3.1 Define and Explain Secure Access Service Edge (SASE) and Differentiate from Secure Service Edge (SSE) CYBERSECURITY-PRACTITIONER Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A global enterprise is designing a new network architecture for its 200 branch offices. The goal is to provide direct, optimized internet access for cloud applications while applying consistent security policies regardless of the user's location. The company also wants to simplify WAN management by replacing traditional routers. Which architecture best fulfills these requirements?

   • AA cloud-delivered SASE architecture that combines SD-WAN and security services
   • BA set of on-premises firewalls and routers deployed at each branch
   • CA traditional hub-and-spoke VPN architecture with firewalls at the central data center
   • DAn SSE solution with a separate, unmanaged internet connection at each branch
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A global company is consolidating its security and networking vendors. Currently, it uses one vendor for SD-WAN and another for cloud security. The company wants to reduce operational complexity and improve policy enforcement by using a single, integrated cloud-delivered platform. The network team is concerned about losing granular control over routing. Which architecture should the company adopt to meet its goals?

   • AAn SSE architecture from a single vendor, keeping the existing SD-WAN.
   • BA multi-vendor approach with best-of-breed security and networking.
   • CA SASE architecture from a single vendor that integrates SD-WAN and security.
   • DAn on-premises SD-WAN with a cloud security service from the same vendor.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A security architect is reviewing options for a client that has a highly optimized, expensive MPLS network. The client is satisfied with the network performance and does not want to change it. However, the client needs to implement a zero-trust security model for all users, including those accessing private applications from remote locations. The architect must choose a solution that provides the required security without disrupting the existing network. Which solution is most appropriate?

   • AAn SSE solution that provides ZTNA and other cloud-delivered security services.
   • BA traditional VPN with multi-factor authentication.
   • CA SASE solution that includes SD-WAN to replace the MPLS network.
   • DAn on-premises ZTNA appliance at each remote location.
   Reveal Solution Discussion Select an answer first
5. 9foundation · medium

   What is the key difference between SASE and SSE?

   • ASASE includes networking capabilities like SD-WAN, while SSE only provides security functions
   • BSASE is on-premises, while SSE is cloud-delivered
   • CSSE is a subset of SASE that includes SD-WAN
   • DSSE includes networking capabilities, while SASE only provides security
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A multinational corporation is planning a major network transformation. The CTO wants to reduce costs by eliminating MPLS and using internet-based connectivity. The CISO wants to enforce data loss prevention (DLP) and secure web gateway (SWG) policies consistently for all users. The network team wants to maintain application-aware routing and WAN optimization. The project must be completed within 12 months. Which architecture best balances all these competing requirements?

   • AA SASE architecture that converges SD-WAN and cloud-delivered security services.
   • BA hybrid approach using MPLS for critical traffic and SSE for internet-bound traffic.
   • CAn SSE architecture with a separate, best-effort internet connection.
   • DA traditional WAN with on-premises firewalls and routers.
   Reveal Solution Discussion Select an answer first