4.3 Identify and Describe Network Setting Configurations to Support IoT Device Connectivity Based on Device-ID SD-WAN-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A company has multiple IoT device types on a single subnet. Device-ID is classifying them, but the classifications are inconsistent; some devices are classified as one type and others as another, even though they are the same model. The network team has verified that the subnet is correctly configured in Device-ID. What is the most effective way to improve classification consistency?

   • AIncrease the Device-ID inspection interval on the subnet.
   • BSegment the devices into separate subnets based on device type.
   • CAssign static IPs to all devices and add them to a Device-ID allow list.
   • DDisable and re-enable Device-ID on the subnet.
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A company is deploying IoT devices that use DHCP. The devices are on a subnet that is configured in Device-ID. However, Device-ID is not classifying the devices because their IP addresses change frequently. What is the best way to ensure Device-ID can classify these devices?

   • AAdd the entire DHCP scope to Device-ID network settings.
   • BUse DHCP reservations to assign static IPs to the IoT devices.
   • CDisable DHCP and use static IPs on the devices.
   • DEnable Device-ID on the DHCP server.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the benefit of Device-ID integration with IoT devices in an SD-WAN environment?

   • AIt guarantees that all IoT devices will have internet access
   • BIt allows security policies to be tailored to the specific type of IoT device
   • CIt automatically updates IoT device firmware
   • DIt eliminates the need for network segmentation
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A manufacturing company has a new OT network segment (192.168.50.0/24) for PLCs and sensors. The security team wants Device-ID to identify these devices so that only the SCADA server can reach them. The SD-WAN appliance is already deployed as the gateway for this segment. What is the first configuration step to enable Device-ID for this segment?

   • AEnable LLDP on the SD-WAN appliance to discover the PLCs and sensors.
   • BConfigure a static route on the SCADA server to reach the OT segment.
   • CCreate a Device-ID network profile that includes the 192.168.50.0/24 subnet.
   • DInstall a certificate on each PLC and sensor for mutual authentication.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   How does Device-ID integrate with IoT devices to enforce security policies?

   • ABy installing an agent on every IoT device
   • BBy requiring each IoT device to have a static IP address
   • CBy identifying the device type and applying policies based on that identity
   • DBy blocking all traffic from unknown devices
   Reveal Solution Discussion Select an answer first