A cloud network administrator is performing a risk identification exercise. Which activity is most directly associated with this phase?

Cataloging potential threats and vulnerabilities that could affect the network

Determining the financial cost of a potential data breach

Implementing a firewall rule to block malicious traffic

Reviewing the SLA to ensure uptime requirements are met

A company's incident response plan includes a runbook for a distributed denial-of-service (DDoS) attack. The plan instructs the team to contact the cloud provider to enable DDoS protection. However, the team discovers that the provider's DDoS protection is not enabled by default and requires a configuration change. What is the best way to improve the incident response plan?

Enable DDoS protection proactively as a preventive measure

Update the runbook to include the configuration steps

Add a step to the runbook to verify DDoS protection is enabled

Train the team on how to enable DDoS protection during an attack

In a risk assessment, a cloud team evaluates a risk as having a high likelihood of occurring and a high potential impact on business operations. How should this risk be prioritized?

As a medium-priority risk to be monitored

As a low-priority risk that can be accepted

As a risk that should be ignored because it is unlikely to happen

As a high-priority risk requiring immediate attention

A company uses a cloud provider's managed Kubernetes service. The network team is concerned about the risk of a misconfigured NetworkPolicy allowing unwanted traffic between pods. They want to implement a mitigation strategy that provides ongoing protection. Which approach best mitigates this risk?

Conduct a one-time security audit of all NetworkPolicies

Rely on the cloud provider's default security

Disable NetworkPolicies to simplify the environment

Implement a policy-as-code pipeline that tests NetworkPolicy changes before deployment

CompTIACloudNetX

Domain 3Objective 1

Operations Management CNX-001 Practice Questions (Page 2)

Part of the Network operations, monitoring, and performance domain, which accounts for 16% of the CNX-001 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~10–18 in this domain), expect 3–6 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

10concepts

16%of the exam

Questions 6–10

6foundation · easy
A cloud network administrator is performing a risk identification exercise. Which activity is most directly associated with this phase?
Select an answer first
7expert · hard
A company's incident response plan includes a runbook for a distributed denial-of-service (DDoS) attack. The plan instructs the team to contact the cloud provider to enable DDoS protection. However, the team discovers that the provider's DDoS protection is not enabled by default and requires a configuration change. What is the best way to improve the incident response plan?
Select an answer first
8foundation · easy
In a risk assessment, a cloud team evaluates a risk as having a high likelihood of occurring and a high potential impact on business operations. How should this risk be prioritized?
Select an answer first
9application · medium
A company uses a cloud provider's managed Kubernetes service. The network team is concerned about the risk of a misconfigured NetworkPolicy allowing unwanted traffic between pods. They want to implement a mitigation strategy that provides ongoing protection. Which approach best mitigates this risk?
Select an answer first
10foundation · easy
Which phase is typically part of an incident response process?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CNX-001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CNX-001” is a trademark of its owner, used for identification only.

Operations Management CNX-001 Practice Questions (Page 2)

Questions 6–10

A cloud network administrator is performing a risk identification exercise. Which activity is most directly associated with this phase?

In a risk assessment, a cloud team evaluates a risk as having a high likelihood of occurring and a high potential impact on business operations. How should this risk be prioritized?

A company uses a cloud provider's managed Kubernetes service. The network team is concerned about the risk of a misconfigured NetworkPolicy allowing unwanted traffic between pods. They want to implement a mitigation strategy that provides ongoing protection. Which approach best mitigates this risk?

Which phase is typically part of an incident response process?

Keep studying — Network operations, monitoring, and performance