WAN Edge SSR Security Features JN0-750 Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A security administrator is enabling IPS on an SSR to protect the branch network. The administrator notices that some malicious traffic is encrypted with TLS and is not being detected by the IPS signatures. What additional configuration is required to ensure the IPS can inspect this encrypted traffic?

   • AEnable TLS/SSL inspection so the SSR can decrypt, inspect, and re-encrypt the traffic
   • BIncrease the IPS signature severity threshold to catch encrypted threats
   • CConfigure the SSR to block all TLS traffic to prevent encrypted threats
   • DEnable URL filtering to categorize the encrypted traffic
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A managed service provider (MSP) is evaluating the SSR for a customer who wants to replace a legacy firewall appliance. The customer's main concern is that the new solution must provide stateful inspection, application control, and the ability to enforce policies consistently across multiple sites. Which SSR feature set should the MSP highlight to address these concerns?

   • AThe integrated security suite including stateful firewall, application identification, and SVR for distributed policy enforcement
   • BThe SSR's routing protocols that provide security by default
   • CThe ability to route traffic through a third-party firewall for all security functions
   • DThe Mist cloud's ability to filter traffic before it reaches the branch
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   How can SSR security logs be integrated with Mist for visibility?

   • ABy configuring the SSR to send logs to the Mist cloud
   • BBy enabling SNMP traps on the SSR
   • CBy using a third-party SIEM tool only
   • DBy manually uploading log files to the Mist portal
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is the purpose of enabling security logging on an SSR?

   • ATo provide visibility into security events and support reporting
   • BTo encrypt all traffic between sites
   • CTo improve routing performance
   • DTo automatically block all malicious traffic
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A security analyst is investigating a potential breach. The analyst wants to see a timeline of IPS events, blocked flows, and policy violations across all SSRs in the organization. Which Mist feature should the analyst use to get this information?

   • AMist Location Services
   • BMist WAN Assurance
   • CMist Marvis
   • DMist Security Insights
   Reveal Solution Discussion Select an answer first