Is the CNX-001 practice exam free?

Yes. ExamCademy offers all 84 CNX-001 practice questions for free with a registered account. No payment needed. Optional supporter features add AI explanations and spaced repetition study tools.

How accurate are the CNX-001 practice questions?

All CNX-001 questions are community-created and reviewed by moderators to align with CompTIA's published exam objectives. The community continuously reports and fixes issues to keep content accurate and up to date.

How should I study for the CNX-001 exam?

Start by browsing practice questions to identify weak areas. Use spaced repetition (Learn Mode) to focus study time on topics you struggle with. Combine practice questions with official CompTIA documentation and hands-on experience for best results.

CNX-001 Practice Exam — Free 84+ Questions

84Practice Questions

3Study Modes

FreeTo Get Started

Topic:Sort:

Question 1

Network architecture design

Question 2

Network troubleshooting

Question 3

Network security

Question 4

Network security

Question 5

Network security

Question 6

Network security

Question 7

Network security

Question 8

Network security

Question 9

Network architecture design

Question 10

Network troubleshooting

Question 11

Network security

Question 12

Network security

Question 13

Network security

Question 14

Network security

Question 15

Network operations, monitoring, and performance

Question 16

Network troubleshooting

Question 17

Network security

Question 18

Network troubleshooting

Question 19

Network security

Question 20

Network architecture design

Question 21

Network troubleshooting

Question 22

Network architecture design

Question 23

Network security

Question 24

Network architecture design

Question 25

Network architecture design

Page 1 of 4 • Questions 1-25 of 84

1 2 3 4

→

Know a question that should be here? Contribute to this exam

As part of a project to modernize a sports stadium and improve the customer service experience for fans, the stadium owners want to implement a new wireless system. Currently, all tickets are electronic and managed by the stadium mobile application. The new solution is required to allow location tracking precision within 5ft (1.5m) of fans to deliver the following services:

Emergency/security assistance -

Mobile food order -

Event special effects -
Raffle winner location displayed on the giant stadium screen
Which of the following technologies enables location tracking?

A SSID
B BLE
C NFC
D IoT

A company is experiencing Wi-Fi performance issues. Three Wi-Fi networks are available, each running on the 2.4 GHz band and on the same channel. Connecting to each Wi-Fi network yields slow performance. Which of the following channels should the networks be configured to?

A Channel 1, Channel 2, and Channel 3
B Channel 2, Channel 4, and Channel 9
C Channel 1, Channel 6, and Channel 11
D Channel 3, Channel 5, and Channel 10

A company hosts a cloud-based e-commerce application and only wants the application accessed from certain locations. The network team configures a cloud firewall with WAF enabled, but users can access the application globally. Which of the following should the network team do?

A Reconfigure WAF rules.
B Configure a NAT gateway.
C Implement a CDN.
D Configure geo-restriction.

A network architect must ensure only certain departments can access specific resources while on premises. Those same users cannot be allowed to access those resources once they have left campus. Which of the following would ensure access is provided according to these requirements?

A Enabling MFA for only those users within the departments needing access
B Configuring geofencing with the IPs of the resources
C Configuring UEBA to monitor all access to those resources during non-business hours
D Implementing a PKI-based authentication system to ensure access

A security architect needs to increase the security controls around computer hardware installations. The requirements are:
Auditable access logs to computer rooms
Alerts for unauthorized access attempts
Remote visibility to the inside of computer rooms
Which of the following controls best meet these requirements? (Choose two.)

A Video surveillance
B NFC access cards
C Motion sensors
D Locks and keys
E Security patrols
F Automated lighting

A network security engineer must secure a web application running on virtual machines in a public cloud. The virtual machines are behind an application load balancer. Which of the following technologies should the engineer use to secure the virtual machines? (Choose two.)

A CDN
B DLP
C IDS
D WAF
E SIEM
F NSG

A company is expanding operations and opening a new facility. The executive leadership team decides to purchase an insurance policy that will cover the cost of rebuilding the facility in case of a natural disaster. Which of the following describes the team's decision?

