Deperimeterization CAS-005 Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A network architect is designing an SDN solution for a service provider. The provider needs to offer its customers the ability to create and manage their own virtual networks. The architect is considering a centralized SDN controller. What is the most significant security consideration when implementing a centralized SDN controller in this multi-tenant environment?

   • AThe controller will be unable to handle the scale of a multi-tenant environment
   • BThe controller will be unable to enforce different security policies for different tenants
   • CThe controller becomes a high-value target; a compromise could allow an attacker to manipulate the entire network's traffic flow and security policies
   • DThe controller will require a complex encryption scheme for all communication with switches
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A global enterprise is replacing its legacy remote access VPN concentrators with a SASE solution. The primary goal is to reduce latency for users accessing cloud applications from various global locations. How does SASE achieve this performance improvement?

   • ABy using a global MPLS backbone to connect all corporate offices and data centers
   • BBy establishing a direct encrypted tunnel from the user's device to the corporate data center for all traffic
   • CBy routing traffic from the user's device to the nearest SASE point of presence (PoP) for security inspection and then directly to the cloud application
   • DBy caching all cloud application data at the user's local device
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A retail chain with 50 stores is deploying SD-WAN. The security team is concerned about threats propagating between stores over the SD-WAN overlay. Which SD-WAN security feature is most effective at preventing lateral movement of malware between branch locations?

   • AEncryption of all traffic over the WAN links
   • BQuality of Service (QoS) policies to prioritize critical application traffic
   • CCentralized management console for configuring all SD-WAN devices
   • DMicro-segmentation, which creates isolated zones within the SD-WAN fabric and enforces per-zone security policies
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is a key flexibility benefit of SDN?

   • AIt allows network administrators to program the network to meet changing requirements
   • BIt locks the network configuration to a single vendor
   • CIt eliminates the need for any network monitoring
   • DIt requires all network changes to be approved by a central committee
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which component is a core element of a SASE architecture?

   • AOn-premises intrusion prevention system (IPS)
   • BA virtual private network (VPN) concentrator located in each branch office
   • CA software-defined data center (SDDC) management platform
   • DSecure Access Service Edge (SASE) is a cloud-delivered service that combines SD-WAN with security functions like SWG, CASB, FWaaS, and ZTNA
   Reveal Solution Discussion Select an answer first