1.1 Explain Application Layer Inspection for Strata and SASE Products NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company is deploying a new Strata firewall to replace a legacy port-based firewall. The security team wants to enforce a policy that allows employees to use Salesforce but blocks the use of personal webmail. The legacy firewall only inspected ports and protocols. What is the primary reason the new firewall can enforce this policy while the legacy one could not?

   • AIt can identify the application regardless of the port used, based on traffic signatures and behavioral characteristics.
   • BIt uses a cloud-based service to classify traffic based on the destination IP address reputation.
   • CIt blocks all traffic that does not match a known application signature, preventing unknown applications from passing.
   • DIt can decrypt all SSL/TLS traffic by default, allowing the firewall to read the content of every session.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   In the context of Strata and SASE products, what role does Application Layer inspection play in security policy enforcement?

   • AIt enables policies that allow or deny traffic based on the specific application in use
   • BIt ensures that all traffic is encrypted before leaving the network
   • CIt replaces all other security controls like antivirus and intrusion prevention
   • DIt only monitors traffic for reporting purposes without affecting policy decisions
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   How do application signatures contribute to deep inspection of application traffic?

   • AThey are only used for blocking known malicious applications
   • BThey enable the firewall to recognize the application and apply appropriate inspection profiles
   • CThey replace the need for any further inspection once the application is identified
   • DThey are used to encrypt the traffic for secure transmission
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is the role of security profiles in Application Layer inspection?

   • AThey determine which applications are allowed
   • BThey are used only for logging and reporting
   • CThey replace the need for security policies
   • DThey define the specific inspection actions, such as antivirus or vulnerability protection, applied to allowed applications
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A security administrator is configuring SSL decryption on a Strata firewall. The organization has a legal requirement to not decrypt traffic to certain financial applications. The administrator wants to ensure that traffic to these applications is not decrypted, while still allowing the firewall to identify the application. What is the best approach?

   • AUse a forward proxy to decrypt traffic and then re-encrypt it, but only for financial applications.
   • BCreate an SSL decryption exclusion rule for the financial applications, and rely on App-ID to identify them without decryption.
   • CDisable SSL decryption entirely to avoid any legal issues.
   • DDecrypt all traffic and then block the financial applications to prevent data leakage.
   Reveal Solution Discussion Select an answer first