A company is connecting its on-premises network to a public cloud using a site-to-site VPN. The company wants to ensure that only specific subnets in the cloud are reachable from on-premises. Which configuration should the architect implement?

Configure static routes on the on-premises router to send all traffic to the cloud.

Configure the VPN tunnel with a local network gateway that specifies the on-premises subnets and a virtual network gateway that specifies the cloud subnets.

Use a public IP address for the cloud subnets and allow access from on-premises.

Create a network security group (NSG) on the cloud subnets and allow all traffic from the VPN.

A company wants to establish a dedicated, private connection from its on-premises data center to a public cloud provider, bypassing the public internet. Which service is designed for this purpose?

Site-to-site VPN over the internet

Direct Connect (AWS) or ExpressRoute (Azure)

What is a primary benefit of using SD-WAN over traditional WAN technologies like MPLS?

It can use multiple transport types, such as broadband and LTE, to increase resilience and reduce cost.

It eliminates the need for any security measures.

It guarantees zero packet loss on all connections.

It requires dedicated physical circuits at every site.

A company with a single on-premises data center needs to connect its headquarters to a public cloud VPC. The security team requires all traffic to be encrypted in transit and the connection to be resilient to a single ISP failure. The company has a limited budget and cannot justify a dedicated physical connection. Which solution should the network architect implement?

Use a cloud VPN gateway with a single tunnel and enable dead peer detection.

Deploy a single site-to-site VPN tunnel over the primary ISP connection.

Establish two site-to-site VPN tunnels over the internet from two different ISP links to the cloud VPC.

Provision a dedicated ExpressRoute/Direct Connect circuit with a single connection.

A company is migrating a mission-critical application to a public cloud. The application requires low and consistent latency to on-premises systems. The company has a moderate budget and wants to avoid internet-based connectivity. Which connectivity option should the architect choose?

Provision a dedicated private connection such as Azure ExpressRoute or AWS Direct Connect.

Use a site-to-site VPN over the public internet.

Create a public endpoint and access the cloud application over the internet.

Use a cloud VPN gateway with multiple tunnels for redundancy.

CompTIACloudNetX

Domain 1Objective 3

Hybrid Connectivity CNX-001 Practice Questions (Page 1)

Part of the Network architecture design domain, which accounts for 31% of the CNX-001 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~20–34 in this domain), expect 4–7 from this objective — we provide 20 practice questions to prepare you well beyond it. (estimate)

20questions here

4free pages

4concepts

31%of the exam

Questions 1–5

1application · medium
A company is connecting its on-premises network to a public cloud using a site-to-site VPN. The company wants to ensure that only specific subnets in the cloud are reachable from on-premises. Which configuration should the architect implement?
Select an answer first
2foundation · easy
A company wants to establish a dedicated, private connection from its on-premises data center to a public cloud provider, bypassing the public internet. Which service is designed for this purpose?
Select an answer first
3foundation · easy
What is a primary benefit of using SD-WAN over traditional WAN technologies like MPLS?
Select an answer first
4application · medium
A company with a single on-premises data center needs to connect its headquarters to a public cloud VPC. The security team requires all traffic to be encrypted in transit and the connection to be resilient to a single ISP failure. The company has a limited budget and cannot justify a dedicated physical connection. Which solution should the network architect implement?
Select an answer first
5application · medium
A company is migrating a mission-critical application to a public cloud. The application requires low and consistent latency to on-premises systems. The company has a moderate budget and wants to avoid internet-based connectivity. Which connectivity option should the architect choose?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CNX-001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CNX-001” is a trademark of its owner, used for identification only.