CompTIA CloudNetX practice test

A company uses a hub-and-spoke topology in the cloud. Two spoke virtual networks need to communicate with each other, but by default peering is non-transitive. Which solution allows spoke-to-spoke traffic through the hub?

Which security control inspects traffic at the application layer and can block traffic based on URL, payload signatures, and protocol anomalies, rather than only IP addresses and ports?

An application serves global users and suffers high latency for distant clients. Which approach most directly reduces latency by serving cached content from locations near users?

Which addressing approach should an architect use when planning multiple virtual networks that may later be peered or connected to on-premises networks?

A company needs resilient connectivity to its cloud provider and wants to avoid a single point of failure on the dedicated circuit. Which design best achieves this?

An organization wants to ensure that virtual machines in a private subnet can reach the internet for software updates but cannot receive unsolicited inbound connections. Which component should be used?

Traffic between two cloud regions is being charged at high egress rates and showing variable latency. Which optimization reduces both cost and latency for inter-region traffic?

Which load balancing approach distributes incoming requests across servers in multiple regions based on the geographic location of the client and the health of each region?

An architect wants cloud resources to access a managed storage service without traffic ever traversing the public internet. Which feature should be implemented?

Which routing protocol is commonly used to exchange routes dynamically between an on-premises network and a cloud provider over a dedicated interconnect?

Users report that an application is unreachable. Connectivity tests show packets reach the load balancer but never the backend instances. Which is the most likely cause to investigate first?

Which approach implements micro-segmentation to limit lateral movement between workloads within the same virtual network?

An architect needs to reduce the cost of a workload that sends large volumes of data out to the internet. Which design change most effectively lowers egress costs?

A company wants to centrally connect dozens of virtual networks and on-premises sites without building a full mesh of peerings. Which service provides this centralized transit?

Which capability provides centralized visibility and threat detection by analyzing flow logs and traffic patterns across multiple cloud networks?

After an architect adds a new route to send traffic to a network virtual appliance, some return traffic is dropped. Which common issue should be checked first?

A remote workforce needs secure access to internal cloud applications without exposing those applications directly to the internet. Which modern approach best fits this requirement?

An application experiences packet loss during peak hours on a VPN tunnel. Which design change provides more consistent throughput than the single internet-based tunnel?

Which design principle ensures that a cloud network can continue operating if an entire availability zone fails?