A company is planning to migrate a legacy application to a hybrid cloud environment. The application currently uses unencrypted HTTP and has a hardcoded database password. The security team wants to address vulnerabilities before migration. Which set of actions should be taken?

Enable HTTPS and store the database password in a plain text configuration file.

Use HTTP and move the database password to a secure secrets management service.

Enable HTTPS and keep the hardcoded password for compatibility.

Enable HTTPS and move the database password to a secure secrets management service.

A user reports that they cannot access a service through the firewall. The firewall logs show the traffic was denied. What is the most likely cause?

A deny rule is matching the traffic

What is a key security measure for protecting applications in a hybrid cloud environment?

Disabling security monitoring in the cloud

Relying solely on the cloud provider's security

Using different security policies for each environment

Implementing consistent security policies across on-premises and cloud

A company has a firewall that is configured to allow inbound traffic on port 443 to a web server. Users report that they can access the website from the internal network but not from the internet. The firewall has a rule allowing 0.0.0.0/0 on port 443. What should the administrator check first?

Check if the web server's firewall is blocking port 443.

Check if the web server is listening on port 443.

Check if the firewall has a NAT rule to forward traffic to the web server.

Check if the web server is configured with a public IP address.

What is the primary purpose of a RADIUS server in an access control system?

To encrypt all data on the network

To provide centralized authentication, authorization, and accounting for network access

To assign IP addresses to devices

CompTIACloudNetX

Domain 4Objective 3

Security Challenges CNX-001 Practice Questions (Page 3)

Part of the Network troubleshooting domain, which accounts for 25% of the CNX-001 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~16–28 in this domain), expect 5–9 from this objective — we provide 15 practice questions to prepare you well beyond it. (estimate)

15questions here

3free pages

6concepts

25%of the exam

Questions 11–15

11application · medium
A company is planning to migrate a legacy application to a hybrid cloud environment. The application currently uses unencrypted HTTP and has a hardcoded database password. The security team wants to address vulnerabilities before migration. Which set of actions should be taken?
Select an answer first
12foundation · easy
A user reports that they cannot access a service through the firewall. The firewall logs show the traffic was denied. What is the most likely cause?
Select an answer first
13foundation · easy
What is a key security measure for protecting applications in a hybrid cloud environment?
Select an answer first
14application · medium
A company has a firewall that is configured to allow inbound traffic on port 443 to a web server. Users report that they can access the website from the internal network but not from the internet. The firewall has a rule allowing 0.0.0.0/0 on port 443. What should the administrator check first?
Select an answer first
15foundation · easy
What is the primary purpose of a RADIUS server in an access control system?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CNX-001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CNX-001” is a trademark of its owner, used for identification only.