 icmp_seq=2 Destination Host Unreachable
From 10.10.10.1 icmp_seq=3 Destination Host Unreachable

--- 10.10.10.10 ping statistics ---
3 packets transmitted, 0 received, +3 errors, 100% packet loss, time 2003ms

$ traceroute 10.10.10.10
traceroute to 10.10.10.10 (10.10.10.10), 30 hops max, 60 byte packets
 1  10.10.10.1  0.433 ms  0.428 ms  0.414 ms
 2  * * *
 3  * * *
 4  * * *
```

A
The destination VM's network interface is disabled.
If the network interface is disabled, the VM will not respond to ARP requests, causing the gateway to return 'Destination Host Unreachable'.
B
The destination VM is powered off.
Why wrong: While a powered-off VM could cause unreachability, the 'Destination Host Unreachable' message from the gateway suggests the gateway itself cannot resolve the destination MAC, which is more indicative of an ARP failure than a powered-off VM.
C
The source VM's routing table does not have a default gateway.
Why wrong: Since both VMs are on the same subnet, no routing is needed; the issue is at layer 2, not layer 3 routing.
D
The destination VM's security group is blocking ICMP.
Why wrong: A security group blocking ICMP would typically result in a timeout (no response) rather than a 'Destination Host Unreachable' message from the gateway.

Full breakdown with real-world context →

Question 4easymultiple choice

Study the full virtualization explanation →

A cloud engineer is troubleshooting a performance issue in a virtualized environment. A critical application is running slowly, and the engineer suspects resource contention. The host server has 32 vCPUs and 256 GB of RAM, running four VMs. Which tool should the engineer use to determine if CPU ready time is causing the performance degradation?

A
Run the 'top' command inside the affected VM
Why wrong: 'top' shows guest CPU usage, not hypervisor contention.
B
Deploy a network analyzer to capture traffic between VMs
Why wrong: Network analyzer does not measure CPU contention.
C
Check the performance monitor in the guest operating system
Why wrong: Guest OS monitors do not show hypervisor-level metrics like CPU ready.
D
Use the hypervisor's monitoring console to view CPU ready time
Hypervisor consoles provide CPU ready metrics indicating contention.

Full breakdown with real-world context →

Question 5mediummulti select

Study the full virtualization explanation →

A cloud engineer is troubleshooting a VM that is experiencing high latency. The VM is hosted on a hypervisor with other VMs. Which TWO metrics should the engineer review to identify if resource contention is occurring?

A
Memory ballooning
Correct; memory ballooning indicates memory contention.
B
CPU ready time
Correct; high CPU ready time indicates CPU contention.
C
Network packet drops
Why wrong: Incorrect; packet drops indicate network issues, not resource contention.
D
Swap usage
Why wrong: Incorrect; swap usage can indicate memory pressure but ballooning is the direct metric.
E
Disk queue length
Why wrong: Incorrect; disk queue length indicates storage contention, not CPU/memory.

Full breakdown with real-world context →

Question 6hardmultiple choice

Review the full routing breakdown →

A cloud administrator is troubleshooting connectivity issues between two virtual networks in a public cloud. The networks are in the same region but different VPCs. Both VPCs have route tables and security groups configured. Instances in VPC A cannot ping instances in VPC B. Which of the following is the most likely cause?

A
VPC peering is not established between the two VPCs.
Without peering, traffic is isolated between VPCs.
B
The instances are not assigned public IP addresses.
Why wrong: Private IP communication does not require public IPs.
C
Security groups are blocking ICMP traffic.
Why wrong: Security groups are permissive by default; this could be a cause but is less likely if other traffic also fails.
D
Network ACLs are not configured to allow the traffic.
Why wrong: NACLs are stateless but default to allow all; misconfiguration is possible but less common than missing peering.

Full breakdown with real-world context →

Question 7hardmulti select

Full question →

A cloud engineer is troubleshooting a performance issue where a web server cluster experiences high latency during peak hours. The cluster uses an auto-scaling group behind a load balancer. Which THREE steps should the engineer take to identify the root cause?

A
Monitor CPU and memory utilization on the web servers
High resource usage can cause slow responses.
B
Analyze web server access logs for slow requests
Logs can pinpoint which requests are slow and why.
C
Check the load balancer's backend instance health status
Unhealthy instances can cause failed requests and retries.
D
Reduce the number of instances in the auto-scaling group
Why wrong: Reducing instances would increase load on remaining servers, worsening latency.
