Community Q&A
CV0-004 — frequently asked questions
Community-vetted answers to 6 common questions about this exam, each traced back to a specific practice question.
Questions from real practice questions
Each Q&A comes from a specific question — follow the link for the full analysisTroubleshooting Cross-Subnet Connectivity via Routing Tables
Why not the firewall if it blocks connections?
Firewalls only inspect traffic that arrives at the interface. If the routing table doesn't have a path to send the packet, the packet is dropped locally before reaching the firewall.
Does a default route always solve cross-subnet issues?
Not always. In complex cloud environments or specific exam scenarios, explicit routes may be required for security zoning or policy-based routing, making the default route insufficient or non-existent for the specific segment.
Troubleshooting Compromised Cloud Credentials
Why isn't tracking via WAF the first step?
Tracking is investigative; the priority is resolving the user's access issue by securing and resetting the compromised account.
Does restricting access solve the compromise?
No, restriction limits scope but doesn't remove the compromised credentials. A reset is necessary to eliminate the threat vector.
Calculating Storage IOPS Requirements
Why is latency not used to calculate IOPS?
Latency measures delay, not volume. IOPS is a count of operations derived from throughput divided by block size.
What is the difference between IOPS and throughput?
IOPS counts operations/sec, while throughput measures bytes/sec. They are linked by the average block size.