4.1 Describe Security Service Edge (SSE) and Secure Access Service Edge (SASE) 350-701 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which scenario is a typical use case for Security Service Edge (SSE)?

   • AConnecting a branch office to a data center using MPLS
   • BReplacing the corporate data center with a private cloud
   • CProviding high-speed internet access to a branch office
   • DSecuring remote users accessing cloud applications
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A retail chain with 200 stores wants to connect each store to the internet and to the corporate data center, while also enforcing web filtering and malware protection for all store traffic. The company wants to eliminate MPLS and use commodity broadband. Which SASE component is essential to achieve this?

   • ASWG
   • BCASB
   • CZTNA
   • DSD-WAN
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A company is migrating from an on-premises security stack to SSE. The security team wants to ensure that remote users have the same security protections as on-premises users, including URL filtering, malware inspection, and data loss prevention for cloud apps. The company has a limited budget and wants to minimize changes to existing network infrastructure. Which approach best meets these requirements?

   • ADeploy a CASB only and rely on it for all security needs
   • BReplace all remote user VPNs with a traditional data center firewall
   • CImplement a full SASE solution with SD-WAN at every remote user location
   • DDeploy an SSE solution that includes SWG, CASB, and ZTNA, and redirect remote user traffic to the SSE cloud via DNS or client-based agents
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A security architect is comparing SSE and SASE for a company that has no branch offices and all employees work remotely. The company's main requirements are to secure internet access and cloud applications, and to provide access to a few internal applications. The company does not need WAN optimization or site-to-site connectivity. Which architecture should the architect recommend, and why?

   • ASASE, because it includes SD-WAN which is required for remote users
   • BSSE, because it is more secure than SASE
   • CSASE, because it provides both networking and security, which is always better
   • DSSE, because it provides the required security services without the unnecessary networking features of SASE
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which set of services is most commonly associated with Security Service Edge (SSE)?

   • ADNS, DHCP, and IPAM
   • BVPN, MPLS, and leased lines
   • CSD-WAN, routing, and WAN optimization
   • DSWG, CASB, ZTNA, and FWaaS
   Reveal Solution Discussion Select an answer first