3.4 Describe the Purpose of Software-Defined Wide Area Networking (SD-WAN) Solutions CYBERSECURITY-PRACTITIONER Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A company is deploying SD-WAN and has two options: Option 1 uses a centralized controller that all branch devices must connect to for policy updates. Option 2 uses a distributed architecture where branch devices make local decisions based on pre-configured policies. The company has 50 branches in remote locations with unreliable connectivity to the central data center. Which architecture is more resilient in this scenario, and why?

   • AOption 2, because it eliminates the need for any central management, making the network fully autonomous.
   • BOption 1, because the centralized controller provides a single source of truth that ensures consistent policies across all branches.
   • COption 2, because branch devices can continue to make forwarding decisions even if the connection to the controller is lost.
   • DOption 1, because the controller can automatically reroute traffic around failed links without branch involvement.
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A company is deploying SD-WAN to support its cloud migration strategy. The company uses Microsoft 365 and Salesforce, both of which are accessed via the internet. The company also has a legacy on-premises ERP system. The network team wants to optimize performance for all three applications. Which SD-WAN configuration best meets this requirement?

   • AConfigure direct internet breakout for Microsoft 365 and Salesforce, and route ERP traffic over the MPLS link.
   • BUse direct internet breakout for all traffic, including ERP, to simplify the configuration.
   • CRoute all traffic over the broadband internet link to reduce costs.
   • DRoute all traffic over the MPLS link to ensure consistent performance for all applications.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A regional bank operates 40 branch offices, each connected to the headquarters data center via a single MPLS circuit. The bank is deploying a new cloud-based loan origination system and branch staff report that accessing the application is slow because all traffic is backhauled to headquarters before reaching the cloud. The bank wants to improve cloud application performance without replacing its existing MPLS links. What should the bank implement?

   • AInstall a second MPLS circuit at each branch and configure equal-cost multipath (ECMP) routing across both links.
   • BDeploy an SD-WAN solution that enables direct internet breakout from branches for cloud traffic while keeping MPLS for sensitive banking traffic.
   • CReplace all MPLS circuits with broadband internet connections and route all traffic directly to the cloud.
   • DUpgrade the MPLS circuits at each branch to a higher bandwidth tier to accommodate the additional cloud traffic.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   How does SD-WAN differ from traditional WAN in terms of management?

   • ASD-WAN uses a centralized controller for management
   • BSD-WAN management is identical to traditional WAN
   • CSD-WAN management is performed by the ISP
   • DSD-WAN requires manual configuration on each router
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which of the following is a key benefit of SD-WAN?

   • AIt guarantees zero packet loss on all connections
   • BIt eliminates the need for any security measures in the WAN
   • CIt requires dedicated physical infrastructure at every branch
   • DIt reduces WAN costs by allowing the use of lower-cost internet links
   Reveal Solution Discussion Select an answer first