CloudNetX Practice Questions - CompTIA CloudNetX (CNX-001) Exam - CloudNetX Practice Questions

Question 1

A network architect is designing multi-cloud connectivity linking AWS, Azure, and GCP to on-premises data centers. Which approach provides the most consistent latency SLAs while avoiding the public internet?

Deploy site-to-site IPsec VPN tunnels over the public internet to each cloud provider Procure dedicated private circuits (AWS Direct Connect, Azure ExpressRoute, GCP Interconnect) through a colocation exchange Use SD-WAN overlays running entirely over broadband internet with QoS markings Configure BGP peering between on-premises routers and cloud virtual gateways over public IPs

Correct Answer:

Procure dedicated private circuits (AWS Direct Connect, Azure ExpressRoute, GCP Interconnect) through a colocation exchange

Question 2

An enterprise runs BGP between its on-premises ASN 65001 and AWS Direct Connect. The team wants to prefer on-premises-originated prefixes over cloud-originated ones for traffic returning to the data center. Which BGP attribute achieves this with least configuration overhead?

Increase the MED value on prefixes advertised from on-premises to AWS Set a higher LOCAL_PREF on prefixes learned from on-premises on the on-premises routers Prepend the on-premises ASN multiple times on prefixes advertised toward AWS Configure a higher BGP weight on the AWS VGW sessions pointing to the on-premises router

Correct Answer:

Set a higher LOCAL_PREF on prefixes learned from on-premises on the on-premises routers

Question 3

A company must connect 150 branch offices to three AWS VPCs and its on-premises data center with a hub-and-spoke topology. Managing individual VPN connections is becoming unmanageable. Which AWS service is architecturally designed for this scale?

AWS Virtual Private Gateway with static routing on each VPC AWS Transit Gateway with route tables segregating spoke associations AWS CloudHub using a single VGW for all branch connections AWS Direct Connect with a private VIF to each VPC independently

Correct Answer:

AWS Transit Gateway with route tables segregating spoke associations

Question 4

Azure Virtual WAN is deployed in Standard tier. An architect wants branch offices to communicate directly with each other without hairpinning through the hub. Which feature enables this?

VNet peering between branch VNets through the Virtual WAN hub Any-to-any routing policy with branch-to-branch connectivity enabled in Virtual WAN ExpressRoute Global Reach configured between each branch circuit User-defined routes propagated via BGP from a third-party NVA in the hub

Correct Answer:

Any-to-any routing policy with branch-to-branch connectivity enabled in Virtual WAN

Question 5

A Kubernetes cluster uses Cilium as its CNI. A security team needs to enforce Layer 7 HTTP policies restricting which microservices can call a payment API by HTTP method and path, without adding a sidecar proxy. Which Cilium feature satisfies this requirement?

Cilium NetworkPolicy with podSelector and namespaceSelector fields CiliumNetworkPolicy with HTTP rules specifying method and path match Kubernetes NetworkPolicy with egress rules using ipBlock CIDR ranges Istio AuthorizationPolicy applied after disabling the Cilium CNI

Correct Answer:

CiliumNetworkPolicy with HTTP rules specifying method and path match

Question 1

Exam overview

About this Exam

Prepare with the CloudNetX Practice Questions - CompTIA CloudNetX (CNX-001) Exam practice quiz. This question bank includes 100 questions covering network, on-premises, team, data, and traffic. Use it to review important concepts, identify knowledge gaps, and build confidence for the related exam, course, or assessment.

More details

Additional Information

CloudNetX Practice Questions - CompTIA CloudNetX (CNX-001) Exam

This practice set contains 100 questions from the matching question bank and focuses on network, on-premises, team, data, and traffic. Work through each question carefully, review the provided solutions, and revisit topics that need more study before your next attempt.

This is an independent study resource intended for practice and review; it is not an official examination or an endorsement by any organization named in the title.

Quiz information

Frequently Asked Questions

The complete question count is available after full access is unlocked.

No fixed duration is currently configured for this quiz.

Question explanations are included where they are available in the quiz content, helping you review the reasoning after answering.

Yes. You can retake the practice test again as you continue studying during your available access period.

After your access is confirmed, you can continue into the complete practice exam from this quiz flow.

Unless explicitly stated otherwise, this page provides independent practice material for study and exam preparation and is not the official examination itself.

Keep studying

Correct Answer:

Correct Answer:

Correct Answer:

Correct Answer:

Correct Answer:

About this Exam

Additional Information

CloudNetX Practice Questions - CompTIA CloudNetX (CNX-001) Exam

Frequently Asked Questions

Related Questions

COMPTIA A+ Practice Exam

CompTIA - Cloud Essentials+ Certification Practice Exam

CompTIA A+ (220-901) Practice Exam

CompTIA A+ Core 1 (220-1001) Certification Practice Exam

CompTIA A+ Core 1 (220-1101) Certification Practice Exam

CompTIA A+ Core 1 (220-1201) Practice Exam