CNX-001 practice questions 61–70

1. Question 61 · 81 in bank

   Which of the following helps the security of the network design to align with industry best practices?

   • AReference architectures
   • BLicensing agreement
   • CService-level agreement
   • DMemorandum of understanding

   Show answer

   Answer: A

   Next question

2. Question 62 · 81 in bank

   An organization's Chief Technical Officer is concerned that changes to the network using IaC are causing unscheduled outages. Which of the following best mitigates this risk?

   • AMaking code changes to the master branch
   • BEnforcing code review of the change by the author
   • CForking the code repository before making changes
   • DAdding review/approval steps to the CI/CD pipelines

   Show answer

   Answer: D

   Next question

3. Question 63 · 81 in bank

   A network architect is working on a new network design to better support remote and on-campus workers. Traffic needs to be decrypted for inspection in the cloud but is not required to go through the company's data center. Which of the following technologies best meets these requirements?

   • ASecure web gateway
   • BTransit gateway
   • CVirtual private network
   • DIntrusion prevention system
   • ENetwork access control system

   Show answer

   Answer: A

   Next question

4. Question 64 · 81 in bank

   A cloud architect must recommend an architecture approach for a new medical application that requires the lowest downtime possible. Which of the following is the best application deployment strategy given the high-availability requirement?

   • ATwo different availability zones (per region) using an active-active topology in two different regions
   • BFour different availability zones using an active-passive topology in a single region
   • CFour different availability zones using an active-active topology in a single region
   • DTwo different availability zones (per region) using an active-passive topology in two different regions

   Show answer

   Answer: A

   Next question

5. Question 65 · 81 in bank

   A company just launched a cloud-based application. Some users are reporting the application will not load. A cloud engineer investigates the issues and reports the following: Not all users are experiencing the issue. The application infrastructure is optimal. Users experiencing the issue belong to the company's remote sales team. Which of the following is most likely misconfigured?

   • AApplication load balancers
   • BPorts and protocols
   • CIP addressing
   • DGeolocation rules

   Show answer

   Answer: D

   Next question

6. Question 66 · 81 in bank

   An organization wants to evaluate network behavior with a network monitoring tool that is not inline. The organization will use the logs for further correlation and analysis of potential threats. Which of the following is the best solution?

   • ASyslog to a common dashboard used in the NOC
   • BSNMP trap with log analytics
   • CSSL decryption of network packets with preconfigured alerts
   • DNetFlow to feed into the SIEM

   Show answer

   Answer: D

   Next question

7. Question 67 · 81 in bank

   A company hosts its application s on the cloud and is expanding its business to Europe. The company must comply with General Data Protection Regulation to limit European customers' access to data. The network team configures the firewall rules but finds that some customers in the United States can access data hosted in Europe. Which of the following is the best option for the network team to configure?

   • ASASE
   • BNetwork security groups
   • CCDN
   • DGeofencing rule

   Show answer

   Answer: D

   Next question

8. Question 68 · 81 in bank

   An administrator needs to add a device to the allow list in order to bypass user authentication of an AAA system. The administrator uses MAC filtering and needs to discover the device's MAC address to accomplish this task. The device receives an IP address from DHCP, but the IP address changes daily. Which of the following commands should the administrator run on the device to locate its MAC address?

   • Aipconfig /all
   • Bnetstat -an
   • Carp -a
   • Dnslookup

   Show answer

   Answer: A

   Next question

9. Question 69 · 81 in bank

   A network load balancer is not correctly validating a client TLS certificate. The network architect needs to validate the certificate installed on the load balancer before progressing. Which of the following commands should the architect use to confirm whether the private key and certificate match?

   • Aopenssl-list -noout -modulus -in cert.crt | openssl md5 openssl rsa -noout -modulus -in privkey.txt | openssl md5
   • Bopenssl req -in certificate.csr -verify openssl-verify -noout -modulus -in privkey.txt | openssl md5
   • Copenssl-rsa -noout -modulus -in cert.crt | openssl md5 openssl-verify -noout -modulus -in privkey.txt | openssl md5
   • Dopenssl x509 -noout -modulus -in cert.crt | openssl md5 openssl rsa -noout -modulus -in privkey.txt | openssl md5

   Show answer

   Answer: D

   Next question

10. Question 70 · 81 in bank

    A global company has depots in various locations. A proprietary application was deployed locally at each of the depots, but issues with getting the consolidated data instantly occurred. The Chief Information Officer decided to centralize the application and deploy it in the cloud. After the cloud deployment, users report the application is slow. Which of the following is most likely the issue?

    • AThrottling
    • BOverutilization
    • CPacket loss
    • DLatency

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CNX-001 practice, question 61. 81 questions available.