3.1 Define and Explain Secure Access Service Edge (SASE) and Differentiate from Secure Service Edge (SSE) CYBERSECURITY-PRACTITIONER Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A startup is building its IT infrastructure from scratch and wants to avoid purchasing and managing physical firewalls and WAN optimization appliances. The team wants a single cloud-based service that provides secure internet access, connects remote offices, and applies consistent security policies. Which architecture should the startup adopt?

   • AA SASE architecture
   • BA traditional data center with firewalls and routers
   • CA VPN concentrator with client software
   • DAn SSE architecture
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A retail chain with 50 stores wants to provide its employees with secure, high-performance access to cloud-based point-of-sale (POS) and inventory applications. The company currently uses a hub-and-spoke MPLS network, which causes high latency for cloud traffic. The IT director wants to reduce latency and improve the user experience while maintaining strong security. Which architecture should the company consider?

   • ASSE, because it provides security and can also optimize network paths.
   • BSASE, because it provides SD-WAN for direct, optimized cloud access and integrated security.
   • CAn on-premises firewall at each store, because it provides local security.
   • DA traditional VPN, because it can provide secure access to cloud applications.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A large enterprise has a complex, multi-vendor WAN that is managed by a separate team. The security team wants to implement zero-trust network access (ZTNA) and a cloud access security broker (CASB) to protect access to private and SaaS applications. The WAN team is unwilling to change the existing network infrastructure. The security team must choose a solution that can be deployed quickly without impacting the WAN. What is the most appropriate solution?

   • AImplement ZTNA and CASB as on-premises appliances in each data center.
   • BDeploy an SSE solution that provides ZTNA and CASB as cloud-delivered services.
   • CDeploy a full SASE solution that includes SD-WAN to replace the existing WAN.
   • DUse a traditional VPN for remote access and rely on the existing firewall for CASB functionality.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company is moving from a legacy data-center-centric architecture to a cloud-first model. It wants to provide users with direct and secure access to the internet and cloud applications, regardless of their location. The company also wants to reduce the complexity of managing multiple security and networking appliances. Which architecture is designed to meet these goals?

   • AAn on-premises SD-WAN with a separate cloud security service
   • BSSE
   • CSASE
   • DA traditional VPN with a cloud-hosted firewall
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A consultant is advising a client on network architecture. The client has a reliable MPLS network and is happy with its performance. The client's main concern is improving security for remote users who access SaaS applications. The consultant needs to recommend a solution that provides security without changing the network. Which recommendation is correct?

   • ARecommend an on-premises firewall, as it provides the best security for remote users.
   • BRecommend a SASE solution, as it provides both security and networking capabilities.
   • CRecommend an SSE solution, as it provides security functions without requiring network changes.
   • DRecommend a VPN, as it provides secure access to SaaS applications.
   Reveal Solution Discussion Select an answer first