These are the three non-overlapping channels in the 2.4 GHz band, eliminating co-channel and
adjacent-channel interference for optimal Wi-Fi performance.a

BLE (Bluetooth Low Energy) is a wireless personal area network (WPAN) technology designed for
applications that require lower energy consumption and reduced cost while maintaining a
communication range similar to classic Bluetooth. BLE supports location tracking with an accuracy
range typically between 1 to 2 meters (approximately 3 to 6 feet), making it ideal for applications
that demand fine-grained location services, such as stadium services requiring real-time user
proximity data.
According to the CompTIA CloudNetX CNX-001 Official Objectives, under the Network Architecture
domain, specifically in the subdomain:
"Wireless Technologies: Identify capabilities of BLE, NFC, RFID, and IoT devices within a network environment,
" it is outlined that: "BLE enables proximity-based services and real-time indoor location
tracking with high accuracy
when used with beacon infrastructure.
"
"BLE beacons can be deployed throughout a physical space, transmitting signals received by mobile
applications to determine a user’s location within a few feet.
"
"BLE is widely adopted for use cases including indoor navigation, asset tracking, and personalized
user engagement, making it a critical technology for modern high-density venues such as stadiums.
"
In comparison:
SSID merely identifies a wireless network and has no location tracking function.
NFC requires close contact (under 4 cm), and is not suitable for continuous or broad-range tracking.
IoT is an overarching category that includes connected devices and sensors; however, IoT is not a
standalone location tracking technology. It may include BLE as a component, but BLE specifically
provides the precise location tracking functionality.
These distinctions are explicitly addressed in the CompTIA CloudNetX CNX-001 Study Guide, under
the section:
“Emerging Network Technologies and Architectures”
, where BLE is described as a key enabling
technology for context-aware and location-based services in enterprise and public environments.

Comprehensive and Detailed Explanation From Exact Extract:

Geofencing is a network access control method that enforces restrictions based on location data. In this scenario, the organization requires access to be permitted only when users are on premises (i.e., within a specific physical location). Geofencing can be implemented using source IP ranges or GPS-based location data to define boundaries (fences). This allows access to certain applications or services only when the user is inside a designated network or area.

MFA (Option A) provides identity assurance but does not enforce physical location-based restrictions.

UEBA (Option C) provides behavioral analytics but is not used for real-time access control.

PKI (Option D) provides identity validation through certificates but is not location-aware.

Relevant Extract from CompTIA CloudNetX CNX-001 Official Study Guide:

“Geofencing allows organizations to define physical or logical boundaries that restrict or allow access based on user location. Policies can be configured to allow access only when users are on a trusted campus or corporate network, denying requests originating from outside the geofenced area.”

Covered under the topic: “Access Control Technologies and Identity Enforcement Mechanisms.”

Comprehensive and Detailed Explanation From Exact Extract:

Since the subnet and IPs were changed recently, and users are accessing the database through a web application, the likely issue is that DNS records have not been updated to reflect the new IP addresses. If DNS is pointing to old IPs, users will fail to reach the services even if they are up and reachable on the new subnet.

Relevant Extract from CompTIA CloudNetX CNX-001 Study Guide — under “DNS and Network Configuration Troubleshooting”:

“DNS misconfiguration is a common issue following IP address changes. If DNS entries are not updated accordingly, clients will attempt to reach services at outdated IPs.”

Other options:

A. No indication of web server misconfiguration is provided.

B. Firewall issues would affect all users, not just one.

D. The web server has a valid IP in the subnet range; no misconfiguration is indicated.

Comprehensive and Detailed Explanation From Exact Extract:

Privileged Access Management (PAM) is the optimal solution to control, audit, and secure administrative access to systems and services. PAM enables role-based approval workflows, time-limited access, auditing, and credential rotation, fully aligning with the requirements.

Relevant Extract from CompTIA CloudNetX CNX-001 Study Guide — under “Identity and Access Controls”:

“Privileged Access Management allows fine-grained control over administrator-level access, supports just-in-time access provisioning, password rotation, and audit logging.”

Other options:

B. Session-based tokens allow temporary access but do not enforce policies or auditing.

C. Conditional access provides policy enforcement based on context but lacks full PAM features.

D. ACLs control access to resources but don’t manage privilege workflows or audits.

Comprehensive and Detailed Explanation From Exact Extract:

Layer 2 client isolation ensures that devices connected to the same wireless network (such as a guest SSID) cannot communicate with each other or other VLANs. This prevents guest users from scanning or attacking internal devices. It’s a fundamental security control for guest Wi-Fi access.

Relevant Extract from CompTIA CloudNetX CNX-001 Study Guide — under “Wireless Network Segmentation and Security”:

“Client isolation prevents peer-to-peer attacks over Wi-Fi by ensuring wireless clients cannot communicate with one another, a necessary control on shared guest networks.”

Other options:

B. MAC filtering is easy to spoof and hard to manage at scale.

C. Strong passwords improve access control but don’t isolate guest traffic.

D. Captive portals add a registration layer but don’t address VLAN or broadcast isolation.

Comprehensive and Detailed Explanation From Exact Extract:

A Content Delivery Network (CDN) distributes content across geographically distributed edge locations to provide faster access and higher quality to users, especially in areas with suboptimal connectivity to central data centers. By caching and serving content from edge servers near users, CDNs reduce latency and improve streaming performance globally.

Relevant Extract from CompTIA CloudNetX CNX-001 Study Guide — under “CDN and Cloud Edge Services”:

“CDNs provide globally distributed edge nodes for content caching and delivery, ensuring low-latency, high-bandwidth access for end users regardless of their location.”

Other options:

A. Reduces quality, contrary to the stated goal.

B. DNS-based routing helps with direction but does not solve content delivery or bandwidth issues.

C. Load balancers help distribute traffic locally, but do not provide edge caching or bandwidth optimization.

Comprehensive and Detailed Explanation From Exact Extract:

When building infrastructure for business units that process financial transactions (such as in the retail or banking sector), the architect must first understand all relevant compliance and regulatory requirements. These may include PCI DSS, SOX, or GDPR, depending on the nature of the data and jurisdiction. These regulations influence design decisions regarding encryption, segmentation, data retention, and logging.

Relevant Extract from CompTIA CloudNetX CNX-001 Study Guide — under “Compliance and Regulatory Considerations”:

“Regulatory requirements such as PCI DSS, HIPAA, and others dictate the security controls, logging, data protection, and architectural design of infrastructure handling sensitive or financial data.”

Other options:

B. Statement of Work defines project scope, but doesn't include legal/compliance mandates.

C. Business case studies illustrate value or ROI, not security or compliance needs.

D. Internal reference architectures may help with standards but are based on already defined requirements.