Free CNX-001: CompTIA CloudNetX Exam Questions and Answers

A network administrator is troubleshooting an outage at a remote site. The administrator examines the logs and determines that one of the internet links at the site appears to be down. After the service provider confirms this information, the administrator fails over traffic to the backup link. Which of the following should the administrator do next?

• AA. Document the lessons learned.
• BB. Establish a plan of action.
• CC. Identify the problem.
• DD. Verify full system functionality.

An administrator must ensure that credit card numbers are not contained in any outside messaging or file transfers from the organization. Which of the following controls meets this requirement?

• AA. Intrusion detection system
• BB. Egress filtering
• CC. Data loss prevention
• DD. Encryption in transit

A network administrator receives a ticket from one of the company's offices about video calls that work normally for one minute and then get very choppy. The network administrator pings the video server from that site to ensure that it is reachable: Which of the following ismostlikely the cause of the video call issue?

• AA. Throughput
• BB. Jitter
• CC. Latency
• DD. Loss

A network engineer adds a large group of servers to a screened subnet and configures them to use IPv6 only. The servers need to seamlessly communicate with IPv4 serverson the internal networks. Which of the following actions is the best way to achieve this goal?

• AA. Add IPv6 to the network cards on the internal servers so they can communicate with the screened subnet.
• BB. Set up a bridge between the screened subnet and internal networks to handle the conversion.
• CC. Change the servers in the screened subnet from IPv6 addresses to IPv4 addresses.
• DD. Implement NAT64 on the router between the screened subnet and the internal network.

A network architect is designing a solution to place network core equipment in a rack inside a data center. This equipment is crucial to the enterprise and must be as secure as possible to minimize the chance that anyone could connect directly to the network core. The current security setup is: In a locked building that requires sign in with a guard and identification check. In a locked data center accessible by a proximity badge and fingerprint scanner. In a locked cabinet that requires the security guard to call the Chief Information Security Officer (CISO) to get permission to provide the key. Which of the following additional measures should the architect recommend to make this equipment more secure?

• AA. Make all engineers with access to the data center sign a statement of work.
• BB. Set up a video surveillance system that has cameras focused on the cabinet.
• CC. Have the CISO accompany any network engineer that needs to do work in this cabinet.
• DD. Require anyone entering the data center for any reason to undergo a background check.

A cloud architect must recommend an architecture approach for a new medical application that requires the lowest downtime possible. Which of the following is the best application deployment strategy given the high-availability requirement?

• AA. Two different availability zones (per region) using an active-active topology in two different regions
• BB. Four different availability zones using an active-passive topology in a single region
• CC. Four different availability zones using an active-active topology in a single region
• DD. Two different availability zones (per region) using an active-passive topology in two different regions

A network administrator is configuring firewall rules to lock down the network from outside attacks. Which of the following should the administrator configure to create the most strict set of rules?

• AA. URL filtering
• BB. File blocking
• CC. Network security group
• DD. Allow List

An organization's Chief Technical Officer is concerned that changes to the network using IaC are causing unscheduled outages. Which of the following best mitigates this risk?

• AA. Making code changes to the master branch
• BB. Enforcing code review of the change by the author
• CC. Forking the code repository before making changes
• DD. Adding review/approval steps to the CI/CD pipelines

A network security engineer must secure a web application running on virtual machines in a public cloud. The virtual machines are behind an application load balancer. Which of the following technologies should the engineer use to secure the virtual machines? (Choose two.)

Select 2 answers.

• AA. CDN
• BB. DLP
• CC. IDS
• DD. WAF
• EE. SIEM
• FF. NSG

An organization with an on-premises data center is adopting additional cloud-based solutions. The organization wants to keep communication secure between remote employees' devices and workloads. Which of the following ZTA featuresbestachieves this goal?

• AA. Secure service edge
• BB. Cloud access security broker
• CC. Principle of least privilege
• DD. Identity as the perimeter