WAN Edge SSR Security Features JN0-750 Practice Questions (Page 7)

Questions 31–34

1. 31foundation · easy

   What is the primary function of the Intrusion Prevention System (IPS) on an SSR?

   • ATo filter web traffic based on URL categories
   • BTo identify applications and enforce application-aware policies
   • CTo decrypt and inspect TLS/SSL traffic
   • DTo detect and block malicious traffic based on signatures
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   What is the purpose of URL filtering on an SSR?

   • ATo detect and block malicious traffic based on signatures
   • BTo decrypt and inspect TLS/SSL traffic
   • CTo identify applications and enforce application-aware policies
   • DTo block or allow access to specific web categories
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   An organization wants to block access to social media websites from the branch network. They have enabled URL filtering on the SSR. However, they notice that some social media traffic is still getting through because users are accessing the sites via HTTPS. What additional configuration is needed to ensure URL filtering can effectively block these HTTPS sites?

   • AConfigure the SSR to block the IP addresses of the social media sites
   • BEnable application identification to block the social media application
   • CBlock all traffic on TCP port 443 to prevent HTTPS access
   • DEnable TLS/SSL inspection so the SSR can see the hostname in the decrypted HTTP request and apply the URL category
   Reveal Solution Discussion Select an answer first
5. 34expert · hard

   A security team needs to retain security logs from SSRs for 18 months to meet compliance requirements. The team currently uses Mist Security Insights, which retains data for a shorter period. What should the team do to meet the retention requirement?

   • AStore the logs locally on each SSR for 18 months
   • BEnable packet capture on the SSRs to store all traffic for 18 months
   • CConfigure the SSRs to send security logs to an external syslog server or SIEM that supports long-term retention
   • DIncrease the Mist Security Insights retention period to 18 months
   Reveal Solution Discussion Select an answer first