Free CNX-001 Exam Dumps Preview

A network architect is designing a solution to secure the organization's applications based on the security policy. The requirements are:

Users must authenticate using one set of credentials. External users must be located in authorized sites.
Session timeouts must be enforced.
Network access requirements should be changed as needed.

Which of the following best meet these requirements? (Choose two.)

A call center company provides its services through a VoIP infrastructure. Recently, the call center set up an application to manage its documents on a cloud application. The application is causing recurring audio losses for VoIP callers. The network administrator needs to fix the issue with the least expensive solution.

Which of the following is the best approach?

A company hosts a cloud-based e-commerce application and only wants the application accessed from certain locations. The network team configures a cloud firewall with WAF enabled, but users can access the application globally.

Which of the following should the network team do?

An administrator needs to add a device to the allow list in order to bypass user authentication of an AAA system. The administrator uses MAC filtering and needs to discover the device's MAC address to accomplish this task. The device receives an IP address from DHCP, but the IP address changes daily.

Which of the following commands should the administrator run on the device to locate its MAC address?

A cloud network engineer needs to enable network flow analysis in the VPC so headers and payload of captured data can be inspected.

Which of the following should the engineer use for this task?

Throughout the day, a sales team experiences videoconference performance issues when the accounting department runs reports.

Which of the following is the best solution?

A network administrator recently deployed new Wi-Fi 6E access points in an office and enabled 6GHz coverage. Users report that when they are connected to the new 6GHz SSID, the performance is worse than the 5GHz SSID. The network administrator suspects that there is a source of 6GHz interference in the office.
Using the troubleshooting methodology, which of the following actions should the network administrator do next?

A large commercial enterprise that runs a global video streaming platform recently acquired a small business that serves customers in a geographic area with limited connectivity to the global telecommunications infrastructure. The executive leadership team issued a mandate to deliver the highest possible video streaming quality to all customers around the world.

Which of the following solutions should the enterprise architect suggest to meet the requirements?

Application development team users are having issues accessing the database server within the cloud environment. All other users are able to use SSH to access this server without issues. The network architect reviews the following information to troubleshoot the issue:

Traceroute output from an application developer's machine with the assigned IP 192.168.2.7:

Application development gateway: 192.168.2.1/24
Server segment gateway: 192.168.1.1/24
Database server: 192.168.1.9
Application developer machine IP: 192.168.2.7
Traceroute ends at hop 4: 192.168.4.1 (server segment firewall), then times out

Which of the following is the most likely cause of the issue?

HOTSPOT

You are designing a campus network with a three-tier hierarchy and need to ensure secure connectivity between locations and traveling employees.

INSTRUCTIONS

Review the command output by clicking on the server, laptops, and workstations on the network.

Use the drop-down menus to determine the appropriate technology and label for each layer on the diagram. Options may only be used once.

Click on the magnifying glass to make additional configuration changes.

If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

A network security engineer must secure a web application running on virtual machines in a public cloud.

The virtual machines are behind an application load balancer.

Which of the following technologies should the engineer use to secure the virtual machines? (Choose two.)

A customer asks a MSP to propose a ZTA (Zero Trust Architecture) design for its globally distributed remote workforce. Given the following requirements:

Authentication should be provided through the customer's SAML identity provider. Access should not be allowed from countries where the business does not operate.
Secondary authentication should be added to the workflow to allow for passkeys. Changes to the user's device posture and hygiene should require reauthentication into the network.
Access to the network should only be allowed to originate from corporate-owned devices.

Which of the following solutions should the MSP recommend to meet the requirements?

A company deployed new applications in the cloud and configured a site-to-site VPN to connect the internal data center with the cloud. The IT team wants the internal servers to connect to those applications without using public IP addresses.

Which of the following is the best solution?