CNX-001 Engineer Practice Questions

A network engineer adds a large group of servers to a screened subnet and configures them to use IPv6 only. The servers need to seamlessly communicate with IPv4 serverson the internal networks. Which of the following actions is the best way to achieve this goal?

• AA. Add IPv6 to the network cards on the internal servers so they can communicate with the screened subnet.
• BB. Set up a bridge between the screened subnet and internal networks to handle the conversion.
• CC. Change the servers in the screened subnet from IPv6 addresses to IPv4 addresses.
• DD. Implement NAT64 on the router between the screened subnet and the internal network.

A network security engineer must secure a web application running on virtual machines in a public cloud. The virtual machines are behind an application load balancer. Which of the following technologies should the engineer use to secure the virtual machines? (Choose two.)

Select 2 answers.

• AA. CDN
• BB. DLP
• CC. IDS
• DD. WAF
• EE. SIEM
• FF. NSG