dc dotCreds
CompTIA CloudNetX Practice Test

CompTIA CloudNetX Practice Test

Start today’s free 10-question CompTIA CloudNetX set with source-backed explanations, local progress, and a fresh rotation every morning.

10 Free Daily Questions Source-backed Explanations 200 Verified Questions

Questions updated at Aug 22, 2026, 11:31 PM CDT

Start Daily Practice Open Dashboard
Go Pro - One Time Unlock

Unlock the full CNX-001 bank

200 verified questions Exam Mode Practice Mode Detailed explanations Weak-area review No subscription - one-time unlock

Get the complete source-backed bank with Interview Questions, the full Study Guide, full Course Notes, detailed explanations, weak-area review, and exam-style practice.

Interview Questions Full Study Guide Full Course Notes Exam Mode Practice Mode Guided Course Detailed explanations Weak-area review No subscription
$4.99 One-time payment
See bundle and PDF options

We will confirm your site email in one quick checkout step.

Why DotCreds?

Practice with explanations that teach.

Source links for every answer Every wrong answer explained Guided Course included Practice and Exam Mode Weak-area tracking Same verified bank across web practice

What you get with free practice

10 Free Questions Daily Fresh set every day from the live bank
Detailed Explanations Learn with clear source-backed answers
Track Your Progress Daily history and performance insights
Upgrade Anytime Unlock the full bank when you are ready
Today's 10 CompTIA CloudNetX questions

Use this CompTIA CloudNetX practice test to review CompTIA CloudNetX. Questions rotate daily and each answer links back to the source used to write it.

Today’s Set
10 questions
Rotates at 10:00 AM local time
Progress
0/10
Answered on this page
Accuracy
0%
Loading countdown…

200 verified questions are in the live bank. Free daily questions are selected from a rotating sample set. Unlock Pro to access the full question bank.

Preparing today’s free questions... Ordering the final locked-bank set before showing the practice cards.
Question 1 of 10
Objective 3.1 — Operate and maintain network environments Network Operations, Monitoring, and Performance (16%)

A shared network platform is used by ten business units. Leadership wants each unit to see the cost attributable to its own cloud egress, firewalls, and interconnect usage so behavior can be optimized. Which operating model best fits?

Concept tested:
Source:FinOps Framework
Question 2 of 10
Objective 2.7 — Harden network appliances Network Security (28%)

An appliance supports management on both the production data interface and a dedicated out-of-band interface. Policy requires the management plane to remain inaccessible from ordinary workload networks. Which configuration best satisfies the requirement?

Concept tested:
Question 3 of 10
Objective 2.4 — Apply Zero Trust architecture principles Network Security (28%)

A global workforce uses SaaS, private applications, and the public internet from offices and remote locations. The company wants cloud-delivered networking and security policy with consistent identity-aware controls close to users. Which architectural model is the best fit?

Concept tested:
Question 4 of 10
Objective 3.3 — Automate and script hybrid-cloud network administration Network Operations, Monitoring, and Performance (16%)

A team wants to use generative AI to propose firewall-rule changes from plain-language tickets. The organization must prevent unreviewed AI output from changing production. Which architecture is safest?

Concept tested:
Question 5 of 10
Objective 2.1 — Assess cloud/network threats, vulnerabilities, and mitigations Network Security (28%)

An analyst discovers that a compromised workload is uploading thousands of small archives containing regulated data to unsanctioned file-sharing sites over HTTPS. The business cannot block HTTPS globally. Which control most directly targets the data-loss objective?

Concept tested:
Question 6 of 10
Objective 4.2 — Select network troubleshooting tools and commands Network Troubleshooting (25%)

A TLS client reports `certificate verify failed`. The engineer needs to see the server's presented certificate chain, negotiated TLS details, and validation errors from the command line. Which tool is most appropriate?

