Deperimeterization CAS-005 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company is planning a network transformation. They want to use SD-WAN to connect their branch offices and also want to enforce consistent security policies for all users, including those working remotely. They are considering integrating SD-WAN with a SASE solution. What is the primary benefit of this integration?

   • AIt extends consistent security policy enforcement from the branch to the remote user by converging SD-WAN connectivity with cloud-delivered security services
   • BIt simplifies network management by using a single vendor for all hardware
   • CIt replaces the need for any on-premises security hardware, including firewalls
   • DIt provides a single, global MPLS backbone for all network traffic
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is a key performance benefit of SASE's integrated approach?

   • AIt guarantees 100% uptime for all applications
   • BIt requires all traffic to be routed through a single cloud provider
   • CIt eliminates the need for any network security inspection
   • DIt reduces latency by enabling local access to cloud services and security inspection at the edge
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   How does SDN separate the control plane from the data plane?

   • ABy encrypting all control traffic
   • BBy placing the control plane on each network device
   • CBy using separate physical networks for control and data traffic
   • DBy using a centralized controller that communicates with forwarding devices
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which security service is typically integrated within a SASE framework?

   • ANetwork Access Control (NAC) for on-premises LANs
   • BCloud Access Security Broker (CASB)
   • CData Loss Prevention (DLP) only for on-premises storage
   • DIntrusion Detection System (IDS) as a physical appliance
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A multinational company is migrating from a hub-and-spoke MPLS network to a SASE architecture. The CISO requires that all traffic, including traffic between branch offices, be inspected by the same security policy regardless of the user's location. The company uses a mix of SaaS applications and private data center resources. Which SASE component is most critical to meeting this requirement?

   • AA dedicated MPLS circuit between each branch and the corporate data center to backhaul all traffic for inspection
   • BA cloud-delivered security stack that includes SWG, CASB, and FWaaS, applied at the SASE point of presence closest to the user
   • CAn on-premises next-generation firewall at each branch office that enforces the corporate policy locally
   • DA virtual private network (VPN) concentrator in the cloud that all users must connect to before accessing any resource
   Reveal Solution Discussion Select an answer first