CNX-001 Free Practice Test

End users are getting certificate errors and are unable to connect to an application deployed in a cloud. The application requires HTTPS connection. A network solution architect finds that a firewall is deployed between end users and the application in the cloud. Which of the following is the root cause of the issue?

1. A. The firewall on the application server has port 443 blocked.
2. B. The firewall has port 443 blocked while SSL/HTTPS inspection is enabled.
3. C. The end users do not have certificates on their laptops.
4. D. The firewall has an expired certificate while SSL/HTTPS inspection is enabled.

Correct Answer: D
When SSL inspection is turned on, the firewall intercepts and re-signs HTTPS traffic with its own certificate. If that certificate has expired, end users will see certificate errors even though port 443 is open and the backend application??s certificate is valid.

A company hosts its application s on the cloud and is expanding its business to Europe. The company must comply with General Data Protection Regulation to limit European customers' access to data. The network team configures the firewall rules but finds that some customers in the United States can access data hosted in Europe. Which of the following is the best option for the network team to configure?

1. A. SASE
2. B. Network security groups
3. C. CDN
4. D. Geofencing rule

Correct Answer: D
Using a geofencing (georestriction) policy lets you block or allow traffic based on the client??s geographic location. This ensures that only users in approved regions (e.g., the United States) can reach the European-hosted data, effectively preventing unintended European customer access without complex IP ACLs.

HOTSPOT
New devices were deployed on a network and need to be hardened.
INSTRUCTIONS
Use the drop-down menus to define the appliance-hardening techniques that provide the
mostsecure solution.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

Solution:
C:UsersWaqas ShahidDesktopMudassirUntitled.jpg

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

A network engineer at an e-commerce organization must improve the following dashboard due to a performance issue on the website:

Which of the following is themostuseful information to add to the dashboard for the operations team's?

1. A. 404 errors
2. B. Concurrent users
3. C. Number of orders
4. D. Number of active incidents

Correct Answer: B
Adding a concurrent-user count gives you the key context you??re missing: it ties spikes in CPU, memory, disk I/O, and network traffic directly to how many people are actively hitting the site. You can then see whether performance issues align with increases in user load, enabling more targeted capacity planning and troubleshooting.

A company is experiencing numerous network issues and decides to expand its support team. The new junior employees will need to be onboarded in the shortest time possible and be able to troubleshoot issues with minimal assistance. Which of the following should the company create to achieve this goal?

1. A. Statement of work documenting what each junior employee should do when troubleshooting
2. B. Clearly documented runbooks for networking issues and knowledge base articles
3. C. Physical and logical network diagrams of the entire networking infrastructure
4. D. A mentor program for guiding each junior employee until they are familiar with the networking infrastructure

Correct Answer: B
Runbooks provide step-by-step troubleshooting procedures, and a solid knowledge base captures known issues and resolutions. Together they let new team members ramp up quickly and resolve common network problems with minimal hand-holding.