Concept tested:
Question 7 of 10
Objective 1.3 — Select hybrid connectivity solutions Network Architecture Design (31%)

A retailer has 600 branches with broadband and LTE at each site. Voice should prefer the lowest-latency path, bulk backup should prefer the cheapest path, and failover must occur without manual route changes. Which technology best satisfies the policy requirement?

Concept tested:
Question 8 of 10
Objective 4.5 — Troubleshoot network performance Network Troubleshooting (25%)

A campus VLAN suddenly reaches 95% utilization. Packet capture shows a high rate of repeated broadcast frames, MAC tables flap, and CPU rises across multiple switches. Which failure mode should be suspected first?

Concept tested:
Question 9 of 10
Objective 1.4 — Design network availability and redundancy Network Architecture Design (31%)

A rack contains two independent top-of-rack switches. A server needs more aggregate bandwidth and should survive the loss of one physical Ethernet link without changing its IP address. Which technology addresses the server-to-switch link requirement?

Concept tested:
Question 10 of 10
Objective 3.2 — Monitor network health and performance Network Operations, Monitoring, and Performance (16%)

A real-time voice service shows acceptable throughput but users report robotic audio. Telemetry shows latency 35 ms, packet loss 0.1%, and one-way delay varying between 5 ms and 90 ms from packet to packet. Which metric most directly explains the symptom?

Concept tested:
Locked preview

You are viewing today’s free 10. Unlock 190 more questions.

Unlock full bank
Daily sample Rotating practice Free daily questions are selected from a rotating sample set.
Pro bank Full access Unlock Pro to access the full question bank, Exam Mode, Practice Mode, and random tests.
CNX-001 Pro $4.99 one-time

Unlock all 200 CompTIA CloudNetX questions, explanations, review tools, and exam-style practice.

50 Exam Practice Test $1.99 one-time

A 50-question CNX-001 PDF for short review sessions. Questions come first, then the answer review and explanations later in the file.

Linux / DevOps Access Bundle $6.99/month

Linux systems, Kubernetes, Terraform, data platform, and TensorFlow practice in one monthly unlock.

What’s includedCompTIA Linux+, CompTIA Cloud+, CompTIA CloudNetX, LFCS, CKA, Terraform Associate, Databricks ML Associate, TensorFlow Developer

Choose an unlock option to continue. We will confirm your site email in one quick checkout step.

Secure checkout powered by Stripe. Source-backed questions. Not brain dumps. Checkout stays on this page and unlocks the same Pro builder on this practice page.
Already Pro? Open dashboard

Purchase options

Unlock the full CNX-001 bank.

Get the full bank, Exam Mode, Practice Mode, question sets, random tests, readiness tracking, saved box scores, and review tools for this exam.

The PDF versions keep questions first and move the answer review, explanations, and distractor notes to the back of the file.

200 verified exam-style questions Every choice explained Exam Mode and Practice Mode Question sets and random tests Readiness score and trends Previous test box scores

You've answered 0/10 questions in today's set.

Locked: 190 more questions in the full bank.

Locked: exam simulation mode, practice mode, readiness tracking, and saved review history.

Checkout stays on this page, so you can keep practicing, unlock the full bank, and start Exam Mode or Practice Mode when you are ready.

Cheat Sheets

7-day score keeper

Answer questions today and this will become a rolling 7-day scorecard.

Local history
Optional progress sync

Keep today’s practice moving

Guest progress saves automatically on this device. Add an email later when you want a magic link that keeps your daily CNX-001 practice in sync across browsers.

Guest progress saves on this device automatically

Guest progress is available without an account.

Source-backed answer review

The free daily CompTIA CloudNetX set includes crawlable question text, answer choices, correct answer labels, objective mapping, and source links. Only the first SEO card includes answer explanations and any extra learning features. Pro-only bank questions stay locked; this section mirrors only the 10 free daily questions already shown on this page.

Question 1 A shared network platform is used by ten business units. Leadership wants each unit to see the cost attributable to its own cloud egress, firewalls, and interconnect usage so behavior can be optimized. Which operating model best fits?