A Business continuity
B Disaster recovery
C Risk transference
D Memorandum of understanding

A network engineer is establishing a wireless network for handheld inventory scanners in a manufacturing company's warehouse. The engineer needs an authentication mechanism for these scanners that uses the Wi-Fi network and works with the company's Active Directory. The business requires that the solution authenticate the users and authorize the scanners. Which of the following provides the best solution for authentication and authorization?

A TACACS+
B RADIUS
C LDAP
D PKI

A company is migrating an application to the cloud for modernization. The engineer needs to provide dependencies between application and database tiers in the environment. Which of the following should the engineer reference in order to best meet this requirement?

A Internal knowledge base article
B CMDB
C WBS
D Diagram of physical server locations
E SOW

A network administrator recently deployed new Wi-Fi 6E access points in an office and enabled 6GHz coverage. Users report that when they are connected to the new 6GHz SSID, the performance is worse than the 5GHz SSID. The network administrator suspects that there is a source of 6GHz interference in the office. Using the troubleshooting methodology, which of the following actions should the network administrator do next?

A Test to see if the changes have improved network performance.
B Use a spectrum analyzer and check the 6GHz spectrum.
C Document the list of channels that are experiencing interference.
D Change the channels being used by the 6GHz radios in the APs.

A SaaS company is launching a new product based in a cloud environment. The new product will be provided as an API and should not be exposed to the internet. Which of the following should the company create to best meet this requirement?

A A transit gateway that connects the API to the customer's VPC
B Firewall rules allowing access to the API endpoint from the customer's VPC
C A VPC peering connection from the API VPC to the customer's VPC
D A private service endpoint exposing the API endpoint to the customer's VPC

A network administrator is configuring firewall rules to lock down the network from outside attacks. Which of the following should the administrator configure to create the most strict set of rules?

A URL filtering
B File blocking
C Network security group
D Allow list

A network engineer is installing new switches in the data center to replace existing infrastructure. The previous network hardware had administrative interfaces that were plugged into the existing network along with all other server hardware on the same subnet. Which of the following should the engineer do to better secure these administrative interfaces?

A Connect the switch management ports to a separate physical network.
B Disable unused physical ports on the switches to keep unauthorized users out.
C Set the administrative interfaces and the network switch ports on the same VLAN.
D Upgrade all of the switch firmware to the latest hardware levels.

A network architect is designing a solution to place network core equipment in a rack inside a data center. This equipment is crucial to the enterprise and must be as secure as possible to minimize the chance that anyone could connect directly to the network core. The current security setup is:
In a locked building that requires sign in with a guard and identification check.
In a locked data center accessible by a proximity badge and fingerprint scanner.
In a locked cabinet that requires the security guard to call the Chief Information Security Officer (CISO) to get permission to provide the key.
Which of the following additional measures should the architect recommend to make this equipment more secure?

A Make all engineers with access to the data center sign a statement of work.
B Set up a video surveillance system that has cameras focused on the cabinet.
C Have the CISO accompany any network engineer that needs to do work in this cabinet.
D Require anyone entering the data center for any reason to undergo a background check.

An organization has centralized logging capability at the on-premises data center and wants a solution that can consolidate logging from deployed cloud workloads. The organization would like to automate the detection and alerting mechanism. Which of the following best meets the requirements?

A IDS/IPS
B SIEM
C Data lake
D Syslog

A network administrator receives a ticket from one of the company's offices about video calls that work normally for one minute and then get very choppy. The network administrator pings the video server from that site to ensure that it is reachable:

Question Image

Which of the following is most likely the cause of the video call issue?

A Throughput
B Jitter
C Latency
D Loss

Security policy states that all inbound traffic to the environment needs to be restricted, but all external outbound traffic is allowed within the hybrid cloud environment. A new application server was recently set up in the cloud. Which of the following would most likely need to be configured so that the server has the appropriate access set up? (Choose two.)

A Application gateway
B IPS
C Port security
D Firewall
E Network security group
F Screened subnet

A company is experiencing multiple switch failures. The network analyst discovers the following:
Network recovery time is unacceptable and occurs after the shutdown of some switches.
Some loops were detected in the network.
No broadcast storm was detected.
Which of the following is the most cost-effective solution?

