No, CNNs cookie consent banner does not comply with the GDPR for a number of reasons.
It looks like this:
I accept (X)
CNN seems to use opt-out where it must use opt-in;
Recital 32 clarifies that consent should be given by a clear affirmative act establishing a freely given, specific, informed and unambiguous indication of the data subject’s agreement to the processing of personal data relating to him or her. CNN assumes consent if given if the user continues to use their website. That is not a clear affirmative act, and also not unambiguous.
Article 7 (3) specifies that it shall be as easy to withdraw as to give consent. There is a single "Accept" button, while you have to click on a lot of buttons in the opt-out window. So it is clearly more difficult to withdraw consent.
Recital 43 clarifies that consent is presumed not to be freely given if it does not allow separate consent to be given to different personal data processing operations despite it being appropriate in the individual case. As there is a single accept button, this is not specific. The current opt-out window is more specific, this indicates the separate consent is appropriate in this case.
Should / does CNN have to track that the X was clicked...
GDPR only requires that the controller [is] able to demonstrate that the data subject has consented to processing of his or her personal data. There are other ways to demonstrate that, for example if you use a script which does not set cookies without consent. It is probably the easiest to use a cookie to track consent.