CompTIA CNX-001 Test Engine Practice Test Questions, Exam Dumps [Q42-Q60] – IT Certification Exam Questions & Answers

Rate this post

CompTIA CNX-001 Test Engine Practice Test Questions, Exam Dumps

100% Free CNX-001 Daily Practice Exam With 86 Questions

CompTIA CNX-001 Exam Syllabus Topics:

Topic	Details
Topic 1	Network Architecture Design: This section of the exam measures the skills of Network Architects and covers the ability to design scalable, secure, and efficient network architectures. It focuses on understanding design principles, selecting appropriate network components, and aligning architecture decisions with organizational needs. Candidates are expected to demonstrate a solid grasp of topology planning, high-availability configurations, and integration of cloud and on-premise systems to ensure reliability and performance.
Topic 2	Network Security: This section of the exam measures the skills of Security Engineers and covers core practices for protecting network infrastructure. It includes applying firewall rules, implementing access control measures, and designing secure segmentation strategies. The content emphasizes threat mitigation techniques, secure configuration of networking devices, and adherence to compliance frameworks, preparing professionals to safeguard both internal and external network assets effectively.
Topic 3	Network Operations, Monitoring, and Performance: This section of the exam measures skills of Network Operations Specialists and covers day-to-day operational management of network environments. It involves configuring monitoring tools, analyzing performance data, and responding to alerts. Candidates are evaluated on their ability to maintain network health, optimize throughput, and ensure consistent uptime by applying best practices for proactive performance tuning and operations management.
Topic 4	Network Troubleshooting: This section of the exam measures the skills of Network Support Engineers and covers diagnosing and resolving connectivity and performance issues across various network layers. It focuses on identifying root causes, using diagnostic tools, and applying systematic troubleshooting methodologies. The goal is to ensure that professionals can minimize downtime, restore service quickly, and prevent recurring problems by maintaining a resilient and stable network environment.

Q42. A network architect is designing a solution to place network core equipment in a rack inside a data center.
This equipment is crucial to the enterprise and must be as secure as possible to minimize the chance that anyone could connect directly to the network core. The current security setup is:
* In a locked building that requires sign in with a guard and identification check.
* In a locked data center accessible by a proximity badge and fingerprint scanner.
* In a locked cabinet that requires the security guard to call the Chief Information Security Officer (CISO) to get permission to provide the key.
Which of the following additional measures should the architect recommend to make this equipment more secure?

Make all engineers with access to the data center sign a statement of work.

Set up a video surveillance system that has cameras focused on the cabinet.

Have the CISO accompany any network engineer that needs to do work in this cabinet.

Require anyone entering the data center for any reason to undergo a background check.

Q43. A company’s IT department is expected to grow from 100 to 200 employees, and the sales department is expected to grow from 1,000 to a maximum of 2,000 employees. Each employee owns a single laptop with a single IP allocated. The network architect wants to deploy network segmentation using the IP range 10.0.0.0
/8. Which of the following is the best solution?

Allocate 10.1.0.0/30 to the IT department. Allocate 10.2.0.0/16 to the sales department.

Allocate 10.1.0.0/16 to the IT department. Allocate 10.2.1.0/24 to the sales department.

Allocate 10.1.0.0/22 to the IT department. Allocate 10.2.0.0/15 to the sales department.

Allocate 10.1.0.0/16 to the IT department. Allocate 10.2.1.0/25 to the sales department.

Q44. A network architect needs to build a new data center for a large company that has business units that process retail financial transactions. Which of the following information should the architect request from the company?

Regulatory requirements

Statement of work

Business case study

Internal reference architecture

Q45. Which of the following helps the security of the network design to align with industry best practices?

Reference architectures

Licensing agreement

Service-level agreement

Memorandum of understanding

Q46. An outage occurred after a software upgrade on core switching. A network administrator thinks that the firmware installed had a bug. Which of the following should the network administrator do next?

Establish a plan of action to resolve the issue.

Test the theory to determine cause.

Document lessons learned.

Implement the solution.

Q47. A network administrator is troubleshooting an outage at a remote site. The administrator examines the logs and determines that one of the internet links at the site appears to be down. After the service provider confirms this information, the administrator fails over traffic to the backup link. Which of the following should the administrator do next?

Document the lessons learned.

Establish a plan of action.

Identify the problem.

Verify full system functionality.

Q48. A cloud architect must recommend an architecture approach for a new medical application that requires the lowest downtime possible. Which of the following is the best application deployment strategy given the high- availability requirement?

Two different availability zones (per region) using an active-active topology in two different regions

Four different availability zones using an active-passive topology in a single region

Four different availability zones using an active-active topology in a single region

Two different availability zones (per region) using an active-passive topology in two different regions

Q49. A network architect is working on a physical network design template for a small education institution’s satellite campus that is not yet built. The new campus location will consist of two small buildings with classrooms, one screening room with audiovisual equipment, and 200 seats for students. Which of the following enterprise network designs should the architect suggest?

