CompTIA CNX-001 valid exam dumps : CompTIA CloudNetX Certification Exam

A network architect is choosing design options for a new SD-WAN installation that has the following requirements:
* All network traffic from the cloud must pass through inspection devices in a dedicated data center.
* Ensure redundancy.
* Centralize egress traffic.
Which of the following network topologies best meets these requirements?

• A. Hub-and-spoke
• B. Partial mesh
• C. Star
• D. Point-to-point

A network architect is designing an expansion solution for the branch office network and requires the following business outcomes:
* Maximize cost savings with reduced administration overhead
* Easily expand connectivity to the cloud
* Use cloud-based services to the branch offices
Which of the following should the architect do to best meet the requirements?

• A. Design a SD-WAN solution to integrate with the cloud provider; use SD-WAN to connect branch offices to the cloud provider.
• B. Design a dark fiber solution for headquarters and branch offices' connectivity; deploy point-to-site VPN between headquarters and the cloud provider; use the headquarters connectivity to the cloud provider.
• C. Design an MPLS architecture for the branch offices and site-to-site VPN between headquarters and branch offices; use site-to-site connectivity to the cloud provider.
• D. Design point-to-site branch connectivity for offices to headquarters; deploy ExpressRoute and/or DirectConnect between headquarters and the cloud; use headquarters connectivity to connect to the cloud provider.

A network engineer is designing a Layer 2 deployment for a company that occupies severalfloors in an office building. The engineer decides to make each floor its own VLAN but still allow for communication between all user VLANs. The engineer also wants to reduce the time necessary for STP convergence to occur when new switches come online. Which of the following should the engineer enable to accomplish this goal?

• A. BPDU Guard
• B. Tagging
• C. Portfast
• D. Priority

A network engineer adds a large group of servers to a screened subnet and configures them to use IPv6 only.
The servers need to seamlessly communicate with IPv4 servers on the internal networks. Which of the following actions is the best way to achieve this goal?

• A. Change the servers in the screened subnet from IPv6 addresses to IPv4 addresses.
• B. Set up a bridge between the screened subnet and internal networks to handle the conversion.
• C. Add IPv6 to the network cards on the internal servers so they can communicate with the screened subnet.
• D. Implement NAT64 on the router between the screened subnet and the internal network.

A network load balancer is not correctly validating a client TLS certificate. The network architect needs to validate the certificate installed on the load balancer before progressing. Which of the following commands should the architect use to confirm whether the private key and certificate match?

• A. openssl x509 -noout -modulus -in cert.crt | openssl md5
  openssl rsa -noout -modulus -in privkey.txt | openssl md5
• B. openssl req -in certificate.csr -verify
  openssl-verify -noout -modulus -in privkey.txt | openssl md5
• C. openssl-list -noout -modulus -in cert.crt | openssl md5
  openssl rsa -noout -modulus -in privkey.txt | openssl md5
• D. openssl-rsa -noout -modulus -in cert.crt | openssl md5
  openssl-verify -noout -modulus -in privkey.txt | openssl md5