A network architect must design a new branch network that meets the following requirements:* No single point of failure* Clients cannot be impacted by changes to the underlying medium* Clients must be able to communicate directly to preserve bandwidthWhich of the following network topologies should the architect use?
Answer(s): B
A full-mesh topology gives every node redundant paths to every other node, eliminating any single point of failure, and lets clients communicate directly over the optimal link without depending on an intermediate hub or core.
An administrator logged in to a cloud account on a shared machine but forgot to log out after the session ended. Which of the following types of security threats does this action pose?
Answer(s): C
By leaving an active session open on a shared machine, an attacker with access to that machine can intercept or hijack the administrator's session tokens or credentials - classic on-path behavior - allowing them to impersonate the admin without needing elevated exploits.
A network engineer is designing a Layer 2 deployment for a company that occupies several floors in an office building. The engineer decides to make each floor its own VLAN but still allow for communication between all user VLANs. The engineer also wants to reduce the time necessary for STP convergence to occur when new switches come online. Which of the following should the engineer enable to accomplish this goal?
Answer(s): D
Enabling PortFast on access ports lets them immediately enter the forwarding state, skipping the STP listening/learning timers, and dramatically speeds up convergence when switches or end-stations come online.
After a malicious actor used an open port in a company's lobby, a network architect needs to enhance network security. The solution must enable:Security posture checkAuto remediation capabilitiesNetwork isolationDevice and user authenticationWhich of the following technologies best meets these requirements?
NAC solutions perform health-and-posture assessments before granting network access,authenticate both devices and users, automatically quarantine or remediate noncompliant machines, and enforce dynamic isolation policies, fully satisfying all four requirements.
A company deployed new applications in the cloud and configured a site-to-site VPN to connect the internal data center with the cloud. The IT team wants the internal servers to connect to those applications without using public IP addresses. Which of the following is the best solution?
Answer(s): A
By forwarding only the cloud application DNS queries to a cloud-hosted DNS zone that returns private IP addresses, your internal servers will resolve and connect over the site-to-site VPN without ever touching public IPs.
Post your Comments and Discuss CompTIA CNX-001 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CNX-001 content, but please register or login to continue.