Answer choices

  1. A. A single unallocated network budget
  2. B. One global NAT address
  3. C. A higher BGP MED
  4. D. A chargeback/showback model using tagged or otherwise attributable network consumption.

Correct answer

A chargeback/showback model using tagged or otherwise attributable network consumption.

Attributing shared-service consumption to business units creates accountability and supports cost optimization decisions.

Wrong-answer review

  • A. A single unallocated network budget: Incorrect. This hides consumption drivers and cannot show each unit its attributable cost.
  • B. One global NAT address: Incorrect. Address translation does not allocate financial responsibility.
  • C. A higher BGP MED: Incorrect. Route attributes do not implement cost accountability.

Extra learning features

Why candidates miss this

The temptation to choose ‘A single unallocated network budget’ is the apparent simplicity of a centralized approach. However, this obscures individual unit costs and hinders accountability. The decisive clue is the requirement to optimize behavior, which necessitates tracking consumption at a granular level. Likely wrong answer: A single unallocated network budget Review focus: FinOps Framework

Objective/domain: Network Operations, Monitoring, and Performance (16%)

Source: FinOps Framework

Question 2 An appliance supports management on both the production data interface and a dedicated out-of-band interface. Policy requires the management plane to remain inaccessible from ordinary workload networks. Which configuration best satisfies the requirement?

Answer choices

  1. A. Enable management on every interface but use a nonstandard port.
  2. B. Place management on the public internet with MFA only.
  3. C. Disable the OOB interface and manage only from workload subnets.
  4. D. Restrict administrative services to the dedicated management/OOB interface and tightly control the management network.

Correct answer

Restrict administrative services to the dedicated management/OOB interface and tightly control the management network.

Objective/domain: Network Security (28%)

Source: NIST SP 800-128 — Security-Focused Configuration Management

Question 3 A global workforce uses SaaS, private applications, and the public internet from offices and remote locations. The company wants cloud-delivered networking and security policy with consistent identity-aware controls close to users. Which architectural model is the best fit?

Answer choices

  1. A. SASE, using SSE security capabilities integrated with software-defined WAN/access as appropriate.
  2. B. A single perimeter firewall at headquarters
  3. C. A flat MPLS network with no identity controls
  4. D. A local DHCP server per branch

Correct answer

SASE, using SSE security capabilities integrated with software-defined WAN/access as appropriate.

Objective/domain: Network Security (28%)

Source: NIST SP 800-207 — Zero Trust Architecture

Question 4 A team wants to use generative AI to propose firewall-rule changes from plain-language tickets. The organization must prevent unreviewed AI output from changing production. Which architecture is safest?

Answer choices

  1. A. Give the model unrestricted production API credentials so it can fix tickets immediately.
  2. B. Disable logging for AI-driven changes to reduce noise.
  3. C. Use AI to generate a proposed change that enters the normal version-control, validation, policy-test, review, and approval pipeline before deployment.
  4. D. Treat any syntactically valid AI output as automatically safe.

Correct answer

Use AI to generate a proposed change that enters the normal version-control, validation, policy-test, review, and approval pipeline before deployment.

Objective/domain: Network Operations, Monitoring, and Performance (16%)

Source: NIST SP 800-128 — Security-Focused Configuration Management

Question 5 An analyst discovers that a compromised workload is uploading thousands of small archives containing regulated data to unsanctioned file-sharing sites over HTTPS. The business cannot block HTTPS globally. Which control most directly targets the data-loss objective?

Answer choices

  1. A. Apply DLP controls that identify sensitive content and enforce exfiltration policy at an appropriate inspection point.
  2. B. Add a default route to a different internet gateway.
  3. C. Increase TLS session timeout.
  4. D. Disable DNSSEC validation.

Correct answer

Apply DLP controls that identify sensitive content and enforce exfiltration policy at an appropriate inspection point.

