1.4 Explain the Application of Network Hardening Methods for Enhanced Security on Strata and SASE Products (e.g., Content-ID, Zero Trust, User-ID, Device-ID, Zones) NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 6)

Questions 26–27

1. 26foundation · easy

   How do Content-ID, User-ID, Device-ID, and Zones work together to enhance security in a Strata or SASE environment?

   • AThey are independent features that must be used separately for different security purposes
   • BThey provide layered security by combining identity, device, content, and network segmentation controls
   • CThey replace the need for traditional firewall rules
   • DThey are only applicable to SASE products, not Strata
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A company uses a Strata firewall to control access to cloud applications. They want to allow access to a specific SaaS application only for users in the Sales group, and block all other users. The firewall currently has no user identity information. What must be configured first?

   • ADevice-ID to identify the device type and enforce based on device
   • BUser-ID to integrate with Active Directory and map IP addresses to user groups
   • CContent-ID to inspect the application traffic and identify the SaaS application
   • DZones to segment the network and enforce based on source zone
   Reveal Solution Discussion Select an answer first