CompTIA Cloud+ Networking and Connectivity 3

Question 1

A cloud administrator notices high latency for users accessing an application from a specific geographic region. What is the FIRST step to diagnose this issue?

Accepted Answer

Use network monitoring and tracing tools to identify where in the path the bottleneck occurs

Answer

Restart all instances in that region immediately

Answer

Increase the load balancer bandwidth tier

Answer

Migrate the application workload to a different cloud provider

Question 2

Which cloud networking component evaluates rules in ascending numerical order to control traffic at the subnet boundary?

Accepted Answer

Network ACL

Answer

Security Group

Answer

Route Table

Answer

Internet Gateway

Question 3

What information is contained in a cloud VPC route table entry?

Accepted Answer

Destination CIDR blocks and their corresponding next-hop targets

Answer

DNS records and hostnames for all instances in the VPC

Answer

Inbound and outbound access control rules by port

Answer

SSL/TLS certificates for encrypted endpoint connections

Question 4

A company experiences intermittent connectivity between their on-premises network and a cloud VPC. The VPN tunnel status shows as active. What should the engineer check NEXT?

Accepted Answer

Verify BGP routing tables and route propagation settings on both ends

Answer

Delete and recreate the VPN connection from scratch

Answer

Upgrade the VPN gateway to a higher-throughput tier

Answer

Replace the VPN connection with a Direct Connect circuit immediately

Question 5

Which metric is MOST important to monitor for evaluating the health and performance of a cloud load balancer?

Accepted Answer

Target response time and request error rate

Answer

CPU utilization of the load balancer control plane

Answer

Number of security group rules attached to the load balancer

Answer

Total number of instances currently registered as targets

Question 6

A cloud security team needs to capture all network traffic metadata flowing through a VPC for compliance auditing WITHOUT impacting production performance. Which solution is BEST?

Accepted Answer

Enable VPC Flow Logs to capture IP traffic metadata

Answer

Install a packet sniffer agent on every instance

Answer

Route all VPC traffic through a centralized proxy server

Answer

Enable detailed monitoring mode on all security groups

Question 7

A cloud engineer is troubleshooting why instances in a private subnet cannot reach the internet even though a NAT Gateway exists in the public subnet. What is the MOST likely cause?

Accepted Answer

The private subnet route table lacks a route pointing 0.0.0.0/0 to the NAT Gateway

Answer

The NAT Gateway does not have an Elastic IP address assigned

Answer

The security group on the NAT Gateway is blocking outbound traffic

Answer

The private subnet CIDR overlaps with the public subnet CIDR