GBP and Micro Segmentation JN0-460 Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A financial services firm wants to implement microsegmentation to protect its application servers from lateral movement in case of a breach. The network team is evaluating GBP on Mist wired switches. Which benefit of GBP directly supports this security goal?

   • AGBP eliminates the need for firewalls.
   • BGBP automatically encrypts all traffic between groups.
   • CGBP provides real-time threat detection and alerts.
   • DGBP allows granular control of traffic between groups, limiting the attack surface.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   When troubleshooting a GBP issue in a Mist AI wired environment, what is the first step you should take?

   • AReplace the network cables
   • BVerify that the endpoint is assigned to the correct group
   • CDisable GBP on the switch
   • DReboot all switches in the fabric
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A managed security service provider (MSSP) is considering using GBP on Mist wired switches to provide microsegmentation for multiple customers on a shared infrastructure. Each customer has its own set of devices and must be isolated from other customers. What is the most important consideration when designing the GBP solution?

   • ACreate a group for each customer's servers and a group for each customer's clients, and allow traffic only within the same customer.
   • BUse VLANs for each customer and do not use GBP.
   • CUse a separate group for each customer and apply policies that deny traffic between groups.
   • DUse a single group for all customers and rely on the firewall to separate traffic.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A data center operator wants to implement microsegmentation to protect a web application tier from a database tier. The web tier should only be able to communicate with the database tier on port 3306 (MySQL). Which GBP configuration would achieve this?

   • ACreate a group for web servers and a group for database servers, and apply a policy allowing traffic from web to database on port 3306.
   • BApply a policy that allows all traffic between web and database groups.
   • CCreate a single group for all servers and allow all traffic.
   • DUse a VLAN to separate web and database servers.
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A network administrator has implemented GBP on a Mist wired network to segment a research lab. The lab has two groups: 'Researchers' and 'Instruments'. The policy allows Researchers to access Instruments, but the instruments cannot initiate traffic to researchers. The administrator finds that researchers can access the instruments, but the instruments are unable to send data back to the researchers' applications. What is the most likely cause?

   • AThe switch does not support stateful firewalling.
   • BThe researchers' applications are using a different protocol than what is allowed.
   • CThe policy is missing a rule for return traffic from Instruments to Researchers.
   • DThe instruments are not in the correct group.
   Reveal Solution Discussion Select an answer first