WAN Edge SSR Security Features JN0-750 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   How does Secure Vector Routing (SVR) integrate security features on an SSR?

   • ABy using a central security controller to manage all policies
   • BBy creating a separate security zone for each interface
   • CBy requiring all traffic to be encrypted with IPsec
   • DBy enforcing security policies as part of the session establishment process
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A company has enabled URL filtering on its SSR to block the 'Social Media' category. However, users are still able to access Facebook. The administrator has verified that the URL filtering database is up to date and that the policy is correctly applied. What is the most likely reason the traffic is not being blocked?

   • AThe URL filtering category is incorrectly configured as 'allow' instead of 'block'
   • BThe users are accessing Facebook via a different application that is not categorized as 'Social Media'
   • CThe SSR's DNS cache is stale and is resolving Facebook to an old IP address
   • DTLS/SSL inspection is not enabled, so the SSR cannot see the full URL in the HTTPS request
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A retail chain is deploying Session Smart Routers (SSRs) at 200 branch locations. The network team wants to enforce consistent security policies centrally from Mist, but the branch WAN links are frequently congested. They need to understand which SSR security features can be applied without requiring a separate security appliance at each branch. Which SSR capability should the team rely on as the primary enforcement mechanism for stateful traffic filtering at the branch edge?

   • AThe built-in stateful firewall integrated into the SSR's service and session handling
   • BThe SSR's routing table ACLs applied to each interface
   • CA third-party firewall VM deployed in-line with the SSR at each branch
   • DThe Mist cloud-based firewall that filters traffic before it reaches the branch
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A security operations team wants to centralize security event monitoring from all branch SSRs. They need to see blocked traffic, IPS alerts, and policy violations in a single dashboard. Which approach should they use to achieve this?

   • AConfigure each SSR to send logs to a local syslog server at each branch
   • BEnable security logging on the SSRs and integrate them with Mist Security Insights
   • CUse the SSR's built-in packet capture to record all security events
   • DEnable SNMP traps on the SSRs and send them to the Mist cloud
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is the purpose of TLS/SSL inspection on an SSR?

   • ATo decrypt and inspect encrypted traffic for security threats
   • BTo accelerate encrypted traffic
   • CTo encrypt all traffic between sites
   • DTo block all encrypted traffic by default
   Reveal Solution Discussion Select an answer first