CompTIA CloudNetX Certification - CNX-001 Exam Practice Test

An organization has centralized logging capability at the on-premises data center and wants a solution that can consolidate logging from deployed cloud workloads. The organization would like to automate the detection and alerting mechanism. Which of the following best meets the requirements?
Correct Answer: C
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).
A company is transitioning from on-premises to a hybrid environment. Due to regulatory standards, the company needs to achieve a high level of reliability and high availability for the connection between its data center and the cloud provider. Which of the following solutions best meets the requirements?
Correct Answer: C
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).
A network engineer is setting up guest access on a Wi-Fi network. After a recent network analysis, the engineer discovered that a user could access the guest network and attack the corporate network, since the networks share the same VLAN. Which of the following should the engineer do to prevent an attack like this one from happening?
Correct Answer: B
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).
A customer asks a MSP to propose a ZTA (Zero Trust Architecture) design for its globally distributed remote workforce. Given the following requirements:
* Authentication should be provided through the customer's SAML identity provider.
* Access should not be allowed from countries where the business does not operate.
* Secondary authentication should be added to the workflow to allow for passkeys.
* Changes to the user's device posture and hygiene should require reauthentication into the network.
* Access to the network should only be allowed to originate from corporate-owned devices.
Which of the following solutions should the MSP recommend to meet the requirements?
Correct Answer: B
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).
A partner is migrating a client from on-premises to a hybrid cloud. Given the following project status information, the initial project timeline estimates need to be revised:

(Refer to image: Phases like Discovery, Design, Implementation, and Knowledge Transfer have all exceeded their initial estimated timelines.) Which of the following documents needs to be revised to best reflect the current status of the project?
Correct Answer: D
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).
A network administrator needs to resolve connectivity issues in a hybrid cloud setup. Workstations and VMs are not able to access Application A. Workstations are able to access Server B.
INSTRUCTIONS
Click on workstations, VMs, firewalls, and NSGs to troubleshoot and gather information. Type help in the terminal to view a list of available commands.
Select the appropriate device(s) requiring remediation and identify the associated issue(s).
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.











Correct Answer:
See explanation below.
Explanation:

Firewalls # VPN tunnel down
The IPsec tunnel between on-prem Firewall 1 and cloud Firewall 2 (ipip0/ipip2) is down, so no traffic can traverse to the cloud.
Application NSG # Misconfigured rule
There's a "block" rule for 10.3.9.0/24 # 192.2.1.0/24, preventing legitimate on-prem clients from reaching Application A.
A company has a 40Gbps network that uses a network tap to inspect the traffic using an IDS. The IDS usually performs normally except when the servers are downloading patches from their local update repository
10.10.10.139 using HTTPS. During the patch windows, the IDS cannothandle the extra load and drops a significant number of packets. Which of the following would allow a network engineer to prevent this issue without compromising the network visibility?
Correct Answer: A
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).
New devices were deployed on a network and need to be hardened.
INSTRUCTIONS
Use the drop-down menus to define the appliance-hardening techniques that provide themostsecure solution.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
Correct Answer:

Explanation:
C:\Users\Waqas Shahid\Desktop\Mudassir\Untitled.jpg
After a malicious actor used an open port in a company's lobby, a network architect needs to enhance network security. The solution must enable:
* Security posture check
* Auto remediation capabilities
* Network isolation
* Device and user authentication
Which of the following technologies best meets these requirements?
Correct Answer: B
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).
0
0
0
0