SD-WAN Intersite Connectivity JN0-1103 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A financial services company is deploying SD-WAN between branches and a data center. The traffic traverses the public internet. The security team requires that all intersite traffic be encrypted and that different departments (finance and HR) be isolated from each other even though they share the same physical links. Which SD-WAN security feature should the design include?

   • ASegmentation only, without encryption
   • BIPsec encryption only, with no segmentation
   • CGRE tunnels with no encryption and no segmentation
   • DIPsec encryption for all tunnels and separate overlay segments for finance and HR
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   In SD-WAN, what is the role of the underlay network?

   • AIt defines the security policies for intersite traffic
   • BIt provides the centralized management plane for SD-WAN
   • CIt provides the physical transport infrastructure, such as MPLS, broadband, or LTE
   • DIt creates a virtual topology that overlays the physical network
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the primary purpose of using IPsec in SD-WAN intersite connections?

   • ATo compress data to reduce bandwidth usage
   • BTo replace the need for a routing protocol
   • CTo increase the bandwidth of the link
   • DTo provide encryption and integrity for data transmitted between sites
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What factors does SD-WAN typically consider when selecting a path for a traffic flow?

   • AOnly the shortest hop count
   • BThe type of application only
   • CThe cost of the link only
   • DNetwork conditions, such as latency and loss, and configured policies
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   An SD-WAN edge has two transports: MPLS (100 Mbps) and broadband (500 Mbps). The site runs VoIP, video conferencing, and email. The broadband link is congested, and the SD-WAN policy must ensure that VoIP and video are not degraded. The design team is considering two QoS approaches: (1) priority queuing for VoIP and video on both links, or (2) rate-limiting email on the broadband link. Which approach is more effective for protecting VoIP and video?

   • ABoth approaches are equally effective
   • BNeither approach will protect VoIP and video
   • CPriority queuing for VoIP and video on both links
   • DRate-limiting email on the broadband link only
   Reveal Solution Discussion Select an answer first