Official Bank
0/84
Page
1/4
CompTIA CloudNetX (CNX-001) - CompTIA Exam Questions
Last updated on June 20, 2026
97%
Exam Compliance
84
Total Questions
1
Question
A network architect is working on a physical network design template for a small education institution's satellite campus that is not yet built. The new campus location will consist of two small buildings with classrooms, one screening room with audiovisual equipment, and 200 seats for students. Which of the following enterprise network designs should the architect suggest?
Options
A
Collapsed core
B
Dual-layer
C
Three-tier
D
Hybrid
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
2
Question
An organization's Chief Technical Officer is concerned that changes to the network using IaC are causing unscheduled outages. Which of the following best mitigates this risk?
Options
A
Adding review/approval steps to the CI/CD pipelines
B
Enforcing code review of the change by the author
C
Forking the code repository before making changes
D
Making code changes to the master branch
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
3
Question
A company is migrating an application to the cloud for modernization. The engineer needs to provide dependencies between application and database tiers in the environment. Which of the following should the engineer reference in order to best meet this requirement?
Options
A
SOW
B
Diagram of physical server locations
C
CMDB
D
WBS
E
Internal knowledge base article
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
4
Question
SIMULATION A network administrator needs to resolve connectivity issues in a hybrid cloud setup. Workstations and VMs are not able to access Application
Options
A
Workstations are able to access Server B.
INSTRUCTIONS Click on workstations, VMs, firewalls, and NSGs to troubleshoot and gather information. Type help in the terminal to view a list of available commands.
Select the appropriate device(s) requiring remediation and identify the associated issue(s).
If at any time you would like to bring back the initial state of the simulation, please click the Reset All
button.
Remediation
Select device - +
Application NSG Firewalls VM NSG VMs Workstations Application NSG Issue.
Incorrect routing table Misconfigured rule Packet loss Blocked outbound traffic VPN tunnel down Duplicated IP addresses Misconfigured subnet mask Overly permissive configuration Firewalls Issue:
Incorrect routing table Misconfigured rule Packet loss Blocked outbound traffic VPN tunnel down Duplicated IP addresses Misconfigured subnet mask Overly permissive configuration VM NSG Issue:
Incorrect routing table Misconfigured rule Packet loss Blocked outbound traffic VPN tunnel down Duplicated IP addresses Server B C: \>ipconfig Windows IP Configuration Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix.:local.net IPv4 Address. • Subnet Mask • • Default Gateway. • C: \> Firewall 1
Public IP: 86.210.16.10 Internal IP: 10.2.2.1
