CompTIA CNX-001 - CompTIA CloudNetX Exam
Page: 2 / 17
Total 84 questions
Question #6 (Topic: Exam A)
A company hosts a cloud-based e-commerce application and only wants the application accessed from certain locations. The network team configures a cloud firewall with WAF enabled, but users can access the application globally. Which of the following should the network team do?
A. Reconfigure WAF rules.
B. Configure a NAT gateway.
C. Implement a CDN.
D. Configure geo-restriction.
Answer: D
Question #7 (Topic: Exam A)
A network architect must ensure only certain departments can access specific resources while on premises. Those same users cannot be allowed to access those resources once they have left campus. Which of the following would ensure access is provided according to these requirements?
A. Enabling MFA for only those users within the departments needing access
B. Configuring geofencing with the IPs of the resources
C. Configuring UEBA to monitor all access to those resources during non-business hours
D. Implementing a PKI-based authentication system to ensure access
Answer: B
Question #8 (Topic: Exam A)
A security architect needs to increase the security controls around computer hardware installations. The requirements are:
Auditable access logs to computer rooms
Alerts for unauthorized access attempts
Remote visibility to the inside of computer rooms
Which of the following controls best meet these requirements? (Choose two.)
Auditable access logs to computer rooms
Alerts for unauthorized access attempts
Remote visibility to the inside of computer rooms
Which of the following controls best meet these requirements? (Choose two.)
A. Video surveillance
B. NFC access cards
C. Motion sensors
D. Locks and keys
E. Security patrols
F. Automated lighting
Answer: AB
Question #9 (Topic: Exam A)
A network security engineer must secure a web application running on virtual machines in a public cloud. The virtual machines are behind an application load balancer. Which of the following technologies should the engineer use to secure the virtual machines? (Choose two.)
A. CDN
B. DLP
C. IDS
D. WAF
E. SIEM
F. NSG
Answer: DF
Question #10 (Topic: Exam A)
A company is expanding operations and opening a new facility. The executive leadership team decides to purchase an insurance policy that will cover the cost of rebuilding the facility in case of a natural disaster. Which of the following describes the team's decision?
A. Business continuity
B. Disaster recovery
C. Risk transference
D. Memorandum of understanding
Answer: C
