CNX-001 Exam Questions
89 real CNX-001 exam questions with expert-verified answers and explanations. Page 2 of 2.
- Question #52Cloud Network Security
A network engineer is setting up guest access on a Wi-Fi network. After a recent network analysis, the engineer discovered that a user could access the guest network and attack the...
Wireless SecurityGuest NetworksClient IsolationLayer 2 Security - Question #56Cloud Network Security
Which of the following is an effective mitigation against Distributed Denial-of-Service (DDoS) attacks in a cloud environment?
DDoSCloud SecurityMitigationCloud Protection Services - Question #57Cloud Network Operations and Troubleshooting
A network engineer is testing the network throughput between Linux servers in a hybrid environment. The engineer needs to measure bandwidth between the servers on premises and serv...
Network throughputBandwidth measurementiperfNetwork testing tools - Question #58Cloud Network Security
You are reviewing the configuration of a recently deployed intrusion prevention system (IPS). You must ensure that it follows hardened security practices. Which configurations shou...
Security HardeningRemote Management SecurityCentralized AuthenticationIPS Configuration - Question #59Cloud Networking Fundamentals
As part of a project to modernize a sports stadium and improve the customer service experience for fans, the stadium owners want to implement a new wireless system. Currently, all...
Wireless technologiesLocation trackingBluetooth Low EnergyIndoor Positioning Systems - Question #60Cloud Network Operations and Troubleshooting
A company is experiencing Wi-Fi performance issues. Three Wi-Fi networks are available, each running on the 2.4 GHz band and on the same channel. Connecting to each Wi-Fi network y...
Wi-Fi2.4 GHzChannel planningCo-channel interference - Question #61Cloud Network Security
A company hosts a cloud-based e-commerce application and only wants the application accessed from certain locations. The network team configures a cloud firewall with WAF enabled,...
Geo-restrictionAccess ControlCloud FirewallNetwork Security Policies - Question #62Cloud Network Security
A network architect must ensure only certain departments can access specific resources while on premises. Those same users cannot be allowed to access those resources once they hav...
GeofencingLocation-based access controlNetwork access controlOn-premises security - Question #63Cloud Network Security
A security architect needs to increase the security controls around computer hardware installations. The requirements are: - Auditable access logs to computer rooms - Alerts for un...
Physical SecurityAccess ControlSecurity MonitoringAuditing - Question #64Cloud Network Security
A network security engineer must secure a web application running on virtual machines in a public cloud. The virtual machines are behind an application load balancer. Which of the...
Web Application SecurityCloud VM SecurityNetwork Security GroupsWAF - Question #65Cloud Network Security
A company is expanding operations and opening a new facility. The executive leadership team decides to purchase an insurance policy that will cover the cost of rebuilding the facil...
Risk ManagementRisk TransferenceInsuranceDisaster Preparedness - Question #66Cloud Network Security
A network engineer is establishing a wireless network for handheld inventory scanners in a manufacturing company's warehouse. The engineer needs an authentication mechanism for the...
RADIUSWi-Fi AuthenticationActive DirectoryNetwork Access Control - Question #67Cloud Network Operations and Troubleshooting
A company is migrating an application to the cloud for modernization. The engineer needs to provide dependencies between application and database tiers in the environment. Which of...
Cloud MigrationApplication DependenciesCMDBConfiguration Management - Question #68Cloud Network Operations and Troubleshooting
A network administrator recently deployed new Wi-Fi 6E access points in an office and enabled 6GHz coverage. Users report that when they are connected to the new 6GHz SSID, the per...
Wi-Fi 6E6GHz TroubleshootingRF InterferenceSpectrum Analyzer - Question #69Cloud Network Design
A SaaS company is launching a new product based in a cloud environment. The new product will be provided as an API and should not be exposed to the internet. Which of the following...
Private EndpointAPI ConnectivityNetwork SecurityVPC Networking - Question #70Cloud Network Security
A network administrator is configuring firewall rules to lock down the network from outside attacks. Which of the following should the administrator configure to create the most st...
Firewall rulesNetwork security policyAllow ListSecurity best practices - Question #71Cloud Network Security
A network engineer is installing new switches in the data center to replace existing infrastructure. The previous network hardware had administrative interfaces that were plugged i...
Network securityManagement plane securityOut-of-band managementNetwork segmentation - Question #72Cloud Network Security
A company operates in a hybrid cloud environment and needs security solutions to monitor and protect services. Which of the following would best protect the environment?
Hybrid Cloud SecuritySecurity FrameworksCIS BenchmarksCloud Protection - Question #73Cloud Network Operations and Troubleshooting
What is the MOST likely cause of increased latency and packet retransmissions in a high- bandwidth, low-latency environment?
