CompTIA CV0-004 Practice Test 67
Question 660
Before changing production at a regional health provider, thousands of short outbound API calls fail intermittently although CPU and network bandwidth remain sufficient. Which evidence should the engineer check first?
- Review proxy target address, connection logs, app health and request timing.
- Compare address plans, effective routes and NAT translation feasibility.
- Inspect allowed VLAN list, port mode and observed 802.1Q tags.
- Inspect NAT connection counts, port allocation and destination concurrency.
Explanation
Correct Answer
D:Inspect NAT connection counts, port allocation and destination concurrency. This distinguishes the relevant dependency before changing cloud resources. Stateful NAT relies on finite translation ports and can fail before bandwidth saturates.
Incorrect Answers
A:That approach would help when a reverse proxy returns HTTP 502 while application backends are restarting, but DNS resolution succeeds. Inspect NAT connection counts, port allocation and destination concurrency.
B:Compare address plans, effective routes and NAT translation feasibility. The relevant cloud response here is: Inspect NAT connection counts, port allocation and destination concurrency.
C:Inspect allowed VLAN list, port mode and observed 802.1Q tags. The relevant cloud response here is: Inspect NAT connection counts, port allocation and destination concurrency.
Question 661
The release owner reviews a case where a web application reaches a local database subnet but cannot contact a peered cloud subnet even though firewall rules allow it. What should the team change first?
- Add the correct route and confirm return paths for the peer network.
- Fix the private DNS record and VNet zone association for the intended endpoint.
- Inspect proxy upstream health, timeout and target service logs before changing DNS.
- Align switch trunk tags and virtual interface VLAN membership.
Explanation
Correct Answer
A:Successful ACL evaluation cannot compensate for missing forward or return routes. The change should be verified, not just applied: A traceroute and TCP test reach the intended subnet over approved paths.
Incorrect Answers
B:That approach would help when an application can reach a cloud private endpoint by IP but its hostname resolves to an obsolete public address. In this case, successful ACL evaluation cannot compensate for missing forward or return routes.
C:HTTP 502 signals an upstream gateway failure rather than automatically a name-resolution problem. The relevant cloud response here is: Add the correct route and confirm return paths for the peer network.
D:Layer-two VLAN tagging must agree across switch and virtualization boundaries. The relevant cloud response here is: Add the correct route and confirm return paths for the peer network.
Question 662
A web application reaches a local database subnet but cannot contact a peered cloud subnet even though firewall rules allow it. What underlying cloud behavior should the engineer recognize?
- Overlapping IP prefixes prevent unambiguous routing between independently addressed networks.
- Successful ACL evaluation cannot compensate for missing forward or return routes.
- Layer-two VLAN tagging must agree across switch and virtualization boundaries.
- DNS resolution determines target addresses and can fail independently of routing and authentication.
Explanation
Correct Answer
B:The evidence of success is: A traceroute and TCP test reach the intended subnet over approved paths.
Incorrect Answers
A:That approach would help when a newly peered virtual network uses the same CIDR range as an existing application subnet and traffic goes to the wrong location. Check the difference through: Inspect subnet route tables, peering advertisements and asymmetric routing.
C:The alternative is aimed at a different condition: A virtualized host sends tagged storage traffic but its switch uplink is configured as an untagged access port. Successful ACL evaluation cannot compensate for missing forward or return routes.
D:The proposed measure serves a related cloud task, but the present symptom calls for a more specific response. Successful ACL evaluation cannot compensate for missing forward or return routes. Check the difference through: Inspect subnet route tables, peering advertisements and asymmetric routing.
Question 663
During postchange validation at a global distribution company, a web application reaches a local database subnet but cannot contact a peered cloud subnet even though firewall rules allow it. What outcome would prove the intended safeguard works?
- The corrected nodes accept valid tokens and reject expired ones.
- The gateway returns successful requests after backend health recovers and error rate falls.
- A traceroute and TCP test reach the intended subnet over approved paths.
- The application resolves the private address and completes a valid TLS connection.
Explanation
Correct Answer
C:A traceroute and TCP test reach the intended subnet over approved paths. This proves the service behavior rather than just showing a changed configuration. Successful ACL evaluation cannot compensate for missing forward or return routes.
Incorrect Answers
A:That approach would help when a cloud API rejects otherwise valid authentication tokens only on nodes whose clocks are several minutes behind. The required acceptance result is: A traceroute and TCP test reach the intended subnet over approved paths.
