CompTIA CNX-001 - CompTIA CloudNetX Exam
Page: 3 / 17
Total 84 questions
Question #11 (Topic: Exam A)
A network engineer is establishing a wireless network for handheld inventory scanners in a manufacturing company's warehouse. The engineer needs an authentication mechanism for these scanners that uses the Wi-Fi network and works with the company's Active Directory. The business requires that the solution authenticate the users and authorize the scanners. Which of the following provides the best solution for authentication and authorization?
A. TACACS+
B. RADIUS
C. LDAP
D. PKI
Answer: B
Question #12 (Topic: Exam A)
A company is migrating an application to the cloud for modernization. The engineer needs to provide dependencies between application and database tiers in the environment. Which of the following should the engineer reference in order to best meet this requirement?
A. Internal knowledge base article
B. CMDB
C. WBS
D. Diagram of physical server locations
E. SOW
Answer: B
Question #13 (Topic: Exam A)
A network administrator recently deployed new Wi-Fi 6E access points in an office and enabled 6GHz coverage. Users report that when they are connected to the new 6GHz SSID, the performance is worse than the 5GHz SSID. The network administrator suspects that there is a source of 6GHz interference in the office. Using the troubleshooting methodology, which of the following actions should the network administrator do next?
A. Test to see if the changes have improved network performance.
B. Use a spectrum analyzer and check the 6GHz spectrum.
C. Document the list of channels that are experiencing interference.
D. Change the channels being used by the 6GHz radios in the APs.
Answer: B
Question #14 (Topic: Exam A)
A SaaS company is launching a new product based in a cloud environment. The new product will be provided as an API and should not be exposed to the internet. Which of the following should the company create to best meet this requirement?
A. A transit gateway that connects the API to the customer's VPC
B. Firewall rules allowing access to the API endpoint from the customer's VPC
C. A VPC peering connection from the API VPC to the customer's VPC
D. A private service endpoint exposing the API endpoint to the customer's VPC
Answer: D
Question #15 (Topic: Exam A)
A network administrator is configuring firewall rules to lock down the network from outside attacks. Which of the following should the administrator configure to create the most strict set of rules?
A. URL filtering
B. File blocking
C. Network security group
D. Allow list
Answer: D