Network TroubleshootingDuplex MismatchPacket RetransmissionsLatency - Question #74Cloud Network Security
Why might a network admin receive failed login attempts from unknown IP addresses on port 22?
Brute-force attackSSHNetwork securityAuthentication - Question #75Cloud Network Security
End users are getting certificate errors and are unable to connect to an application deployed in a cloud. The application requires HTTPS connection. A network solution architect fi...
HTTPSSSL InspectionCertificate ManagementFirewall Troubleshooting - Question #76Cloud Network Design
A large commercial enterprise that runs a global video streaming platform recently acquired a small business that serves customers in a geographic area with limited connectivity to...
Content Delivery Network (CDN)Streaming ArchitectureNetwork PerformanceEdge Caching - Question #77Cloud Network Design
A company is transitioning from on premises to a hybrid environment. Due to regulatory standards, the company needs to achieve a high level of reliability and high availability for...
Hybrid Cloud ConnectivityDirect ConnectHigh AvailabilityNetwork Redundancy - Question #78Cloud Network Security
A network architect is designing a solution to secure the organization's applications based on the security policy. The requirements are: - Users must authenticate using one set of...
Single Sign-OnConditional AccessIdentity and Access ManagementCloud Security Policy - Question #79Cloud Network Operations and Troubleshooting
A cloud architect needs to change the network configuration at a company that uses GitOps to document and implement network changes. The Git repository uses main as the default bra...
GitOpsVersion ControlGit BranchingChange Management - Question #80Cloud Network Design
A network architect must design a new branch network that meets the following requirements: - No single point of failure - Clients cannot be impacted by changes to the underlying m...
Network TopologyMesh NetworkFault ToleranceNetwork Design Principles - Question #81Cloud Network Security
An administrator logged in to a cloud account on a shared machine but forgot to log out after the session ended. Which of the following types of security threats does this action p...
Security ThreatsOn-path AttackCloud SecuritySession Management - Question #82Cloud Network Operations and Troubleshooting
A network engineer suspects high latency in traffic between edge routers and cloud gateways during business hours. Which tools or techniques should be used to validate the issue? (...
Network TroubleshootingLatency MonitoringNetwork Performance MonitoringCloud Operations - Question #83Cloud Network Operations and Troubleshooting
When analyzing traceroute output, what does a consistent timeout ("* * *") at a specific hop indicate?
Traceroute analysisICMPNetwork troubleshootingFirewall rules - Question #84Cloud Network Security
A company that hosts its website in a private data center receives reports that the company's website is now pointing to a website with offensive material. No changes were made to...
BGP HijackNetwork SecurityRouting AttacksExternal Connectivity - Question #85Cloud Network Design
An organization uses a managed service provider for its network infrastructure. The organization decides to switch to another provider and implement the latest network technologies...
Network documentationNetwork transformationNetwork architectureBaselines - Question #86Cloud Networking Fundamentals
A company is expanding its network and needs to ensure improved stability and reliability. The proposed solution must fulfill the following requirements: - Detection and prevention...
Spanning Tree ProtocolNetwork loopsLayer 2 switchingNetwork redundancy - Question #87Cloud Network Implementation
A network engineer needs to implement a cloud native solution. The solution must allow the recording of network conversation metadata of the host and appliances attached to a VPC....
Cloud NetworkingNetwork MonitoringFlow LogsMetadata Collection - Question #88Cloud Network Operations and Troubleshooting
Throughout the day, a sales team experiences videoconference performance issues when the accounting department runs reports. Which of the following is the best solution?
Quality of Service (QoS)Network performanceTraffic prioritizationNetwork congestion - Question #89Cloud Network Design
A network architect needs to design a new network to connect multiple private data centers. The network must: - Provide privacy for all traffic between locations. - Use preexisting...
SD-WANWAN architectureTraffic steeringNetwork design principles - Question #90Cloud Network Operations and Troubleshooting
A network administrator is troubleshooting a user's workstation that is unable to connect to the company network. The results of commands the administrator runs on the workstation...
IP AddressingNetwork TroubleshootingAPIPAIP Conflict - Question #91Cloud Network Operations and Troubleshooting
A user reports an issue connecting to a database server. The front-end application for this database is hosted on the company's web server. The network engineer has changed the net...
SubnettingIP AddressingNetwork TroubleshootingServer Network Configuration - Question #93Cloud Network Operations and Troubleshooting
A company has a 40Gbps network that uses a network tap to inspect the traffic using an IDS. The IDS usually performs normally except when the servers are downloading patches from t...
IDS PerformancePacket FilteringNetwork TapsTraffic Management - Question #94Cloud Network Implementation
A cloud engineer is planning to build VMs in a public cloud environment for a cloud migration. A cloud security policy restricts access to the console for new VM builds. The engine...
Infrastructure as CodeVM DeploymentNetwork ConfigurationAutomation