1.7 Identify and Describe Security Requirements and Configuration SD-WAN-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A retail chain is deploying SD-WAN across 200 branch sites. Each branch has a point-of-sale (POS) system that must communicate with the central payment processor, and a guest Wi-Fi network for customers. The compliance team requires that POS traffic be isolated from guest traffic at every site, and that all traffic between branches and the data center be encrypted. What is the most appropriate security design approach?

   • ACreate a single zone for all branch traffic and apply a broad security policy allowing POS and guest traffic to the internet, relying on the IPSec VPN for encryption.
   • BUse the same zone for POS and guest traffic but apply QoS policies to prioritize POS traffic over guest traffic.
   • CDefine separate zones for POS and guest traffic, create inter-zone security policies to block guest-to-POS communication, and configure IPSec VPNs for all branch-to-data-center traffic.
   • DConfigure a single zone for all traffic and rely on the ISP's MPLS service to provide both segmentation and encryption between sites.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company has two branch offices and a data center. The HR department at each branch needs access to the payroll application hosted in the data center, but the finance department should only access the ERP system. Both departments share the same physical network. How should the SD-WAN security policies be configured to enforce this access control?

   • AConfigure a policy that allows traffic based on source IP address only, without defining zones.
   • BCreate separate zones for HR and Finance, and write policies that allow HR to reach the payroll app and Finance to reach the ERP, blocking all other inter-zone traffic.
   • CPlace all users in a single zone and create a policy that allows all traffic to the data center.
   • DEnable SSL decryption on the firewall and rely on the decrypted traffic to enforce access control.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which security service is used to block access to malicious or inappropriate websites based on category?

   • AURL filtering
   • BSSL decryption
   • CThreat prevention
   • DWildFire
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which Palo Alto Networks SD-WAN security configuration option is used to control traffic based on source and destination zones, IP addresses, and applications?

   • AThreat prevention
   • BIPsec VPN
   • CFirewall policies
   • DSSL decryption
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   In a Palo Alto Networks SD-WAN environment, which element is used to group interfaces into logical segments for the purpose of applying security policies?

   • AVirtual routers
   • BZones
   • CIPsec tunnels
   • DAddress objects
   Reveal Solution Discussion Select an answer first