What is a common mitigation for vulnerabilities in a hybrid cloud environment?

Using the same password for all accounts

Encrypting data in transit between on-premises and cloud

Which access control mechanism uses a set of rules that define what each user or group can do on a network resource?

Network Address Translation (NAT)

A company is migrating a legacy application to a hybrid cloud environment. The application uses a database that is currently on-premises. The security team wants to ensure that data transferred between the cloud application and the on-premises database is encrypted. However, the application does not support native encryption. Which approach should be used?

Use a database proxy that supports encryption.

Use a TLS termination proxy in front of the application.

Use a VPN to encrypt all traffic between the cloud and on-premises.

Use a firewall rule to allow only encrypted traffic.

Which access control method restricts network access based on the user's role within the organization?

DAC (Discretionary Access Control)

RBAC (Role-Based Access Control)

ABAC (Attribute-Based Access Control)

Which vulnerability is specific to hybrid cloud environments?

Insecure APIs used to manage cloud resources

Misconfigured network connections between on-premises and cloud

Weak passwords on user accounts

CompTIACloudNetX

Domain 4Objective 3

Security Challenges CNX-001 Practice Questions (Page 1)

Part of the Network troubleshooting domain, which accounts for 25% of the CNX-001 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~16–28 in this domain), expect 5–9 from this objective — we provide 15 practice questions to prepare you well beyond it. (estimate)

15questions here

3free pages

6concepts

25%of the exam

Questions 1–5

1foundation · easy
What is a common mitigation for vulnerabilities in a hybrid cloud environment?
Select an answer first
2foundation · easy
Which access control mechanism uses a set of rules that define what each user or group can do on a network resource?
Select an answer first
3expert · hard
A company is migrating a legacy application to a hybrid cloud environment. The application uses a database that is currently on-premises. The security team wants to ensure that data transferred between the cloud application and the on-premises database is encrypted. However, the application does not support native encryption. Which approach should be used?
Select an answer first
4foundation · easy
Which access control method restricts network access based on the user's role within the organization?
Select an answer first
5foundation · easy
Which vulnerability is specific to hybrid cloud environments?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CNX-001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CNX-001” is a trademark of its owner, used for identification only.