A network administrator is setting up a site-to-site VPN between an on-premises network (192.168.1.0/24) and a cloud VNet (10.1.0.0/16). The VPN tunnel establishes successfully, but traffic from the on-premises network cannot reach resources in the VNet. What is the most likely cause?

The on-premises firewall is blocking UDP port 500 and 4500.

The VPN gateway's shared key is incorrect.

The cloud VNet's route table does not have a route for 192.168.1.0/24 pointing to the VPN gateway.

The on-premises VPN device does not support IKEv2.

An organization has two offices connected to a cloud VNet via a hub-and-spoke topology. Office A reports slow performance when accessing a cloud application, while Office B reports no issues. The cloud interconnect links for both offices show 'up' with similar utilization. What should the administrator investigate to find the root cause?

The DNS server configuration for Office B.

The network path from Office A to the cloud, including intermediate ISP hops.

The cloud application's load balancer health probes.

The VPN tunnel encryption settings for Office B.

A company's remote users report that they can access internal applications by IP address but not by hostname. The users are connected via VPN. The VPN tunnel is up, and the internal DNS server is reachable from the client. Which action should the administrator take first to resolve the issue?

Confirm that the VPN tunnel uses IPsec with AES-256 encryption.

Ensure the client's default gateway is set to the VPN gateway's IP address.

Verify that the VPN client's DNS suffix search list includes the internal domain.

Check that the internal DNS server's forwarders are configured to reach the internet.

A remote user reports that the VPN client fails with an error about 'no proposal chosen' during connection. The VPN server logs show the client's IP address. What is the most likely cause of this failure?

The VPN server's IP address has changed.

The client and server do not share a common encryption or hashing algorithm.

The user's account password has expired.

The client's local firewall is blocking UDP port 500.

CompTIACloudNetX

Domain 4Objective 1

Connectivity Issues CNX-001 Practice Questions (Page 4)

Part of the Network troubleshooting domain, which accounts for 25% of the CNX-001 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~16–28 in this domain), expect 5–9 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

6concepts

25%of the exam

Questions 16–20

16application · medium
A network administrator is setting up a site-to-site VPN between an on-premises network (192.168.1.0/24) and a cloud VNet (10.1.0.0/16). The VPN tunnel establishes successfully, but traffic from the on-premises network cannot reach resources in the VNet. What is the most likely cause?
Select an answer first
17expert · hard
An organization has two offices connected to a cloud VNet via a hub-and-spoke topology. Office A reports slow performance when accessing a cloud application, while Office B reports no issues. The cloud interconnect links for both offices show 'up' with similar utilization. What should the administrator investigate to find the root cause?
Select an answer first
18foundation · easy
Users report slow performance when accessing a cloud application. The network team suspects the issue is related to the cloud interconnectivity link. Which tool is most appropriate to measure latency and packet loss on the link?
Select an answer first
19application · medium
A company's remote users report that they can access internal applications by IP address but not by hostname. The users are connected via VPN. The VPN tunnel is up, and the internal DNS server is reachable from the client. Which action should the administrator take first to resolve the issue?
Select an answer first
20application · medium
A remote user reports that the VPN client fails with an error about 'no proposal chosen' during connection. The VPN server logs show the client's IP address. What is the most likely cause of this failure?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CNX-001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CNX-001” is a trademark of its owner, used for identification only.

Connectivity Issues CNX-001 Practice Questions (Page 4)

Questions 16–20

A network administrator is setting up a site-to-site VPN between an on-premises network (192.168.1.0/24) and a cloud VNet (10.1.0.0/16). The VPN tunnel establishes successfully, but traffic from the on-premises network cannot reach resources in the VNet. What is the most likely cause?

Users report slow performance when accessing a cloud application. The network team suspects the issue is related to the cloud interconnectivity link. Which tool is most appropriate to measure latency and packet loss on the link?

A company's remote users report that they can access internal applications by IP address but not by hostname. The users are connected via VPN. The VPN tunnel is up, and the internal DNS server is reachable from the client. Which action should the administrator take first to resolve the issue?

A remote user reports that the VPN client fails with an error about 'no proposal chosen' during connection. The VPN server logs show the client's IP address. What is the most likely cause of this failure?

Keep studying — Network troubleshooting