Objective/domain: Network Security (28%)

Source: NIST SP 800-53 Rev. 5 — Security and Privacy Controls

Question 6 A TLS client reports `certificate verify failed`. The engineer needs to see the server's presented certificate chain, negotiated TLS details, and validation errors from the command line. Which tool is most appropriate?

Answer choices

  1. A. nfdump
  2. B. openssl s_client
  3. C. snmpwalk
  4. D. iperf

Correct answer

openssl s_client

Objective/domain: Network Troubleshooting (25%)

Source: OpenSSL s_client documentation

Question 7 A retailer has 600 branches with broadband and LTE at each site. Voice should prefer the lowest-latency path, bulk backup should prefer the cheapest path, and failover must occur without manual route changes. Which technology best satisfies the policy requirement?

Answer choices

  1. A. Static default routes with a higher metric on LTE.
  2. B. MPLS only, removing broadband and LTE.
  3. C. SD-WAN with application-aware path policies over both transports.
  4. D. A site-to-site VPN on only the broadband circuit.

Correct answer

SD-WAN with application-aware path policies over both transports.

Objective/domain: Network Architecture Design (31%)

Source: Cisco — What Is SD-WAN?

Question 8 A campus VLAN suddenly reaches 95% utilization. Packet capture shows a high rate of repeated broadcast frames, MAC tables flap, and CPU rises across multiple switches. Which failure mode should be suspected first?

Answer choices

  1. A. A stale DNS cache
  2. B. A Layer 2 loop causing a broadcast storm.
  3. C. An expired TLS certificate
  4. D. A normal autoscaling event

Correct answer

A Layer 2 loop causing a broadcast storm.

Objective/domain: Network Troubleshooting (25%)

Source: Cisco Campus LAN and Wireless LAN Solution Design Guide

Question 9 A rack contains two independent top-of-rack switches. A server needs more aggregate bandwidth and should survive the loss of one physical Ethernet link without changing its IP address. Which technology addresses the server-to-switch link requirement?

Answer choices

  1. A. DNS round robin
  2. B. Link aggregation/bonding across independent member links, using a switch design that supports the chosen multi-chassis model if both switches are used.
  3. C. NAT64
  4. D. A single faster interface only

Correct answer

Link aggregation/bonding across independent member links, using a switch design that supports the chosen multi-chassis model if both switches are used.

Objective/domain: Network Architecture Design (31%)

Source: AWS Well-Architected Framework — Reliability Pillar

Question 10 A real-time voice service shows acceptable throughput but users report robotic audio. Telemetry shows latency 35 ms, packet loss 0.1%, and one-way delay varying between 5 ms and 90 ms from packet to packet. Which metric most directly explains the symptom?

Answer choices

  1. A. Throughput
  2. B. Jitter
  3. C. Reachability
  4. D. MTBF

Correct answer

Jitter

Objective/domain: Network Operations, Monitoring, and Performance (16%)

Source: NIST SP 800-53 Rev. 5 — Security and Privacy Controls

Where to go after the daily web set

How are CompTIA CloudNetX questions generated?

dotCreds builds CompTIA CloudNetX practice questions from public exam objectives and CompTIA exam objectives and source-backed references. The questions are written for realistic study practice, not copied from exam dumps.

How are explanations sourced?

Each question includes an explanation and, when available, a source link back to the provider documentation or reference used to validate the answer. That keeps the practice tied to study material you can actually review.

What score do I get?

The page tracks today's answered count and accuracy for the 10-question daily set, then saves a 7-day score history on this device so you can see your recent practice trend.

Why use this site?

The site is the fastest way to start CompTIA CloudNetX practice without installing anything. It is built for daily recall, quick weak-topic discovery, and source-backed explanations you can review immediately.

More CompTIA practice tests

If you're studying adjacent CompTIA certs, these pages use the same daily-question format with source-backed explanations.

CySA+ Practice Test Security+ Practice Test CompTIA ITF+ Practice Test PenTest+ PT0-003 Practice Test