3.1 Configuring MX Security Appliances 500-220 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the purpose of access policies on an MX security appliance?

   • ATo control network access for users and devices based on group or identity
   • BTo provide a VPN tunnel for remote users
   • CTo block malicious websites
   • DTo shape traffic for bandwidth optimization
   Reveal Solution Discussion Select an answer first
2. 2expert · medium

   A company has a single MX and is experiencing performance issues. The administrator suspects that IPS and content filtering are causing latency. The company needs to maintain security but wants to reduce the performance impact. What is the most effective way to achieve this?

   • AUse a traffic shaping rule to prioritize IPS traffic.
   • BEnable IPS in 'Prevention' mode and configure content filtering to block only high-risk categories.
   • CEnable IPS in 'Detection' mode and disable content filtering.
   • DDisable IPS and rely on content filtering for security.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the primary purpose of configuring a switched virtual interface (SVI) on a Cisco Meraki MX security appliance?

   • ATo create a physical port channel that aggregates multiple uplinks for redundancy
   • BTo define a security policy that filters traffic between VLANs
   • CTo provide a Layer 3 routing interface for a VLAN, enabling inter-VLAN routing
   • DTo assign an IP address to a physical switch port for management access
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company is deploying Auto VPN to connect its headquarters and three branch offices. The headquarters MX will act as a hub, and the branch MXs will be spokes. The administrator wants to ensure that all inter-site traffic flows through the headquarters for security inspection. What is the simplest way to achieve this with Auto VPN?

   • AConfigure all branch MXs as spokes and the headquarters MX as a hub, and ensure the hub is the default route for all spokes.
   • BUse static routes on each MX to force traffic through the headquarters.
   • CConfigure the branch MXs as hubs and the headquarters MX as a spoke.
   • DConfigure all MXs as hubs so they form a full mesh and traffic takes the shortest path.
   Reveal Solution Discussion Select an answer first
6. 5application · easy

   A company has a guest Wi-Fi network and wants to ensure that guests can only access the internet and cannot reach internal resources. The MX is the gateway for the guest VLAN. What should be configured on the MX?

   • ACreate a content filtering rule that blocks all internal IP addresses.
   • BCreate a traffic shaping rule that limits guest bandwidth.
   • CCreate a static route for the internal VLANs that points to a null interface.
   • DCreate an access policy for the guest VLAN that blocks traffic to the internal VLANs.
   Reveal Solution Discussion Select an answer first