Hybrid

Dual-layer

Three-tier

Collapsed core

Q50. A company deployed new applications in the cloud and configured a site-to-site VPN to connect the internal data center with the cloud. The IT team wants the internal servers to connect to those applications without using public IP addresses. Which of the following is thebestsolution?

Create a DNS server in the cloud. Configure the DNS server in the customer data center to forward DNS requests for cloud resources to the cloud DNS server.

Configure a NAT server on the cloud to allow internal servers to connect to the applications through the NAT server.

Register applications on the cloud with a public DNS sever and configure internal servers to connect to them using their public DNS names.

Configure proxy service in the site-to-site VPN to allow internal servers to access applications through the proxy.

Q51. A partner is migrating a client from on premises to a hybrid cloud. Given the following project status information, the initial project timeline estimates need to be revised:

Which of the following documents needs to be revised tobestreflect the current status of the project?

BIA

SLA

SOW

WBS

Q52. An application is hosted on a three-node cluster in which each server has identical compute and network performance specifications. A fourth node is scheduled to be added to the cluster with three times the performance as any one of the preexisting nodes. The network architect wants to ensure that the new node gets the same approximate number of requests as all of the others combined. Which of the following load- balancing methodologies should the network architect recommend?

Round-robin

Load-based

Least connections

Weighted

Q53. A company just launched a cloud-based application. Some users are reporting the application will not load. A cloud engineer investigates the issues and reports the following:
* Not all users are experiencing the issue
* The application infrastructure is optimal
* Users experiencing the issue belong to the company’s remote sales team Which of the following is most likely misconfigured?

Application load balancers

Ports and protocols

IP addressing

Geolocation rules

Q54. An architect needs to deploy a new payroll application on a cloud host. End users’ access to the application will be based on the end users’ role. In addition, the host must be deployed on the 192.168.77.32/30 subnet.
Which of the following Zero Trust elements are being implemented in this design? (Choose two.)

Least privilege

Device trust

Microsegmentation

CASB

WAF

MFA

Q55. Application development team users are having issues accessing the database server within the cloud environment. All other users are able to use SSH to access this server without issues. The network architect reviews the following information to troubleshoot the issue:

Traceroute output from an application developer’s machine with the assigned IP 192.168.2.7:

* Application development gateway: 192.168.2.1/24
* Server segment gateway: 192.168.1.1/24
* Database server: 192.168.1.9
* Application developer machine IP: 192.168.2.7
* Traceroute ends at hop 4: 192.168.4.1 (server segment firewall), then times out Which of the following is the most likely cause of the issue?

The core firewall is blocking the traffic.

Network security groups do not have the correct outbound rule configured.

The server segment firewall is dropping the traffic.

The server segment gateway is having bandwidth issues.

Q56. A cafe uses a tablet-based point-of-sale system. Customers are complaining that their food is taking too long to arrive. During an investigation, the following is noticed:
* Every kitchen printer did not print the orders
* Payments are processing correctly
* The cloud-based system has record of the orders
* This issue occurred when the cafe was busy
Which of the following is the best way to mitigate this issue?

Updating the application

Adding an access point exclusively for the kitchen

Upgrading the kitchen printers’ wireless dongles

Assigning the kitchen printers static IP addresses

Q57. A global company has depots in various locations. A proprietary application was deployed locally at each of the depots, but issues with getting the consolidated data instantly occurred. The Chief Information Officer decided to centralize the application and deploy it in the cloud. After the cloud deployment, users report the application is slow. Which of the following is most likely the issue?

Throttling

Overutilization

Packet loss

Latency

Q58. You are designing a campus network with a three-tier hierarchy and need to ensure secure connectivity between locations and traveling employees.
INSTRUCTIONS
Review the command output by clicking on the server, laptops, and workstations on the network.
Use the drop-down menus to determine the appropriate technology and label for each layer on the diagram.
Options may only be used once.
Click on the magnifying glass to make additional configuration changes.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

Q59. A cloud architect must recommend an architecture approach for a new medical application that requires the lowest downtime possible. Which of the following is the best application deployment strategy given the high- availability requirement?

Two different availability zones (per region) using an active-active topology in two different regions

Four different availability zones using an active-passive topology in a single region

Four different availability zones using an active-active topology in a single region

Two different availability zones (per region) using an active-passive topology in two different regions

Q60. A network engineer is establishing a wireless network for handheld inventory scanners in a manufacturing company’s warehouse. The engineer needs an authentication mechanism for these scanners that uses the Wi-Fi network and works with the company’s Active Directory. The business requires that the solution authenticate the users and authorize the scanners. Which of the following provides the best solution for authentication and authorization?

TACACS+

RADIUS

LDAP

PKI