A company uses MPLS to connect its headquarters and two branch offices. The company is adding a third branch in a remote location where MPLS is not available. The branch needs to access applications in the headquarters and also use the internet. Which solution should the architect implement?

Use a site-to-site VPN from the new branch to headquarters and route internet traffic directly from the branch.

Extend MPLS to the new branch using a virtual circuit over the internet.

Route all traffic from the new branch through the headquarters using a VPN.

Use a cloud-based VPN gateway and connect the new branch directly to the cloud.

What is the primary purpose of a cloud provider's virtual private cloud (VPC) or virtual network (VNet) when connecting to on-premises infrastructure?

To provide an isolated, logically segmented section of the cloud where you can launch resources in a defined network.

To automatically encrypt all traffic between cloud resources.

To provide a public IP address for every resource.

To replace the need for any on-premises hardware.

A network engineer is setting up a site-to-site VPN between an on-premises gateway and a cloud VPN gateway. Which protocol is commonly used to establish the encrypted tunnel and negotiate security associations in this scenario?

Generic Routing Encapsulation (GRE)

Open Shortest Path First (OSPF)

CompTIACloudNetX

Domain 1Objective 3

Hybrid Connectivity CNX-001 Practice Questions (Page 4)

Part of the Network architecture design domain, which accounts for 31% of the CNX-001 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~20–34 in this domain), expect 4–7 from this objective — we provide 20 practice questions to prepare you well beyond it. (estimate)

20questions here

4free pages

4concepts

31%of the exam

Questions 16–20

16application · medium
A company uses MPLS to connect its headquarters and two branch offices. The company is adding a third branch in a remote location where MPLS is not available. The branch needs to access applications in the headquarters and also use the internet. Which solution should the architect implement?
Select an answer first
17foundation · easy
What is the primary purpose of a cloud provider's virtual private cloud (VPC) or virtual network (VNet) when connecting to on-premises infrastructure?
Select an answer first
18foundation · easy
A network engineer is setting up a site-to-site VPN between an on-premises gateway and a cloud VPN gateway. Which protocol is commonly used to establish the encrypted tunnel and negotiate security associations in this scenario?
Select an answer first
19foundation · easy
A remote employee needs to securely access internal corporate resources from a personal laptop. Which VPN type is most appropriate for this use case?
Select an answer first
20foundation · easy
A company wants to dynamically route traffic between multiple branch offices and cloud applications based on real-time network conditions, while also reducing reliance on expensive dedicated circuits. Which technology is designed to provide this capability?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CNX-001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CNX-001” is a trademark of its owner, used for identification only.

Hybrid Connectivity CNX-001 Practice Questions (Page 4)

Questions 16–20

A company uses MPLS to connect its headquarters and two branch offices. The company is adding a third branch in a remote location where MPLS is not available. The branch needs to access applications in the headquarters and also use the internet. Which solution should the architect implement?

What is the primary purpose of a cloud provider's virtual private cloud (VPC) or virtual network (VNet) when connecting to on-premises infrastructure?

A network engineer is setting up a site-to-site VPN between an on-premises gateway and a cloud VPN gateway. Which protocol is commonly used to establish the encrypted tunnel and negotiate security associations in this scenario?

A remote employee needs to securely access internal corporate resources from a personal laptop. Which VPN type is most appropriate for this use case?

A company wants to dynamically route traffic between multiple branch offices and cloud applications based on real-time network conditions, while also reducing reliance on expensive dedicated circuits. Which technology is designed to provide this capability?

Keep studying — Network architecture design