CNX-001: CompTIA CloudNetXDemo

End users are receiving certificate errors and cannot connect to an application deployed in the cloud. The application requires an HTTPS connection. A network solution architect discovers that a firewall is deployed between the end users and the cloud application. Which of the following is the root cause of this issue?

A network administrator is troubleshooting a user's workstation that cannot connect to the company network. The results of commands run by the administrator on the workstation are shown below:

A router on the same network displays the following output:

Which of the following is the most likely cause of the issue?

A network architect needs to design a new branch network that satisfies these requirements:

• No single point of failure
• Clients must not be affected by changes to the underlying medium
• Clients must be able to communicate directly to preserve bandwidth

Which of the following network topologies should the architect choose?

A network engineer is configuring guest access on a Wi-Fi network. Following a recent network analysis, the engineer found that a user could connect to the guest network and attack the corporate network because both networks use the same VLAN. Which of the following should the engineer do to prevent a similar attack from occurring?

A company is having Wi-Fi performance problems. Three Wi-Fi networks are available, each operating in the 2.4 GHz band on the same channel. Connecting to any of the Wi-Fi networks results in slow performance. To which of the following channels should the networks be configured?

A network architect must ensure that only specified departments can access particular resources while they are on premises. Those same users must not be able to access those resources after leaving campus. Which option would ensure access is granted according to these requirements?

A network administrator is investigating an outage at a remote site. After reviewing the logs, the administrator determines that one of the site's internet links appears to be down. Once the service provider confirms this, the administrator fails over traffic to the backup link. What should the administrator do next?

An administrator must add a device to an allow list to bypass user authentication in an AAA system. The administrator uses MAC filtering and needs to find the device's MAC address to complete this task. The device obtains an IP address through DHCP, but that IP address changes every day. Which command should the administrator run on the device to find its MAC address?

An application runs on a three-node cluster where every server has identical compute- and network-performance specifications. A fourth node, with three times the performance of any one existing node, is scheduled to join the cluster. The network architect needs the new node to receive approximately the same number of requests as the other nodes combined. Which load-balancing methodology should the network architect recommend?

A network engineer is planning a Layer 2 deployment for a company that occupies multiple floors in an office building. The engineer chooses to assign each floor to its own VLAN while still permitting communication among all user VLANs. The engineer also wants to shorten the STP convergence time when new switches come online. Which of the following should the engineer enable to achieve this goal?

A network architect is designing a new network for a rural hospital system with these requirements:

• High availability
• Consistent data transmission
• Resilience to simultaneous failures

Which of the following topologies should the architect use?

A customer asks an MSP to recommend a ZTA design for its globally distributed remote workforce. The requirements are as follows:

• Authentication must be provided through the customer’s SAML identity provider.
• Access must be blocked from countries where the business does not operate.
• Add secondary authentication to the workflow to support passkeys.
• Changes to a user’s device posture and hygiene must require reauthentication to the network.
• Network access must originate only from corporate-owned devices.

Which solution should the MSP recommend to satisfy these requirements?

An organization has centralized logging at its on-premises data center and needs a solution to consolidate logging from deployed cloud workloads. The organization wants to automate detection and alerting. Which of the following best meets these requirements?

A network architect must design a solution that ensures every cloud-environment network is built to the same baseline. The solution must meet these requirements:

• Use automated deployment.
• Easily update multiple environments.
• Share code with a community of practice.

Which of the following are the best solutions?

A large commercial enterprise operating a global video-streaming platform has recently acquired a small business that serves customers in a geographic area with limited connectivity to the global telecommunications infrastructure. The executive leadership team has mandated delivery of the highest possible video-streaming quality to all customers worldwide. Which of the following solutions should the enterprise architect recommend to meet these requirements?

A network engineer must implement a cloud-native solution. The solution must enable recording network-conversation metadata for the host and appliances attached to a VPC. Which of the following accomplishes these goals with the least effort?

A café uses a tablet-based point-of-sale system. Customers complain that their food is taking too long to arrive. During an investigation, the following is observed:

• None of the kitchen printers printed the orders.
• Payments are processing correctly.
• The cloud-based system has records of the orders.
• The issue occurred while the café was busy.

Which of the following is the best way to mitigate this issue?

A network security administrator must implement a solution to:

• Collect all data from log files in one location.
• Correlate the data to create alerts.

Which of the following should the administrator implement?

A network architect is designing a solution to install network core equipment in a rack within a data center. This equipment is vital to the enterprise and must be as secure as possible to reduce the likelihood that anyone can connect directly to the network core.

The current security configuration includes:

• A locked building requiring sign-in with a guard and an identification check.
• A locked data center accessed with a proximity badge and fingerprint scanner.
• A locked cabinet for which the security guard must call the Chief Information Security Officer (CISO) for authorization to provide the key.

Which additional measure should the architect recommend to make this equipment more secure?

An architecture team must consolidate all logging and performance monitoring from global enterprise applications for use in decision-making analytics. Which technology best fulfills this need?

A SaaS company’s new service is currently delivered through four servers. Its end users are experiencing connection problems that affect about 25% of connections. Which of the following is the most likely root cause of this problem?

New devices were deployed on a network and need to be hardened.

Use the drop-down menus to define the appliance-hardening techniques that provide the most secure solution.

A company is facing numerous network problems and decides to grow its support team. The new junior employees must be onboarded as quickly as possible and be able to troubleshoot issues with minimal assistance. What should the company create to accomplish this goal?

A network administrator gets a ticket from one of the company’s offices reporting that video calls function normally for one minute before becoming very choppy. To confirm the video server is reachable from that site, the administrator pings it:

Which of the following is the most likely cause of the video-call problem?