Objective 1.3

N10-009

Summarize cloud concepts and connectivity options.

Objective 1.3 sits in Networking Concepts, which carries 23% of the Network+ exam. The questions below are original, written from the official objective title above, and each explanation cites the CompTIA page it rests on.

Objective title verbatim from the official objectives. CompTIA exam page ↗

A worked example

Shown solved, with the whole explanation open: this is what every question here carries.

1-3Networking Concepts

A network administrator deploys virtual machines in a virtual network that must reach the internet but must not accept unsolicited inbound connections. Which connectivity option satisfies this requirement?

A NAT gateway attached to the virtual network's subnetCorrect · your answerCorrect: a NAT gateway provides outbound-only connectivity without exposing resources to inbound traffic.
A public IP address assigned directly to each virtual machineA public IP address on each VM would allow inbound connections, violating the no-inbound requirement.
A site-to-site VPN gateway connecting to the on-premises networkA site-to-site VPN gateway links an on-premises network to the virtual network, not general internet access.
An ExpressRoute circuit connecting to the on-premises networkAn ExpressRoute circuit is a private link to on-premises infrastructure, not a path to the public internet.

Correct.

Checked against cloudflare.com, July 2026

Concept

Cloud gateways manage how resources in a virtual network reach and are reached from the internet, with different gateway types offering outbound-only or bidirectional access.

Why A

A NAT gateway lets resources initiate outbound internet connections while remaining unreachable from unsolicited inbound traffic, matching the stated requirement exactly.

Source

All resources in a virtual network can communicate outbound with the internet, by default. You can also use a public IP address, NAT gateway, or public load balancer to manage your outbound connections. You can communicate inbound with a resource by assigning a public IP address or a public load balancer.

Microsoft Learn: Azure Virtual Network overview, checked July 2026
#cloud-gateways#nat-gateway#connectivity-options#vpc

Now you: objective 1.3 questions

No account needed. The explanation opens when you answer.

Sample question 1 of 3

1-3Networking Concepts

A cloud engineer needs two virtual networks located in different regions to communicate directly with each other, without routing traffic through an on-premises VPN device. Which connectivity option should be configured?

Sample question 2 of 3

1-3Networking Concepts

A developer working from a home office must test code against resources inside a company virtual network using only a personal laptop, without configuring any on-premises VPN hardware. Which connectivity option should be used?

Sample question 3 of 3

1-3Networking Concepts

A network engineer already filters subnet traffic by source IP and port using network security groups but must also add a virtual firewall that performs deep packet inspection inside the virtual network. Which resource should be deployed?

Full Network+ question bank coming

We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.

Read the sources

These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.

More objectives in Networking Concepts