A developer writes a Python script that automates the creation of Azure network security groups. The script uses a service principal for authentication. What is the best practice for storing the service principal credentials?

Use environment variables or a secure secret store, such as Azure Key Vault.

Hardcode them in the script and restrict access to the script file.

Share them with the team via email for easy access.

Store them in the script as plain text for simplicity.

What is a primary purpose of using a version control system like Git for Infrastructure as Code files?

To automatically deploy infrastructure to production on every commit.

To encrypt the infrastructure code to prevent unauthorized access.

To track changes, enable collaboration, and allow rollback to previous versions.

To compile the code into executable binaries for deployment.

In a CI/CD pipeline for Infrastructure as Code, what is the primary purpose of the continuous integration (CI) stage?

To monitor the performance of deployed infrastructure.

To automatically deploy infrastructure to production.

To validate and test code changes automatically when they are committed.

To manually review code changes before they are merged.

A company is adopting IaC to manage their multi-cloud environment (AWS and Azure). They want to ensure that the same network configuration is applied consistently across both clouds. They also want to integrate this with a CI/CD pipeline. Which tool and approach should they use?

Use AWS CloudFormation for AWS and Azure Resource Manager templates for Azure, and manage them in separate repositories.

Use Ansible to provision the network resources in both clouds, and manage the playbooks in a single Git repository.

Use Terraform with a single configuration that uses providers for both AWS and Azure, and manage it in a single Git repository with a CI/CD pipeline.

Use Terraform with separate configurations for each cloud, and manage them in separate Git repositories.

CompTIACloudNetX

Domain 3Objective 3

Automation CNX-001 Practice Questions (Page 3)

Part of the Network operations, monitoring, and performance domain, which accounts for 16% of the CNX-001 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~10–18 in this domain), expect 3–6 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

8concepts

16%of the exam

Questions 11–15

11application · medium
A developer writes a Python script that automates the creation of Azure network security groups. The script uses a service principal for authentication. What is the best practice for storing the service principal credentials?
Select an answer first
12foundation · medium
What is a primary purpose of using a version control system like Git for Infrastructure as Code files?
Select an answer first
13foundation · medium
In a CI/CD pipeline for Infrastructure as Code, what is the primary purpose of the continuous integration (CI) stage?
Select an answer first
14foundation · medium
Which automation tool is agentless and uses SSH or WinRM to connect to managed nodes, making it suitable for hybrid environments?
Select an answer first
15expert · hard
A company is adopting IaC to manage their multi-cloud environment (AWS and Azure). They want to ensure that the same network configuration is applied consistently across both clouds. They also want to integrate this with a CI/CD pipeline. Which tool and approach should they use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CNX-001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CNX-001” is a trademark of its owner, used for identification only.