E
Review security group rules for the load balancer
Why wrong: Security groups control access but do not directly cause latency.

Full breakdown with real-world context →

Question 8mediummultiple choice

Full question →

A cloud engineer is troubleshooting an issue where users cannot connect to a web application hosted on a cloud VM. The VM's security group allows HTTP (port 80) from 0.0.0.0/0, and the VM's OS firewall is disabled. The engineer can ping the VM's public IP from the internet. What is the most likely cause of the issue?

A
OS firewall is blocking port 80
Why wrong: The OS firewall is disabled.
B
Incorrect routing table on the VM
Why wrong: Ping works, so routing is functional.
C
Security group rule is applied to the wrong subnet
Why wrong: The security group allows HTTP from anywhere, so it should work.
D
Web server service is not running on the VM
If the web server is not running, it won't respond on port 80, even though the network allows it.

Full breakdown with real-world context →

Question 9hardmulti select

Study the full virtualization explanation →

A cloud administrator is troubleshooting a performance issue in a virtualized environment. Which TWO metrics should be monitored to identify CPU contention on the hypervisor?

A
Swap rate
Why wrong: Swap rate is a memory metric, not a CPU contention metric.
B
CPU ready time
CPU ready time is a direct indicator of CPU contention, as it measures the time a vCPU is waiting for physical CPU resources.
C
Memory ballooning
Why wrong: Memory ballooning is related to memory overcommitment, not CPU contention.
D
CPU utilization per core
Why wrong: CPU utilization shows usage but does not directly indicate contention; high utilization can occur without contention.
E
CPU co-stopping time
CPU co-stopping time measures the time correlated vCPUs are waiting for each other, indicating contention.

Full breakdown with real-world context →

Question 10mediummultiple choice

Review the full routing breakdown →

A cloud administrator is troubleshooting connectivity issues between two virtual networks in different regions. The VNets are peered, but instances cannot communicate. The administrator verifies that the peering status is 'Connected' and route tables appear correct. Which of the following should be checked next?

A
Network Security Group (NSG) rules on the instances and subnets
Correct; NSGs can block traffic even if VNet peering is established.
B
DNS resolution settings
Why wrong: Incorrect; DNS affects name resolution, not direct IP connectivity.
C
Gateway subnet configuration
Why wrong: Incorrect; gateways are not required for VNet peering.
D
Service endpoint status
Why wrong: Incorrect; service endpoints are for accessing Azure PaaS services.

Full breakdown with real-world context →

Question 11mediummultiple choice

Review the full subnetting walkthrough →

Refer to the exhibit. A cloud engineer is troubleshooting network connectivity to a server with IP 10.0.0.5. The server is on the same subnet. Based on the iptables rules shown, what is the most likely cause of the connectivity failure?

Network Topology

A
The FORWARD chain policy drops all traffic
Why wrong: Incorrect; FORWARD chain policy is ACCEPT, and the rule drops all, but the issue is INPUT.
B
The OUTPUT chain rejects all traffic to the server
Why wrong: Incorrect; OUTPUT chain accepts all.
C
The DROP rule in INPUT has zero packet count, so it is not effective
Why wrong: Incorrect; zero count means no packets have matched yet, but the rule is still in effect.
D
The INPUT chain drops all traffic destined to the 10.0.0.0/8 network
Correct; the DROP rule in INPUT blocks traffic to 10.0.0.0/8.

Full breakdown with real-world context →

Question 12hardmultiple choice

Full question →

A cloud administrator is troubleshooting a performance issue where an application running on a VM in a private cloud is experiencing high latency. The VM is connected to a virtual switch that uses SR-IOV. The administrator suspects network bottlenecks. Which of the following is the MOST likely cause of the latency?

A
The physical network interface card (NIC) is saturated.
Saturation of the physical NIC is a common cause of latency with SR-IOV.
B
The virtual switch is dropping packets due to buffer exhaustion.
Why wrong: SR-IOV bypasses the virtual switch, so vSwitch buffers are not the issue.
C
The VM's virtual NIC is not using the correct driver.
Why wrong: Driver issues could cause connectivity problems, but not typically high latency in an SR-IOV setup.
D
The hypervisor's CPU is overloaded due to SR-IOV emulation.
Why wrong: SR-IOV reduces CPU overhead by bypassing the hypervisor.

Full breakdown with real-world context →

Question 13hardmultiple choice

Read the full VPN explanation →

A cloud administrator is managing a hybrid cloud environment where on-premises servers connect to a public cloud VPC via a site-to-site VPN. Users report intermittent connectivity issues to cloud resources. The administrator examines the VPN tunnel logs and sees 'Phase 2 negotiation failed' errors. Which of the following is the MOST likely cause?

