CompTIA CNX-001 Online Practice Questions and Exam Preparation

CompTIA CNX-001 Online Questions & Answers

• Question 1:

  An organization's Chief Technical Officer is concerned that changes to the network using IaC are causing unscheduled outages. Which of the following best mitigates this risk?

  A. Making code changes to the master branch
  B. Enforcing code review of the change by the author
  C. Forking the code repository before making changes
  D. Adding review/approval steps to the CI/CD pipelines
  D. Adding review/approval steps to the CI/CD pipelines

• Question 2:

  A company hosts its applications on the cloud and is expanding its business to Europe. Thecompany must comply with General Data Protection Regulation (GDPR) to limit European customers' access to data. The network team configures the firewall rules but finds that some customers in the United States can access data hosted in Europe. Which of the following is the best option for the network team to configure?

  A. SASE
  B. Network security groups
  C. CDN
  D. Geofencing rule
  D. Geofencing rule

• Question 3:

  A network security administrator needs to set up a solution to:

  Gather all data from log files in a single location.

  Correlate the data to generate alerts.

  Which of the following should the administrator implement?

  A. Syslog
  B. Event log monitoring
  C. Log management
  D. SIEM
  D. SIEM

• Question 4:

  An application is hosted on a three-node cluster in which each server has identical compute and network performance specifications. A fourth node is scheduled to be added to the cluster with three times the performance as any one of the preexisting nodes. The network architect wants to ensure that the new node gets the same approximate number of requests as all of the others combined. Which of the following load-balancing methodologies should the network architect recommend?

  A. Round-robin
  B. Load-based
  C. Least connections
  D. Weighted
  D. Weighted

• Question 5:

  After a malicious actor used an open port in a company's lobby, a network architect needs to enhance network security. The solution must enable:

  Security posture check Auto remediation capabilities Network isolation Device and user authentication

  Which of the following technologies best meets these requirements?

  A. IPS
  B. Microsegmentation
  C. 802.1X
  D. NAC
  D. NAC

• Question 6:

  An organization has centralized logging capability at the on-premises data center and wants a solution that can consolidate logging from deployed cloud workloads. The organization would like to automate the detection and alerting mechanism. Which of the following best meets the requirements?

  A. IDS/IPS
  B. SIEM
  C. Data lake
  D. Syslog
  B. SIEM

• Question 7:

  Server A (10.2.3.9) needs to access Server B (10.2.2.7) within the cloud environment since theyare segmented into different network sections. All external inbound traffic must be blocked to those servers. Which of the following need to be configured to appropriately secure the cloud network? (Choose two.)

  A. Network security group rule: allow 10.2.3.9 to 10.2.2.7
  B. Network security group rule: allow 10.2.0.0/16 to 0.0.0.0/0
  C. Network security group rule: deny 0.0.0.0/0 to 10.2.0.0/16
  D. Firewall rule: deny 10.2.0.0/16 to 0.0.0.0/0
  E. Firewall rule: allow 10.2.0.0/16 to 0.0.0.0/0
  F. Network security group rule: deny 10.2.0.0/16 to 0.0.0.0/0
  A. Network security group rule: allow 10.2.3.9 to 10.2.2.7
  C. Network security group rule: deny 0.0.0.0/0 to 10.2.0.0/16

• Question 8:

  Which of the following helps the security of the network design to align with industry best practices?

  A. Reference architectures
  B. Licensing agreement
  C. Service-level agreement
  D. Memorandum of understanding
  A. Reference architectures

• Question 9:

  A network administrator is configuring firewall rules to lock down the network from outside attacks. Which of the following should the administrator configure to create the most strict set of rules?

  A. URL filtering
  B. File blocking
  C. Network security group
  D. Allow List
  D. Allow List

• Question 10:

  A company is experiencing numerous network issues and decides to expand its support team. The new junior employees will need to be onboarded in the shortest time possible and be able to troubleshoot issues with minimal assistance. Which of the following should the company create to achieve this goal?

  A. Statement of work documenting what each junior employee should do when troubleshooting
  B. Clearly documented runbooks for networking issues and knowledge base articles
  C. Physical and logical network diagrams of the entire networking infrastructure
  D. A mentor program for guiding each junior employee until they are familiar with the networking infrastructure
  B. Clearly documented runbooks for networking issues and knowledge base articles