CNX-001 CompTIA CloudNetX Free Practice Test - 20 Questions

Question 1

A company requires that sensitive customer data remain stored on-premises due to regulatory mandates, but it wants to leverage cloud resources for compute-intensive analytics during peak periods. Which cloud deployment model best meets this requirement?

Accepted Answer

Hybrid cloud

Question 2

A cloud architect needs to logically isolate network segments within a single cloud region to separate development, testing, and production environments. Each segment must be isolated at Layer 3. Which technology is most appropriate?

Accepted Answer

Virtual Private Cloud (VPC) with separate subnets

Question 3

A web application experiences varying user session lengths. The load balancer must evenly distribute requests but avoid sending new connections to heavily loaded servers. Which load balancing algorithm is best suited?

Accepted Answer

Least connections

Question 4

A network administrator notices that traffic between two cloud VMs is unexpectedly slow. The VMs are in the same VPC but different subnets. The administrator suspects the control plane is causing delay. In a software-defined networking (SDN) architecture, which component is responsible for making forwarding decisions?

Accepted Answer

Control plane

Question 5

An organization wants to allow inbound HTTP traffic to its web servers from the internet but block all unsolicited inbound traffic. The cloud firewall must inspect the state of connections. Which type of firewall rule should be used?

Accepted Answer

Stateful firewall rule

Question 6

Remote employees need to securely access internal corporate applications from their browsers without installing client software. Which VPN technology is most appropriate?

Accepted Answer

SSL/TLS VPN

Question 7

A data analytics team needs to store large unstructured datasets and access them with high throughput for parallel processing. Which cloud storage type is most suitable?

Accepted Answer

Block storage

Question 8

An organization has internal applications that must resolve custom domain names (e.g., app.internal.company.com) within its cloud VPC. These names must not be publicly resolvable. Which DNS solution should be used?

Accepted Answer

Private hosted zone in the cloud DNS service

Question 9

A critical application requires minimal data loss, with a recovery point objective (RPO) near zero. The application runs on two VMs in different availability zones. Which high availability configuration is best?

Accepted Answer

Active-passive with data replication

Question 10

A company has a hybrid cloud setup with a Direct Connect circuit and a VPN backup. The on-premises network advertises routes to the cloud over BGP. During a maintenance window, the network team accidentally advertises a more specific route to a public IP range, causing cloud traffic to be blackholed. What is the most likely cause?

Accepted Answer

BGP prefix hijacking via more specific route

Question 11

A security team wants to implement zero-trust micro-segmentation between application tiers. They need to allow only specific traffic between VMs regardless of subnet membership. Which cloud networking feature is most appropriate?

Accepted Answer

Network security groups (NSGs) with application security groups

Question 12

A global e-commerce platform experiences high latency for users in remote regions. The content is mostly static product images. Which solution will most effectively reduce latency without rewriting the application?

Accepted Answer

Use a content delivery network (CDN)

Question 13

A company has multiple AWS accounts, each with its own VPC. They need to enable low-latency, high-bandwidth connectivity between all VPCs while minimizing complexity. Which solution is most appropriate?

Accepted Answer

Transit gateway

Question 14

An administrator needs to assign a custom domain name (e.g., example.internal) to instances in a VPC so that they can automatically register their hostnames. Which DHCP option set configuration is required?

Accepted Answer

Set the domain-name option to example.internal

Question 15

A microservices application running in Kubernetes must restrict traffic between pods so that only the frontend can communicate with the API backend. Which native Kubernetes resource should be used?

Accepted Answer

Network policy

Question 16

Which component provides logically isolated virtual network in the cloud, allowing full control over IP addressing, subnets, and route tables?

Accepted Answer

Virtual Private Cloud (VPC)

Question 17

A web server must be accessible from the internet, while a database server should only be reachable from the web server. Which subnet type should each be placed in?

Accepted Answer

Web server in public subnet; database in private subnet

Question 18

Instances in a private subnet need to download software updates from the internet. Which component enables outbound connectivity without allowing inbound traffic?

Accepted Answer

NAT gateway

Question 19

A network engineer wants to analyze traffic patterns between VMs to troubleshoot performance issues. The engineer needs to capture metadata about IP traffic (source, destination, protocol, ports) without sampling. Which cloud monitoring solution is best?

Accepted Answer

VPC Flow Logs

Question 20

An organization with a multi-cloud strategy needs to connect its data center to both AWS and Azure with low latency and high bandwidth, avoiding the public internet. Which solution is most suitable?

Accepted Answer

Direct Connect to AWS and ExpressRoute to Azure

CNX-001 CompTIA CloudNetX Free Practice Test - 20 Questions

The free lane is only the front row