What is a common method for integrating NAC with an existing network infrastructure?

Using NAC to provide load balancing for web servers

Using 802.1X authentication on network switches and wireless access points

Configuring NAC to encrypt all traffic on the network

Replacing all switches with NAC appliances

A company's security team notices unusual outbound traffic from a server to an unknown IP address on port 443. They suspect the server may be compromised and communicating with a command-and-control server. The firewall logs show the traffic is allowed by an existing rule. What should the team do first?

Immediately block all outbound traffic on port 443.

Disable the firewall rule that allows outbound traffic on port 443.

Ignore the traffic because it is on port 443, which is commonly used for HTTPS.

Review the firewall logs to identify the source and destination of the traffic and then create a temporary rule to block the specific IP address.

Why is regular key rotation important in encryption key management?

To reduce the risk of key compromise and limit the impact of a breach

To increase the speed of encryption operations

To eliminate the need for access control on keys

To reduce the storage space required for encrypted data

Why is it beneficial to integrate NAC with an organization's existing directory service (e.g., Active Directory)?

To automatically encrypt all user data on the network

To replace the directory service with NAC's built-in user database

To leverage existing user credentials for authentication and policy enforcement

To provide a backup of the directory database

A university wants to allow students to connect their personal laptops to the campus Wi-Fi, but only if the devices have up-to-date antivirus software and the latest operating system patches. The IT department needs to enforce this policy automatically. What should they configure?

Configure a NAC policy that checks device posture and quarantines non-compliant devices.

Use a VPN that requires a valid student ID and password.

Set up a firewall rule that blocks all traffic from unknown MAC addresses.

Require students to register their devices with the IT department manually.

CompTIACloudNetX

Domain 2Objective 2

Security Technologies CNX-001 Practice Questions (Page 4)

Part of the Network security domain, which accounts for 28% of the CNX-001 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~18–31 in this domain), expect 3–5 from this objective — we provide 23 practice questions to prepare you well beyond it. (estimate)

23questions here

5free pages

9concepts

28%of the exam

Questions 16–20

16foundation · easy
What is a common method for integrating NAC with an existing network infrastructure?
Select an answer first
17application · medium
A company's security team notices unusual outbound traffic from a server to an unknown IP address on port 443. They suspect the server may be compromised and communicating with a command-and-control server. The firewall logs show the traffic is allowed by an existing rule. What should the team do first?
Select an answer first
18foundation · easy
Why is regular key rotation important in encryption key management?
Select an answer first
19foundation · easy
Why is it beneficial to integrate NAC with an organization's existing directory service (e.g., Active Directory)?
Select an answer first
20application · medium
A university wants to allow students to connect their personal laptops to the campus Wi-Fi, but only if the devices have up-to-date antivirus software and the latest operating system patches. The IT department needs to enforce this policy automatically. What should they configure?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CNX-001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CNX-001” is a trademark of its owner, used for identification only.