Deperimeterization CAS-005 Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard

   A hospital network uses SD-WAN to connect its main campus and several clinics. The hospital is deploying a new telemedicine application that requires high bandwidth and low latency. The network team is considering using the public internet link for this application to save costs, but they are concerned about security and reliability. The hospital's CISO mandates that all patient data must be encrypted in transit. Which SD-WAN feature is most critical to enable the use of the public internet link for the telemedicine application?

   • ALink bonding to combine the MPLS and internet links for increased bandwidth
   • BIPsec VPN tunneling to encrypt all traffic between the clinics and the main campus
   • CCentralized management to configure the internet link on all SD-WAN devices
   • DApplication-aware routing to prioritize telemedicine traffic over the internet link
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   What is the primary purpose of Software-Defined Networking (SDN)?

   • ATo replace physical switches with virtual switches in all data centers
   • BTo encrypt all network traffic between servers and clients
   • CTo provide a backup path for network traffic in case of link failure
   • DTo centralize network control and enable programmatic management of the network
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   What is a primary benefit of Software-Defined Wide Area Networking (SD-WAN)?

   • AIt replaces all network security appliances with a single firewall
   • BIt enables centralized management and dynamic path selection across multiple WAN links
   • CIt provides a physical layer encryption standard for all WAN traffic
   • DIt eliminates the need for internet connectivity at branch offices
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   How does SD-WAN typically manage network traffic to optimize performance?

   • ABy sending all traffic over the primary MPLS link
   • BBy using a centralized controller to select the best path based on real-time network conditions
   • CBy requiring all traffic to traverse a central data center for inspection
   • DBy using static routing tables configured manually on each router
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A cloud provider is designing a multi-tenant data center network. They need to support thousands of new virtual networks (VXLANs) and dynamically enforce different security policies for each tenant. They want to avoid the operational overhead of manually configuring VLANs and ACLs on physical switches. Which approach best leverages SDN to meet this need?

   • AUse an SDN controller to automatically provision VXLAN overlays and program flow rules on physical switches for each tenant's virtual network
   • BUse a network management system (NMS) to push configuration templates to switches
   • CDeploy a firewall at the network perimeter to protect all tenants
   • DImplement a traditional network with a large number of VLANs and manually configure ACLs on each switch for every tenant
   Reveal Solution Discussion Select an answer first