A Add a new Layer 3 switch.
B Add multiple VLANs.
C Implement STP.
D Implement tagging.

An architect needs to deploy a new payroll application on a cloud host. End users' access to the application will be based on the end users' role. In addition, the host must be deployed on the 192.168.77.32/30 subnet. Which of the following Zero Trust elements are being implemented in this design? (Choose two.)

A Least privilege
B Device trust
C Microsegmentation
D CASB
E WAF
F MFA

A network architect is creating a network topology for a global SD-WAN deployment. The business has offices in Asia, Europe, and the United States and makes use of data centers in the United States and Europe. Most traffic between sites must have the lowest latency possible. Which of the following topologies best meets this requirement?

A Star
B Spine-and-leaf
C Mesh
D Hub-and-spoke

A network administrator is troubleshooting an outage at a remote site. The administrator examines the logs and determines that one of the internet links at the site appears to be down. After the service provider confirms this information, the administrator fails over traffic to the backup link. Which of the following should the administrator do next?

A Document the lessons learned.
B Establish a plan of action.
C Identify the problem.
D Verify full system functionality.

A network architect is designing an expansion solution for the branch office network and requires the following business outcomes:
Maximize cost savings with reduced administration overhead
Easily expand connectivity to the cloud
Use cloud-based services to the branch offices
Which of the following should the architect do to best meet the requirements?

A Design a SD-WAN solution to integrate with the cloud provider; use SD-WAN to connect branch offices to the cloud provider.
B Design point-to-site branch connectivity for offices to headquarters; deploy ExpressRoute and/or DirectConnect between headquarters and the cloud; use headquarters connectivity to connect to the cloud provider.
C Design an MPLS architecture for the branch offices and site-to-site VPN between headquarters and branch offices; use site-to-site connectivity to the cloud provider.
D Design a dark fiber solution for headquarters and branch offices' connectivity; deploy point-to-site VPN between headquarters and the cloud provider; use the headquarters connectivity to the cloud provider.

End users are getting certificate errors and are unable to connect to an application deployed in a cloud. The application requires HTTPS connection. A network solution architect finds that a firewall is deployed between end users and the application in the cloud. Which of the following is the root cause of the issue?

A The firewall on the application server has port 443 blocked.
B The firewall has port 443 blocked while SSL/HTTPS inspection is enabled.
C The end users do not have certificates on their laptops.
D The firewall has an expired certificate while SSL/HTTPS inspection is enabled.

A large commercial enterprise that runs a global video streaming platform recently acquired a small business that serves customers in a geographic area with limited connectivity to the global telecommunications infrastructure. The executive leadership team issued a mandate to deliver the highest possible video streaming quality to all customers around the world. Which of the following solutions should the enterprise architect suggest to meet the requirements?

A Serve the customers in the acquired area with a highly compressed version of content.
B Use a geographically weighted DNS solution to distribute the traffic.
C Deploy multiple local load balancers in the newly added geographic area.
D Utilize CDN for all customers regardless of geographic location.

A company is transitioning from on premises to a hybrid environment. Due to regulatory standards, the company needs to achieve a high level of reliability and high availability for the connection between its data center and the cloud provider. Which of the following solutions best meets the requirements?

A Establish a Direct Connect with the cloud provider and peer to two different VPCs in the cloud network.
B Establish a Direct Connect with the cloud provider and a redundant connection with a VPN over the internet.
C Establish two Direct Connect connections to the cloud provider using two different suppliers.
D Establish a VPN with two tunnels to a transit gateway at the cloud provider.

CNX-001Preview

About the CNX-001 Exam

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

Question 12

Question 13

Question 14

Question 15

Question 16

Question 17

Question 18

Question 19

Question 20

Question 21

Question 22

Question 23

Question 24

Question 25

CNX-001Preview

About the CNX-001 Exam

Mode Selection

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

Question 12

Question 13

Question 14

Question 15

Question 16

Question 17

Question 18

Question 19

Question 20

Question 21

Question 22

Question 23

Question 24

Question 25