Deperimeterization CAS-005 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which feature is characteristic of SD-WAN?

   • ARequires MPLS circuits for all branch connectivity
   • BOperates only at the physical layer of the OSI model
   • CEncrypts all traffic using a proprietary algorithm
   • DUses a centralized controller to manage WAN edge devices
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A company with a hybrid WAN (MPLS and broadband) is using SD-WAN. The network administrator is troubleshooting an issue where a critical business application is experiencing poor performance. The SD-WAN dashboard shows that the application's traffic is being sent over the broadband link, which is experiencing high packet loss. The administrator wants to ensure this application always uses the best-performing link. What is the most effective SD-WAN configuration to achieve this?

   • AConfigure a performance-based routing policy that monitors link quality (e.g., latency, jitter, loss) and automatically steers traffic to the best-performing link
   • BConfigure a policy to prioritize the application's traffic over all other traffic on the broadband link
   • CConfigure a static routing policy that always sends the application's traffic over the MPLS link
   • DConfigure a policy to load-balance the application's traffic across both links
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A university's network team is implementing a Software-Defined Networking (SDN) solution to manage a large campus network. They need to dynamically segment the network to isolate IoT devices from the main student network and apply different security policies to each segment. The team wants to achieve this without having to manually reconfigure each physical switch. Which SDN architecture feature is essential for this task?

   • AA routing protocol like OSPF that automatically calculates the best path for all traffic
   • BA centralized controller that communicates with switches via a southbound API to program flow tables
   • CA network management system that provides a command-line interface (CLI) for each switch
   • DA distributed data plane where each switch makes its own forwarding decisions based on MAC addresses
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is a common security capability provided by SD-WAN edge devices?

   • ANetwork segmentation and micro-segmentation
   • BEncryption of traffic between sites using IPsec
   • CAntivirus scanning for all traffic
   • DIdentity and Access Management (IAM) for all users
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which security feature is inherent in many SD-WAN solutions?

   • AStateful firewall and IPsec VPN encryption
   • BData Loss Prevention (DLP) for all traffic
   • CIntrusion Prevention System (IPS) as a mandatory component
   • DWeb application firewall (WAF) for all web traffic
   Reveal Solution Discussion Select an answer first