CNX-001 practice questions, page 2 of 4, with answer review and explanations.
Question 6
A company hosts a cloud-based e-commerce application and only wants the application accessed from certain locations. The network team configures a cloud firewall with WAF enabled, but users can access the application globally. Which of the following should the network team do?
Reconfigure WAF rules.
Configure a NAT gateway.
Implement a CDN.
Configure geo-restriction.
Question 7
A network architect must ensure only certain departments can access specific resources while on premises. Those same users cannot be allowed to access those resources once they have left campus. Which of the following would ensure access is provided according to these requirements?
Enabling MFA for only those users within the departments needing access
Configuring geofencing with the IPs of the resources
Configuring UEBA to monitor all access to those resources during non-business hours
Implementing a PKI-based authentication system to ensure access
Question 8
A security architect needs to increase the security controls around computer hardware installations. The requirements are: Auditable access logs to computer rooms Alerts for unauthorized access attempts Remote visibility to the inside of computer rooms Which of the following controls best meet these requirements? (Choose two.)
Video surveillance
NFC access cards
Motion sensors
Locks and keys
Security patrols
Automated lighting
Question 9
A network security engineer must secure a web application running on virtual machines in a public cloud. The virtual machines are behind an application load balancer. Which of the following technologies should the engineer use to secure the virtual machines? (Choose two.)
CDN
DLP
IDS
WAF
SIEM
NSG
Question 10
A company is expanding operations and opening a new facility. The executive leadership team decides to purchase an insurance policy that will cover the cost of rebuilding the facility in case of a natural disaster. Which of the following describes the team's decision?