A large enterprise is implementing PAM for its cloud infrastructure administrators. The security team requires that administrators use their existing corporate SSO credentials to access the PAM system, and that all privileged actions in the cloud console be recorded. Which PAM integration should the administrator configure?

Create separate PAM accounts for each administrator and require a second password.

Use the cloud provider's native IAM roles and skip PAM.

Configure PAM to use LDAP directly and rely on cloud provider logs for recording.

Integrate PAM with the corporate IdP via SAML and enable session recording for cloud console access.

Which of the following is a common MFA method that generates a time-based one-time password (TOTP)?

Authenticator app on a smartphone

Which component of PKI is used to verify the integrity and authenticity of a digital certificate?

The certificate revocation list (CRL)

The certificate holder's public key

The certificate authority's public key

The certificate holder's private key

Which of the following is a key consideration when deploying SSO in an organization?

Disabling all other authentication methods to force SSO

Storing user passwords in plain text for faster authentication

Ensuring that all applications support the same SSO protocol

Using the same certificate for all applications to simplify management

In a Public Key Infrastructure (PKI), what is the primary function of a Certificate Authority (CA)?

To authenticate users on a network

To issue and digitally sign digital certificates

CompTIACloudNetX

Domain 2Objective 5

IAM Solutions CNX-001 Practice Questions (Page 5)

Part of the Network security domain, which accounts for 28% of the CNX-001 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~18–31 in this domain), expect 3–5 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

8concepts

28%of the exam

Questions 21–25

21expert · hard
A large enterprise is implementing PAM for its cloud infrastructure administrators. The security team requires that administrators use their existing corporate SSO credentials to access the PAM system, and that all privileged actions in the cloud console be recorded. Which PAM integration should the administrator configure?
Select an answer first
22foundation · easy
Which of the following is a common MFA method that generates a time-based one-time password (TOTP)?
Select an answer first
23foundation · easy
Which component of PKI is used to verify the integrity and authenticity of a digital certificate?
Select an answer first
24foundation · easy
Which of the following is a key consideration when deploying SSO in an organization?
Select an answer first
25foundation · easy
In a Public Key Infrastructure (PKI), what is the primary function of a Certificate Authority (CA)?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CNX-001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CNX-001” is a trademark of its owner, used for identification only.