A
Dead Peer Detection (DPD) is disabled on one side.
Why wrong: DPD affects tunnel health detection, not negotiation.
B
Incorrect pre-shared key used for the VPN tunnel.
Why wrong: Incorrect pre-shared key causes Phase 1 failure, not Phase 2.
C
Packet loss due to high latency on the internet link.
Why wrong: Packet loss could cause timeouts but not specific Phase 2 failure.
D
Mismatched encryption domain definitions (traffic selectors) between on-premises and cloud VPN gateways.
Phase 2 negotiates encryption domains; mismatched selectors cause failure.

Full breakdown with real-world context →

Question 14easymultiple choice

Full question →

A cloud engineer notices that a virtual machine (VM) in a public cloud environment is consistently running at 90% CPU during business hours. The VM hosts a customer-facing web application. Which of the following is the BEST initial troubleshooting step?

A
Migrate the VM to a different availability zone.
Why wrong: Migrating zones does not address CPU usage and is a more drastic measure.
B
Review the VM's performance metrics and application logs.
Reviewing metrics and logs is the standard first step in troubleshooting.
C
Reboot the VM to reset resource usage.
Why wrong: Rebooting causes downtime and does not address the root cause.
D
Scale up the VM to a larger instance size.
Why wrong: Scaling up without investigation may increase costs unnecessarily.

Full breakdown with real-world context →

Question 15mediummultiple choice

Review the full subnetting walkthrough →

A cloud administrator is troubleshooting an issue where a user in the finance department cannot access a critical application hosted on a private cloud. The user can access other applications in the same subnet. The security team recently implemented a new network security policy. Which of the following is MOST likely causing the issue?

A
The user's VM is isolated from the subnet due to a misconfigured VLAN.
Why wrong: The user can access other applications in the same subnet, so VLAN misconfiguration is unlikely.
B
The user's account has been disabled due to a failed login attempt.
Why wrong: The user can still access other applications, so the account is active.
C
The hypervisor is denying access to the application due to a resource quota violation.
Why wrong: Resource quota violations would affect all applications or VMs, not just one application.
D
A host-based firewall rule is blocking the specific application port on the user's VM.
A host-based firewall rule could block only the specific port used by the application, which explains why other applications work.

Full breakdown with real-world context →

These CV0-004 practice questions are part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style CV0-004 questions with detailed explanations, topic-based practice, mock exams, readiness tracking, and study analytics.

Troubleshooting Scenario Questions

How to approach troubleshooting scenario questions

Quick answer

Related CV0-004 topic practice pages

Operations and Support practice questions

Cloud Architecture and Design practice questions

Security practice questions

Deployment practice questions

Troubleshooting practice questions

CV0-004 fundamentals practice questions

CV0-004 scenario practice questions

CV0-004 troubleshooting practice questions

Practice scenarios

Sequence the steps to troubleshoot a cloud-based application that is not accessible from the internet.

A cloud engineer is troubleshooting a web application that is not responding. The engineer examines the serial console output of the web-server instance and finds the error shown in the exhibit. What is the MOST likely cause of this issue?

Exhibit

A cloud administrator is troubleshooting connectivity to a virtual machine with IP address 10.10.10.10 from another VM on the same subnet. The output of ping and traceroute commands is shown. What is the most likely cause of the connectivity issue?

Exhibit

A cloud engineer is troubleshooting a VM that is experiencing high latency. The VM is hosted on a hypervisor with other VMs. Which TWO metrics should the engineer review to identify if resource contention is occurring?

A cloud engineer is troubleshooting a performance issue where a web server cluster experiences high latency during peak hours. The cluster uses an auto-scaling group behind a load balancer. Which THREE steps should the engineer take to identify the root cause?

A cloud administrator is troubleshooting a performance issue in a virtualized environment. Which TWO metrics should be monitored to identify CPU contention on the hypervisor?

Refer to the exhibit. A cloud engineer is troubleshooting network connectivity to a server with IP 10.0.0.5. The server is on the same subnet. Based on the iptables rules shown, what is the most likely cause of the connectivity failure?

A cloud engineer notices that a virtual machine (VM) in a public cloud environment is consistently running at 90% CPU during business hours. The VM hosts a customer-facing web application. Which of the following is the BEST initial troubleshooting step?