GBP and Micro Segmentation JN0-460 Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A retail company is deploying Mist wired switches and wants to use GBP to segment its point-of-sale (POS) systems from other corporate devices. The network administrator has created a group named 'POS' and a group named 'Corporate'. What is the next step to enforce that POS devices can only communicate with the payment server?

   • AAssign the POS group to the payment server's port.
   • BEnable microsegmentation on the switch and rely on default settings.
   • CCreate a policy that allows traffic from the POS group to the payment server group and denies all other traffic.
   • DConfigure the POS group to be a 'guest' group, which automatically restricts access.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   In a Mist AI wired fabric, how is microsegmentation implemented using GBP?

   • ABy enabling MAC address randomization on all ports
   • BBy creating a separate VLAN for each individual device
   • CBy configuring static routes on each switch
   • DBy defining endpoint groups and applying policies that restrict traffic between them
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A university campus uses Mist wired switches to support student, faculty, and administrative networks. The IT team wants to implement microsegmentation to prevent students from accessing administrative systems while allowing faculty to access both. Which implementation step is essential for this to work?

   • AAssign each switch port to a specific VLAN based on user role.
   • BEnable 802.1X authentication to ensure only authorized users connect.
   • CConfigure the switches to use dynamic ARP inspection to prevent spoofing.
   • DCreate GBP groups for each role and define policies that allow or deny traffic between them.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A manufacturing company has a network with robotic controllers, engineering workstations, and a management server. They want to ensure that robotic controllers can only talk to the management server, and engineering workstations can talk to both the management server and the internet. Which GBP policy configuration would enforce this?

   • AUse a single policy that allows all traffic to the management server and denies all other traffic.
   • BCreate three groups: 'Robots', 'Engineers', and 'MgmtServer'. Apply a policy allowing Robots to MgmtServer, Engineers to MgmtServer, and Engineers to internet, with a default deny for other traffic.
   • CCreate a single group for all devices and allow all traffic.
   • DCreate a policy that allows all traffic between Robots and Engineers, and denies traffic to the internet.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A network administrator is configuring GBP for a multi-tenant building where each tenant has its own set of devices. They want to ensure that tenants cannot communicate with each other. What is the best way to achieve this using GBP?

   • AUse VLANs to separate tenants and do not use GBP.
   • BCreate a separate group for each tenant and apply a policy that denies traffic between groups.
   • CCreate a single group for all tenants and apply a policy that denies all traffic.
   • DCreate a policy that allows traffic only between devices with the same MAC prefix.
   Reveal Solution Discussion Select an answer first