Online Access Free CNX-001 Exam Questions

Security policy states that all inbound traffic to the environment needs to be restricted, but all external outbound traffic is allowed within the hybrid cloud environment. A new application server was recently set up in the cloud. Which of the following would most likely need to be configured so that the server has the appropriate access set up? (Choose two.)

• A.IPS
• B.Application gateway
• C.Port security
• D.Network security group
• E.Screened subnet
• F.Firewall

After a malicious actor used an open port in a company's lobby, a network architect needs to enhance network security. The solution must enable:
* Security posture check
* Auto remediation capabilities
* Network isolation
* Device and user authentication
Which of the following technologies best meets these requirements?

• A.IPS
• B.802.1X
• C.Microsegmentation
• D.NAC

A company is transitioning from on-premises to a hybrid environment. Due to regulatory standards, the company needs to achieve a high level of reliability and high availability for the connection between its data center and the cloud provider. Which of the following solutions best meets the requirements?

• A.Establish a Direct Connect with the cloud provider and a redundant connection with a VPN over the internet.
• B.Establish a Direct Connect with the cloud provider and peer to two different VPCs in the cloud network.
• C.Establish a VPN with two tunnels to a transit gateway at the cloud provider.
• D.Establish two Direct Connect connections to the cloud provider using two different suppliers.

You are designing a campus network with a three-tier hierarchy and need to ensure secure connectivity between locations and traveling employees.
INSTRUCTIONS
Review the command output by clicking on the server, laptops, and workstations on the network.
Use the drop-down menus to determine the appropriate technology and label for each layer on the diagram.
Options may only be used once.
Click on the magnifying glass to make additional configuration changes.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

Correct Answer:

A network engineer needs to implement a cloud-native solution. The solution must allow the recording of network conversation metadata of the host and appliances attached to a VPC. Which of the following will accomplish these goals with the least effort?

• A.Installing a cloud monitoring agent
• B.Enabling network flow
• C.Configuring SNMP traps
• D.Implementing QoS network tagging