CompTIA CNX-001: CompTIA CloudNetX

Last checked November 10, 2026 against the official CompTIA exam page.

1. Question 1Network architecture design

   Following a merger, an engineer must connect two offices that both use the 10.20.0.0/16 range internally. Neither network can be renumbered before the project deadline. Which approach allows the offices to communicate?

   1. AAdvertise both identical prefixes unchanged so routers choose the closest path
   2. BPlace a firewall between the offices that blocks all traffic from the shared range
   3. CTranslate the overlapping addresses at the interconnect with NAT and route the mapped ranges
   4. DWiden the subnet mask on the core switches so both overlapping ranges merge into a single broadcast domain
   Show answer and explanationHide answer

   Correct answer: C

   Network address translation at the boundary lets overlapping private ranges coexist by presenting mapped addresses that do not collide. Advertising identical prefixes creates ambiguous routes, removing routes breaks connectivity, and widening masks changes the addressing plan without solving the overlap.

2. Question 2Network security

   What capability distinguishes a stateful firewall from a stateless packet filter?

   1. AIt assigns IP addresses to clients on the internal network
   2. BIt encrypts traffic flowing between two hosts on the same segment
   3. CIt tracks connection state so replies match an open session
   4. DIt filters only on destination MAC address and ignores the IP header
   Show answer and explanationHide answer

   Correct answer: C

   A stateful firewall keeps a table of active sessions, so it can permit return traffic that belongs to an allowed connection. A stateless filter evaluates each packet alone, and firewalls do not assign addresses, encrypt traffic or filter on MAC addresses for routed traffic.

3. Question 3Network troubleshooting

   Users can reach an application by typing its IP address, but the same application fails when they use its hostname. Which area should a technician check first?

   1. AThe DNS records for the hostname and the resolver the clients use
   2. BThe MTU setting on the WAN router that carries the application traffic
   3. CThe VLAN assignment of the access ports used by the affected users
   4. DThe routing table entry for the application's subnet on the core router
   Show answer and explanationHide answer

   Correct answer: A

   Reachability by IP but not by name points to name resolution, so the DNS records and the resolver configuration are the first things to verify. The symptoms rule out general IP reachability problems, which makes MTU, VLAN assignment and subnet routing less likely causes.

4. Question 4Network operations, monitoring, and performance

   A monitoring team receives many alerts whenever a link briefly spikes to high utilization for a few seconds and then recovers. Which alerting approach reduces this noise while still catching sustained problems?

   1. AAlert on every individual sample that crosses the threshold, with no delay
   2. BAlert when a condition persists across a defined evaluation window
   3. CAlert only after a user opens a support ticket about slow service
   4. DTurn off thresholds entirely and review graphs once each week
   Show answer and explanationHide answer

   Correct answer: B

   Requiring a condition to persist over an evaluation window filters out brief spikes while still catching sustained degradation. Alerting on every sample creates noise, disabling thresholds hides problems until review, and waiting for user tickets is reactive.

5. Question 5Network architecture design

   Which benefit does route summarization provide in a large routed network?

   1. AIt guarantees the shortest path for every flow regardless of link cost
   2. BIt encrypts routing updates exchanged between neighboring routers
   3. CIt reduces the number of routes that routers must store and advertise
   4. DIt removes the need for a default gateway on end-user devices
   Show answer and explanationHide answer

   Correct answer: C

   Summarization replaces many specific prefixes with one aggregate route, which shrinks routing tables and update traffic. Path selection still depends on metrics and link costs, summarization does not encrypt updates, and end hosts still need a default gateway.