Source Destination Port Action 10.3.9.0/24 any any allow 10.2.2.0124 10.3.9.0/24 any block 10.9.8.14 10.3.9.0/24 any allow 10.9.8.14 10.2.2.0124 any allow 192.2.1.0/24 10.3.9.0/24 any allow 10.3.9.0/24 192.2.1.024 any allow 10.3.9.0/24 10.9.8.14 any allow 10.2.2.0/24 10.9.8.14 any allow 10.3.9.0/24 10.2.2.0124 any block 10.3.9.0/24 10.9.8.0/24 any block any any any block
• -:10.9.8.14
•:255.255.255.0
:10.10.10.1 fale show ipsec tunnels ike IPsec Tunnel: e IKE SA: ipipe ID: 17 Version: IKEv2 Local: 86.210.16.10[500] Remote: 89.215.198.10[500] Status: DOWN IPsec Tunnel: 1 IKE SA: ipipt ID: 21 Version: IKEV2 Local: 86.210.16.10[500] Remote: 51.187.39.9[500] Status: ESTABLISHED Up: 7625 Reauth: 25278s Workstation 1 C: \> Workstation 2 C: \> Firewall 2
Public IP: 89.215.198.10 Internal IP: 10.3.9.1
Source Destination Port Action 10.3.9.0/24 any any allow 192.2.1.0 any any allow 10.2.2.0/24 10.9.8.14 any allow 10.2.2.0/24 10.3.9.0/24 any block 10.2.2.0/24 192.2.1.11 any allow 10.2.2.0/24 10.9.8.0/24 any block 10.2.2.0/24 192.2.1.0/24 any block 10.9.8.14 10.3.9.0/24 any allow 10.9.8.14 10.2.2.0/24 any allow 10.9.8.14 192.2.1.11 any allow 10.3.9.0/24 192.2.1.11 any allow 10.3.9.0/24 10.9.8.14 any allow 10.3.9.0/24 10.2.2.0/24 any block 10.39.0/24 10.9.8.0/24 any block 10.3.9.0/24 192.2.1.0/24 block any any any block fuza show ipsec tunnels ike IPsec Tunnel: 1 IKE SA: ipipt ID: 53 Version: IKEv2 Local: 89.215.198.10[500] Resote: 43.250.192.5[500] Status: ESTABLISHED up: 21525 Reauth: 227635 IPsec Tunnel: 2 IKE SA: ipipz ID: 58 Version: IKEv1 Local: 89.215.198.10[500] Remote: 86.210.16.10[500] Status: DOWN IPsec Tunnel: 3 IKE SA: İpip3 ID: 60 Version: IKEv2 Local: 89.215.198.10[500] Remote: 52.47.73.70[500] Status: ESTABLISHED Up: 117485 Reauth: 13262s Application NSG Source Destination 192.2.1.0/24 any 10.2.2.0/24 192.2.1.0/24 10.3.9.0/24 192.2.1.0/24 10.9.8.14 192.2.1.0/24 192.2.1.0/24 10.9.8.14 192.2.1.0/24 10.2.2.0/24 192.2.1.0/24 10.3.9.0/24 192.2.1.0/24 10.9.8.0/24 any 192.2.1.0/24 Port Action any allow any allow any block any allow any allow any block Sue allow Aue block any block Application A C: \›ipconfig Windows IP Configuration Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix.:local.net IPv4 Address. . . . . . .:192.2.1.11 Subnet Mask . . •:255.255.255.0 Default Gateway. • •:192.2.1.1 C: \> VM NSG Source Destination Port Action 10.3.9.0/24 any any allow 10.2.2.0/24 10.3.9.0/24 any block 10.9.8.14 10.3.9.0/24 any allow 192.2.1.0/24 10.3.9.0/24 any allow 10.3.9.0/24 192.2.1.0/24 any allow 10.3.9.0/24 10.9.8.14 any allow 10.3.9.0/24 10.2.2.0/24 any block 10.3.9.0/24 10.9.8.0/24 any block any 10.3.9.0/24 any block
INSTRUCTIONS Click on workstations, VMs, firewalls, and NSGs to troubleshoot and gather information. Type help in the terminal to view a list of available commands.
Select the appropriate device(s) requiring remediation and identify the associated issue(s).
If at any time you would like to bring back the initial state of the simulation, please click the Reset All
button.
Remediation
Select device - +
Application NSG Firewalls VM NSG VMs Workstations Application NSG Issue.
