Free COMPTIA Cloud+ CV0-004 Actual Exam Questions - Question 14 Discussion
A company has decided to scale its e-commerce application from its corporate datacenter to a commercial cloud provider to meet an anticipated increase in demand during an upcoming holiday. The majority of the application load takes place on the application server under normal conditions. For this reason, the company decides to deploy additional application servers into a commercial cloud provider using the on-premises orchestration engine that installs and configures common software and network configurations. The remote computing environment is connected to the on-premises datacenter via a site-to-site IPSec tunnel. The external DNS provider has been configured to use weighted round-robin routing to load balance connections from the Internet.
During testing, the company discovers that only 20% of connections completed successfully.
INSTRUCTIONS
Review the network architecture and supporting documents and fulfill these requirements:
Part 1:
Analyze the configuration of the following components: DNS, Firewall 1, Firewall 2, Router 1, Router
2, VPN and Orchestrator Server.
Identify the problematic device(s).
Part 2:
Identify the correct options to provide adequate configuration for hybrid cloud architecture.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All
button.
Part 1:
Cloud Hybrid Network Diagram
Part 2:
Only select a maximum of TWO options from the multiple choice question
Firewall 2 looks suspicious since it might not allow return traffic from the cloud servers. Also, Router 2 probably needs updated routes for the new app servers; static routes could be causing dropped packets.
Are we sure both firewalls are correctly allowing traffic from the cloud app servers back through the VPN? Seems like a common spot to block return traffic. Also, does the VPN tunnel support bi-directional routing properly? The weighted round-robin DNS should distribute requests evenly but if only 20% succeed, maybe routing or firewall rules on either side are preventing some connections. Do we have logs showing where packets get dropped? That’d help narrow it down before picking options.