1.7 Identify and Describe Security Requirements and Configuration SD-WAN-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   During the planning phase of an SD-WAN deployment, which security requirement is specifically addressed by defining separate zones for guest traffic, corporate traffic, and management traffic?

   • AAvailability
   • BSegmentation
   • CAuthentication
   • DEncryption
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A hospital network is implementing SD-WAN to connect multiple clinics. The network carries patient records (PHI) and must comply with HIPAA. The security team needs to ensure that only authorized personnel can access the patient record system, and that all PHI is encrypted in transit. What is the most critical security requirement to address first?

   • AEncrypt all PHI traffic using IPSec VPNs between sites.
   • BImplement strong authentication for all users accessing the network.
   • CDeploy a firewall at each site and configure a deny-all policy for all traffic.
   • DSegment the network so that only the patient record system is accessible to authorized users, and encrypt all traffic carrying PHI.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   An organization is deploying SD-WAN and wants to inspect all outbound web traffic for malware and enforce acceptable-use policies. They have already configured the SD-WAN fabric and are now focusing on security services. Which set of features should be enabled to meet these requirements?

   • AEnable IPSec VPN and configure static routes for all internet-bound traffic.
   • BEnable Threat Prevention and URL Filtering on the security policy that governs outbound traffic.
   • CDeploy a new zone for internet traffic and configure a deny-all policy for that zone.
   • DConfigure QoS policies to prioritize web traffic and enable NAT for internet-bound sessions.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A healthcare provider is deploying SD-WAN and needs to comply with HIPAA. They have multiple clinics and a central data center. The security team wants to ensure that patient data is protected both in transit and at rest. They also want to prevent unauthorized access to patient data from the clinics. What is the most comprehensive security approach?

   • ASegment the network so that patient data is only accessible from the data center, and use a firewall to block all other traffic.
   • BEncrypt all traffic between clinics and the data center using IPSec VPNs, and implement strong access control policies.
   • CImplement a comprehensive security policy that includes IPSec VPNs for encryption, zones for segmentation, and security profiles for threat prevention and URL filtering.
   • DUse SSL decryption to inspect all traffic and rely on threat prevention to block unauthorized access.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A company is deploying SD-WAN and wants to protect against advanced threats that may be hidden in encrypted traffic. They have enabled SSL decryption and threat prevention. However, they are concerned about the performance impact of decrypting all traffic. What is the most effective way to balance security and performance?

   • AUse a separate security appliance for SSL decryption and send all traffic through it.
   • BDisable SSL decryption and rely on threat prevention to detect threats in encrypted traffic.
   • CDecrypt all traffic to ensure maximum security, and upgrade hardware to handle the load.
   • DDecrypt only traffic to high-risk destinations, and use a decryption profile to exclude low-risk sites.
   Reveal Solution Discussion Select an answer first