Incorrect routing table Misconfigured rule Packet loss Blocked outbound traffic VPN tunnel down Duplicated IP addresses Misconfigured subnet mask Overly permissive configuration Firewalls Issue:
Incorrect routing table Misconfigured rule Packet loss Blocked outbound traffic VPN tunnel down Duplicated IP addresses Misconfigured subnet mask Overly permissive configuration VM NSG Issue:
Incorrect routing table Misconfigured rule Packet loss Blocked outbound traffic VPN tunnel down Duplicated IP addresses Server B C: \>ipconfig Windows IP Configuration Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix.:local.net IPv4 Address. • Subnet Mask • • Default Gateway. • C: \> Firewall 1
Public IP: 86.210.16.10 Internal IP: 10.2.2.1
Source Destination Port Action 10.3.9.0/24 any any allow 10.2.2.0124 10.3.9.0/24 any block 10.9.8.14 10.3.9.0/24 any allow 10.9.8.14 10.2.2.0124 any allow 192.2.1.0/24 10.3.9.0/24 any allow 10.3.9.0/24 192.2.1.024 any allow 10.3.9.0/24 10.9.8.14 any allow 10.2.2.0/24 10.9.8.14 any allow 10.3.9.0/24 10.2.2.0124 any block 10.3.9.0/24 10.9.8.0/24 any block any any any block
• -:10.9.8.14
•:255.255.255.0
:10.10.10.1 fale show ipsec tunnels ike IPsec Tunnel: e IKE SA: ipipe ID: 17 Version: IKEv2 Local: 86.210.16.10[500] Remote: 89.215.198.10[500] Status: DOWN IPsec Tunnel: 1 IKE SA: ipipt ID: 21 Version: IKEV2 Local: 86.210.16.10[500] Remote: 51.187.39.9[500] Status: ESTABLISHED Up: 7625 Reauth: 25278s Workstation 1 C: \> Workstation 2 C: \> Firewall 2
Public IP: 89.215.198.10 Internal IP: 10.3.9.1
Source Destination Port Action 10.3.9.0/24 any any allow 192.2.1.0 any any allow 10.2.2.0/24 10.9.8.14 any allow 10.2.2.0/24 10.3.9.0/24 any block 10.2.2.0/24 192.2.1.11 any allow 10.2.2.0/24 10.9.8.0/24 any block 10.2.2.0/24 192.2.1.0/24 any block 10.9.8.14 10.3.9.0/24 any allow 10.9.8.14 10.2.2.0/24 any allow 10.9.8.14 192.2.1.11 any allow 10.3.9.0/24 192.2.1.11 any allow 10.3.9.0/24 10.9.8.14 any allow 10.3.9.0/24 10.2.2.0/24 any block 10.39.0/24 10.9.8.0/24 any block 10.3.9.0/24 192.2.1.0/24 block any any any block fuza show ipsec tunnels ike IPsec Tunnel: 1 IKE SA: ipipt ID: 53 Version: IKEv2 Local: 89.215.198.10[500] Resote: 43.250.192.5[500] Status: ESTABLISHED up: 21525 Reauth: 227635 IPsec Tunnel: 2 IKE SA: ipipz ID: 58 Version: IKEv1 Local: 89.215.198.10[500] Remote: 86.210.16.10[500] Status: DOWN IPsec Tunnel: 3 IKE SA: İpip3 ID: 60 Version: IKEv2 Local: 89.215.198.10[500] Remote: 52.47.73.70[500] Status: ESTABLISHED Up: 117485 Reauth: 13262s Application NSG Source Destination 192.2.1.0/24 any 10.2.2.0/24 192.2.1.0/24 10.3.9.0/24 192.2.1.0/24 10.9.8.14 192.2.1.0/24 192.2.1.0/24 10.9.8.14 192.2.1.0/24 10.2.2.0/24 192.2.1.0/24 10.3.9.0/24 192.2.1.0/24 10.9.8.0/24 any 192.2.1.0/24 Port Action any allow any allow any block any allow any allow any block Sue allow Aue block any block Application A C: \›ipconfig Windows IP Configuration Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix.:local.net IPv4 Address. . . . . . .:192.2.1.11 Subnet Mask . . •:255.255.255.0 Default Gateway. • •:192.2.1.1 C: \> VM NSG Source Destination Port Action 10.3.9.0/24 any any allow 10.2.2.0/24 10.3.9.0/24 any block 10.9.8.14 10.3.9.0/24 any allow 192.2.1.0/24 10.3.9.0/24 any allow 10.3.9.0/24 192.2.1.0/24 any allow 10.3.9.0/24 10.9.8.14 any allow 10.3.9.0/24 10.2.2.0/24 any block 10.3.9.0/24 10.9.8.0/24 any block any 10.3.9.0/24 any block
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
5
Question
A network security administrator needs to set up a solution to: Gather all data from log files in a single location. Correlate the data to generate alerts.
Which of the following should the administrator implement?
Which of the following should the administrator implement?
Options
A
SIEM
B
Event log monitoring
C
Log management
D
Syslog
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
Finish Practice?
Are you sure you want to finish? This will end your practice session.