B:The gateway returns successful requests after backend health recovers and error rate falls. The relevant cloud response here is: A traceroute and TCP test reach the intended subnet over approved paths.
D:The application resolves the private address and completes a valid TLS connection. The relevant cloud response here is: A traceroute and TCP test reach the intended subnet over approved paths.
Question 664
A review identifies this symptom: a web application reaches a local database subnet but cannot contact a peered cloud subnet even though firewall rules allow it. Which read-only investigation is most useful?
- Inspect lease utilization, subnet mask, reservations and address conflict logs.
- Compare address plans, effective routes and NAT translation feasibility.
- Inspect allowed VLAN list, port mode and observed 802.1Q tags.
- Inspect subnet route tables, peering advertisements and asymmetric routing.
Explanation
Correct Answer
D:Inspect subnet route tables, peering advertisements and asymmetric routing. This distinguishes the relevant dependency before changing cloud resources. Successful ACL evaluation cannot compensate for missing forward or return routes.
Incorrect Answers
A:That approach would help when new VMs fail to receive IPv4 addresses while existing VMs with valid leases remain connected. Inspect subnet route tables, peering advertisements and asymmetric routing.
B:Compare address plans, effective routes and NAT translation feasibility. The relevant cloud response here is: Inspect subnet route tables, peering advertisements and asymmetric routing.
C:Inspect allowed VLAN list, port mode and observed 802.1Q tags. The relevant cloud response here is: Inspect subnet route tables, peering advertisements and asymmetric routing.
Question 665
At a global distribution company, a newly peered virtual network uses the same CIDR range as an existing application subnet and traffic goes to the wrong location. Which response most directly addresses this specific cloud challenge?
- Readdress the conflicting network or design supported translation before peering.
- Increase supported NAT source port capacity or distribute connections across addresses.
- Inspect proxy upstream health, timeout and target service logs before changing DNS.
- Expand the approved DHCP address pool or release stale leases after validating subnet capacity.
Explanation
Correct Answer
A:Overlapping IP prefixes prevent unambiguous routing between independently addressed networks. The change should be verified, not just applied: Test hosts on both sides reach the intended unique network destination.
Incorrect Answers
B:That approach would help when thousands of short outbound API calls fail intermittently although CPU and network bandwidth remain sufficient. In this case, overlapping IP prefixes prevent unambiguous routing between independently addressed networks.
C:HTTP 502 signals an upstream gateway failure rather than automatically a name-resolution problem. The relevant cloud response here is: Readdress the conflicting network or design supported translation before peering.
D:DHCP scope exhaustion affects new address assignments without necessarily dropping active leases. The relevant cloud response here is: Readdress the conflicting network or design supported translation before peering.
Question 666
In a technical review for a regional health provider, a newly peered virtual network uses the same CIDR range as an existing application subnet and traffic goes to the wrong location. Which cloud principle is most relevant?
- DNS resolution determines target addresses and can fail independently of routing and authentication.
- Overlapping IP prefixes prevent unambiguous routing between independently addressed networks.
- DHCP scope exhaustion affects new address assignments without necessarily dropping active leases.
- Layer-two VLAN tagging must agree across switch and virtualization boundaries.
Explanation
Correct Answer
B:The evidence of success is: Test hosts on both sides reach the intended unique network destination.
Incorrect Answers
A:That approach would help when an application can reach a cloud private endpoint by IP but its hostname resolves to an obsolete public address. Check the difference through: Compare address plans, effective routes and NAT translation feasibility.
C:The alternative is aimed at a different condition: New VMs fail to receive IPv4 addresses while existing VMs with valid leases remain connected. Check the difference through: Compare address plans, effective routes and NAT translation feasibility.
D:The proposed measure serves a related cloud task, but the present symptom calls for a more specific response. Overlapping IP prefixes prevent unambiguous routing between independently addressed networks. Check the difference through: Compare address plans, effective routes and NAT translation feasibility.
Question 667
The deployment lead has addressed this condition: a newly peered virtual network uses the same CIDR range as an existing application subnet and traffic goes to the wrong location. Which observation verifies the outcome?
- The gateway returns successful requests after backend health recovers and error rate falls.
- Outbound connection errors stop under the same peak workload without loosening firewall rules.
- Test hosts on both sides reach the intended unique network destination.
