01. Two options are compared: buying appliances outright, or subscribing to an equivalent managed service at a similar annual figure.
Which comparison would make the choice defensible?
a) The budget available in the current financial year
b) Total cost of ownership (TCO) over the asset’s working life
c) Depreciation schedules applied to each option
d) The CapEx purchase price against the first year of OpEx subscription
02. A team is asked to justify a WAN upgrade. It has six months of utilisation data but no baseline of what the link carried before a major application migration three months ago.
Which weakness does this create in the forecast?
a) Utilisation data alone cannot indicate whether capacity is short
b) The forecast will overstate demand because migrations are one-off
c) The trend spans two different demand profiles
d) Six months is too short a period to establish any trend
03. What does a PKI certificate authority actually vouch for when it signs a certificate?
a) That the named identity holds the corresponding private key
b) That traffic to the named identity will be encrypted
c) That the private key is stored in tamper-resistant hardware
d) That the named identity is free of security vulnerabilities
04. A link shows a modest baseline utilisation but saturates for twenty minutes each weekday morning, when users report problems.
Which measure should drive the capacity decision?
a) Total volume transferred over the month
b) The maximum rate the circuit is contracted to deliver
c) Utilisation during the busiest period
d) The percentile utilisation the provider bills against
05. What distinguishes a standard from a policy in a network governance framework?
a) A standard is reviewed annually while a policy is reviewed on change
b) A standard is approved by engineers while a policy is approved by management
c) A standard applies to a business unit while a policy applies estate-wide
d) A standard specifies the settings that satisfy a policy requirement
06. A device presents a TLS certificate that is within its validity dates and signed by a trusted CA. The client’s clock is correct and it trusts that CA’s root.
Which cause fits the client still rejecting the connection?
a) The name the client requested does not appear in the certificate
b) The certificate was revoked after it was issued
c) The certificate chains through an intermediate CA rather than being signed by the root directly
d) The certificate uses a key the client considers too short
07. What does a severity rating published with a vulnerability describe?
a) The risk the defect poses to a specific organisation
b) The characteristics of the defect itself
c) The likelihood that the defect will be exploited in the wild
d) The time within which the defect must be remediated
08. A monitoring tool raises an alert because an internal print server contacted an external address that was recently added to a threat feed. The server has no record of any outbound connection before today.
Which characteristic of this alert most raises its priority?
a) The affected system is a server rather than a workstation
b) The connection was outbound rather than inbound
c) The behaviour is new for that host, not merely listed
d) The external address appears on a threat feed
09. During incident response containment, the team must decide whether to disconnect a compromised segment from the rest of the network.
Which consideration should drive the decision?
a) Whether the attacker can reach further if it stays connected
b) Whether the affected hosts have been backed up recently, so that they can be rebuilt
c) Whether the incident has been reported to management
d) Whether the segment carries traffic for the busiest business unit
10. An engineer implements an urgent firewall change at midnight and raises the change management record the following morning.
Which governance question does this raise?
a) Whether the change should have been made at all
b) Whether the emergency path was properly invoked
c) Whether the engineer holds the right level of device access
d) Whether the change record contains sufficient technical detail
Before you write the CWNP Network Administrator and Engineer (CNAE-101) certification exam, you may have certain doubts in your mind regarding the pattern of the test, the types of questions asked in it, the difficulty level of the questions and time required to complete the questions. These CWNP Certified Network Administrator and Engineer (CNAE) sample questions and demo exam help you in removing these doubts and prepare you to take the test.
