CompTIA CloudNetX Certification - CNX-001 模擬練習
A network administrator needs to resolve connectivity issues in a hybrid cloud setup. Workstations and VMs are not able to access Application A. Workstations are able to access Server B.
INSTRUCTIONS
Click on workstations, VMs, firewalls, and NSGs to troubleshoot and gather information. Type help in the terminal to view a list of available commands.
Select the appropriate device(s) requiring remediation and identify the associated issue(s).
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
INSTRUCTIONS
Click on workstations, VMs, firewalls, and NSGs to troubleshoot and gather information. Type help in the terminal to view a list of available commands.
Select the appropriate device(s) requiring remediation and identify the associated issue(s).
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
正解:
See explanation below.
Explanation:
Firewalls # VPN tunnel down
The IPsec tunnel between on-prem Firewall 1 and cloud Firewall 2 (ipip0/ipip2) is down, so no traffic can traverse to the cloud.
Application NSG # Misconfigured rule
There's a "block" rule for 10.3.9.0/24 # 192.2.1.0/24, preventing legitimate on-prem clients from reaching Application A.
Explanation:
Firewalls # VPN tunnel down
The IPsec tunnel between on-prem Firewall 1 and cloud Firewall 2 (ipip0/ipip2) is down, so no traffic can traverse to the cloud.
Application NSG # Misconfigured rule
There's a "block" rule for 10.3.9.0/24 # 192.2.1.0/24, preventing legitimate on-prem clients from reaching Application A.
An organization's Chief Technical Officer is concerned that changes to the network using IaC are causing unscheduled outages. Which of the following best mitigates this risk?
正解: B
解説: (PassTest メンバーにのみ表示されます)
Application development team users are having issues accessing the database server within the cloud environment. All other users are able to use SSH to access this server without issues. The network architect reviews the following information to troubleshoot the issue:
Traceroute output from an application developer's machine with the assigned IP 192.168.2.7:
* Application development gateway: 192.168.2.1/24
* Server segment gateway: 192.168.1.1/24
* Database server: 192.168.1.9
* Application developer machine IP: 192.168.2.7
* Traceroute ends at hop 4: 192.168.4.1 (server segment firewall), then times out Which of the following is the most likely cause of the issue?
Traceroute output from an application developer's machine with the assigned IP 192.168.2.7:
* Application development gateway: 192.168.2.1/24
* Server segment gateway: 192.168.1.1/24
* Database server: 192.168.1.9
* Application developer machine IP: 192.168.2.7
* Traceroute ends at hop 4: 192.168.4.1 (server segment firewall), then times out Which of the following is the most likely cause of the issue?
正解: A
解説: (PassTest メンバーにのみ表示されます)
A network engineer needs to implement a cloud-native solution. The solution must allow the recording of network conversation metadata of the host and appliances attached to a VPC. Which of the following will accomplish these goals with the least effort?
正解: C
解説: (PassTest メンバーにのみ表示されます)
An application is hosted on a three-node cluster in which each server has identical compute and network performance specifications. A fourth node is scheduled to be added to the cluster with three times the performance as any one of the preexisting nodes. The network architect wants to ensure that the new node gets the same approximate number of requests as all of the others combined. Which of the following load- balancing methodologies should the network architect recommend?
正解: D
解説: (PassTest メンバーにのみ表示されます)
A company is expanding its network and needs to ensure improved stability and reliability. The proposed solution must fulfill the following requirements:
* Detection and prevention of network loops
* Automatic configuration of ports
* Standard protocol (not proprietary)
Which of the following protocols is the most appropriate?
* Detection and prevention of network loops
* Automatic configuration of ports
* Standard protocol (not proprietary)
Which of the following protocols is the most appropriate?
正解: B
解説: (PassTest メンバーにのみ表示されます)
A network architect is designing a solution to place network core equipment in a rack inside a data center.
This equipment is crucial to the enterprise and must be as secure as possible to minimize the chance that anyone could connect directly to the network core. The current security setup is:
* In a locked building that requires sign in with a guard and identification check.
* In a locked data center accessible by a proximity badge and fingerprint scanner.
* In a locked cabinet that requires the security guard to call the Chief Information Security Officer (CISO) to get permission to provide the key.
Which of the following additional measures should the architect recommend to make this equipment more secure?
This equipment is crucial to the enterprise and must be as secure as possible to minimize the chance that anyone could connect directly to the network core. The current security setup is:
* In a locked building that requires sign in with a guard and identification check.
* In a locked data center accessible by a proximity badge and fingerprint scanner.
* In a locked cabinet that requires the security guard to call the Chief Information Security Officer (CISO) to get permission to provide the key.
Which of the following additional measures should the architect recommend to make this equipment more secure?
正解: D
解説: (PassTest メンバーにのみ表示されます)
A network architect is designing an expansion solution for the branch office network and requires the following business outcomes:
* Maximize cost savings with reduced administration overhead
* Easily expand connectivity to the cloud
* Use cloud-based services to the branch offices
Which of the following should the architect do to best meet the requirements?
* Maximize cost savings with reduced administration overhead
* Easily expand connectivity to the cloud
* Use cloud-based services to the branch offices
Which of the following should the architect do to best meet the requirements?
正解: B
解説: (PassTest メンバーにのみ表示されます)
A company just launched a cloud-based application. Some users are reporting the application will not load. A cloud engineer investigates the issues and reports the following:
* Not all users are experiencing the issue
* The application infrastructure is optimal
* Users experiencing the issue belong to the company's remote sales team Which of the following is most likely misconfigured?
* Not all users are experiencing the issue
* The application infrastructure is optimal
* Users experiencing the issue belong to the company's remote sales team Which of the following is most likely misconfigured?
正解: C
解説: (PassTest メンバーにのみ表示されます)