CompTIA CloudNetX CNX-001 Exam Questions
Preparing for the CNX-001 exam is simple with CertsPoint. We offer easy-to-understand study materials that help you learn the most important exam topics. You can study using our PDF questions, practice online with a real exam-style test, or use the desktop practice software. Choose the study method that works best for you and prepare at your own pace.
At CertsPoint, we keep our CNX-001 practice questions up to date. Whenever the exam syllabus or objectives change, we update our study materials so you always learn the latest topics. This helps you save time, avoid outdated content, and feel more confident when you take your exam.
After a company migrated all services to the cloud, the security auditor discovers many users have administrator roles on different services. The company needs a solution that:
Protects the services on the cloud
Limits access to administrative roles
Creates a policy to approve requests for administrative roles on critical services within a limited time
Forces password rotation for administrative roles
Audits usage of administrative roles
Which of the following is the best way to meet the company's requirements?
Correct Answer: A
Comprehensive and Detailed Explanation From Exact Extract:
Privileged Access Management (PAM) is the optimal solution to control, audit, and secure administrative access to systems and services. PAM enables role-based approval workflows, time-limited access, auditing, and credential rotation, fully aligning with the requirements.
Relevant Extract from CompTIA CloudNetX CNX-001 Study Guide — under “Identity and Access Controls”:
“Privileged Access Management allows fine-grained control over administrator-level access, supports just-in-time access provisioning, password rotation, and audit logging.”
Other options:
B. Session-based tokens allow temporary access but do not enforce policies or auditing.
C. Conditional access provides policy enforcement based on context but lacks full PAM features.
D. ACLs control access to resources but don’t manage privilege workflows or audits.
A network engineer is setting up guest access on a Wi-Fi network. After a recent network analysis, the engineer discovered that a user could access the guest network and attack the corporate network, since the networks share the same VLAN. Which of the following should the engineer do to prevent an attack like this one from happening?
Correct Answer: A
Comprehensive and Detailed Explanation From Exact Extract:
Layer 2 client isolation ensures that devices connected to the same wireless network (such as a guest SSID) cannot communicate with each other or other VLANs. This prevents guest users from scanning or attacking internal devices. It’s a fundamental security control for guest Wi-Fi access.
Relevant Extract from CompTIA CloudNetX CNX-001 Study Guide — under “Wireless Network Segmentation and Security”:
“Client isolation prevents peer-to-peer attacks over Wi-Fi by ensuring wireless clients cannot communicate with one another, a necessary control on shared guest networks.”
Other options:
B. MAC filtering is easy to spoof and hard to manage at scale.
C. Strong passwords improve access control but don’t isolate guest traffic.
D. Captive portals add a registration layer but don’t address VLAN or broadcast isolation.
A large commercial enterprise that runs a global video streaming platform recently acquired a small business that serves customers in a geographic area with limited connectivity to the global telecommunications infrastructure. The executive leadership team issued a mandate to deliver the highest possible video streaming quality to all customers around the world. Which of the following solutions should the enterprise architect suggest to meet the requirements?
Correct Answer: D
Comprehensive and Detailed Explanation From Exact Extract:
A Content Delivery Network (CDN) distributes content across geographically distributed edge locations to provide faster access and higher quality to users, especially in areas with suboptimal connectivity to central data centers. By caching and serving content from edge servers near users, CDNs reduce latency and improve streaming performance globally.
Relevant Extract from CompTIA CloudNetX CNX-001 Study Guide — under “CDN and Cloud Edge Services”:
“CDNs provide globally distributed edge nodes for content caching and delivery, ensuring low-latency, high-bandwidth access for end users regardless of their location.”
Other options:
A. Reduces quality, contrary to the stated goal.
B. DNS-based routing helps with direction but does not solve content delivery or bandwidth issues.
C. Load balancers help distribute traffic locally, but do not provide edge caching or bandwidth optimization.
A network architect needs to build a new data center for a large company that has business units that process retail financial transactions. Which of the following information should the architect request from the company?
Correct Answer: A
Comprehensive and Detailed Explanation From Exact Extract:
When building infrastructure for business units that process financial transactions (such as in the retail or banking sector), the architect must first understand all relevant compliance and regulatory requirements. These may include PCI DSS, SOX, or GDPR, depending on the nature of the data and jurisdiction. These regulations influence design decisions regarding encryption, segmentation, data retention, and logging.
Relevant Extract from CompTIA CloudNetX CNX-001 Study Guide — under “Compliance and Regulatory Considerations”:
“Regulatory requirements such as PCI DSS, HIPAA, and others dictate the security controls, logging, data protection, and architectural design of infrastructure handling sensitive or financial data.”
Other options:
B. Statement of Work defines project scope, but doesn't include legal/compliance mandates.
C. Business case studies illustrate value or ROI, not security or compliance needs.
D. Internal reference architectures may help with standards but are based on already defined requirements.