A cloud application is experiencing intermittent timeouts. The network team suspects bandwidth saturation on the interconnect link. Which action would best confirm this suspicion?

Checking the DNS server's cache

Monitoring the link's utilization during peak hours

Reviewing the firewall's security logs

Rebooting the cloud application server

A company uses a cloud interconnect service to connect its on-premises network to a cloud provider. The connection is up, but the administrator notices high latency when transferring large files to cloud storage. The on-premises firewall logs show no dropped packets. What should the administrator check next?

The VPN tunnel's encryption key lifetime.

The cloud storage account's access tier.

The MTU settings on the on-premises router and cloud gateway.

An administrator is configuring a site-to-site VPN and needs to ensure that traffic between the two networks is encrypted. Which setting must be configured on both VPN gateways?

A unique IP address for each gateway's WAN interface

The same DNS server for both networks

A static route to the internet on both gateways

The same pre-shared key or certificate

A remote user's VPN connection drops every 30 minutes. The user can reconnect immediately. The VPN server logs show 'SA expired' messages. The administrator wants to minimize disruption while maintaining security. What should the administrator do?

Change the VPN protocol from IKEv2 to L2TP/IPsec.

Reduce the encryption key size from AES-256 to AES-128.

Disable the VPN client's auto-reconnect feature.

Increase the IKE SA lifetime on both the client and server.

A company is setting up a site-to-site VPN between its on-premises network and a cloud VNet. The on-premises network uses 10.0.0.0/16, and the VNet uses 10.0.0.0/16. The VPN tunnel establishes, but no traffic flows. What is the most likely cause?

The VPN gateway's shared key is incorrect.

The cloud VNet's DNS servers are not configured.

The overlapping IP address ranges prevent proper routing.

The on-premises firewall is blocking ESP protocol.

CompTIACloudNetX

Domain 4Objective 1

Connectivity Issues CNX-001 Practice Questions (Page 5)

Part of the Network troubleshooting domain, which accounts for 25% of the CNX-001 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~16–28 in this domain), expect 5–9 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

6concepts

25%of the exam

Questions 21–25

21foundation · easy
A cloud application is experiencing intermittent timeouts. The network team suspects bandwidth saturation on the interconnect link. Which action would best confirm this suspicion?
Select an answer first
22application · medium
A company uses a cloud interconnect service to connect its on-premises network to a cloud provider. The connection is up, but the administrator notices high latency when transferring large files to cloud storage. The on-premises firewall logs show no dropped packets. What should the administrator check next?
Select an answer first
23foundation · easy
An administrator is configuring a site-to-site VPN and needs to ensure that traffic between the two networks is encrypted. Which setting must be configured on both VPN gateways?
Select an answer first
24expert · hard
A remote user's VPN connection drops every 30 minutes. The user can reconnect immediately. The VPN server logs show 'SA expired' messages. The administrator wants to minimize disruption while maintaining security. What should the administrator do?
Select an answer first
25expert · hard
A company is setting up a site-to-site VPN between its on-premises network and a cloud VNet. The on-premises network uses 10.0.0.0/16, and the VNet uses 10.0.0.0/16. The VPN tunnel establishes, but no traffic flows. What is the most likely cause?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CNX-001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CNX-001” is a trademark of its owner, used for identification only.