- The corrected nodes accept valid tokens and reject expired ones.
Explanation
Correct Answer
C:Test hosts on both sides reach the intended unique network destination. This proves the service behavior rather than just showing a changed configuration. Overlapping IP prefixes prevent unambiguous routing between independently addressed networks.
Incorrect Answers
A:That approach would help when a reverse proxy returns HTTP 502 while application backends are restarting, but DNS resolution succeeds. The required acceptance result is: Test hosts on both sides reach the intended unique network destination.
B:Outbound connection errors stop under the same peak workload without loosening firewall rules. The relevant cloud response here is: Test hosts on both sides reach the intended unique network destination.
D:The corrected nodes accept valid tokens and reject expired ones. The relevant cloud response here is: Test hosts on both sides reach the intended unique network destination.
Question 668
During initial triage, a newly peered virtual network uses the same CIDR range as an existing application subnet and traffic goes to the wrong location. Which check best narrows down the cause?
- Check NTP source, clock drift, token issued-at and not-before values.
- Inspect allowed VLAN list, port mode and observed 802.1Q tags.
- Inspect subnet route tables, peering advertisements and asymmetric routing.
- Compare address plans, effective routes and NAT translation feasibility.
Explanation
Correct Answer
D:Compare address plans, effective routes and NAT translation feasibility. This distinguishes the relevant dependency before changing cloud resources. Overlapping IP prefixes prevent unambiguous routing between independently addressed networks.
Incorrect Answers
A:That approach would help when a cloud API rejects otherwise valid authentication tokens only on nodes whose clocks are several minutes behind. Compare address plans, effective routes and NAT translation feasibility.
B:Inspect allowed VLAN list, port mode and observed 802.1Q tags. The relevant cloud response here is: Compare address plans, effective routes and NAT translation feasibility.
C:Inspect subnet route tables, peering advertisements and asymmetric routing. The relevant cloud response here is: Compare address plans, effective routes and NAT translation feasibility.
Question 669
For the affected cloud environment, a virtualized host sends tagged storage traffic but its switch uplink is configured as an untagged access port. Which remedy best fits the requirement?
- Align switch trunk tags and virtual interface VLAN membership.
- Restore trusted time synchronization and verify token timestamps.
- Add the correct route and confirm return paths for the peer network.
- Readdress the conflicting network or design supported translation before peering.
Explanation
Correct Answer
A:Layer-two VLAN tagging must agree across switch and virtualization boundaries. The change should be verified, not just applied: A test host in the intended VLAN reaches its storage peer without affecting other VLANs.
Incorrect Answers
B:That approach would help when a cloud API rejects otherwise valid authentication tokens only on nodes whose clocks are several minutes behind. In this case, layer-two VLAN tagging must agree across switch and virtualization boundaries.
C:Successful ACL evaluation cannot compensate for missing forward or return routes. The relevant cloud response here is: Align switch trunk tags and virtual interface VLAN membership.
D:Overlapping IP prefixes prevent unambiguous routing between independently addressed networks. The relevant cloud response here is: Align switch trunk tags and virtual interface VLAN membership.
Question 670
The SRE at a regional health provider investigates this condition: a virtualized host sends tagged storage traffic but its switch uplink is configured as an untagged access port. Which explanation best accounts for it?
- DNS resolution determines target addresses and can fail independently of routing and authentication.
- Layer-two VLAN tagging must agree across switch and virtualization boundaries.
- DHCP scope exhaustion affects new address assignments without necessarily dropping active leases.
- Stateful NAT relies on finite translation ports and can fail before bandwidth saturates.
Explanation
Correct Answer
B:The evidence of success is: A test host in the intended VLAN reaches its storage peer without affecting other VLANs.
Incorrect Answers
A:That approach would help when an application can reach a cloud private endpoint by IP but its hostname resolves to an obsolete public address. Check the difference through: Inspect allowed VLAN list, port mode and observed 802.1Q tags.
C:The alternative is aimed at a different condition: New VMs fail to receive IPv4 addresses while existing VMs with valid leases remain connected. Layer-two VLAN tagging must agree across switch and virtualization boundaries.
D:The proposed measure serves a related cloud task, but the present symptom calls for a more specific response. Layer-two VLAN tagging must agree across switch and virtualization boundaries. Check the difference through: Inspect allowed VLAN list, port mode and observed 802.1Q tags.