1.7 Identify and Describe Security Requirements and Configuration SD-WAN-ENGINEER Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which security configuration option in Palo Alto Networks SD-WAN is specifically designed to detect and block known malware, exploits, and command-and-control traffic?

   • AFirewall policies
   • BThreat prevention
   • CURL filtering
   • DIPsec VPN
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the primary purpose of implementing encryption in an SD-WAN fabric?

   • ATo simplify network configuration and management
   • BTo improve network performance and reduce latency
   • CTo enable traffic segmentation between different sites
   • DTo protect the confidentiality and integrity of data in transit
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which security requirement is fulfilled by implementing IPsec VPN tunnels between SD-WAN branch sites and the hub?

   • AAvailability
   • BAuthentication
   • CSegmentation
   • DEncryption
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A multinational company is connecting its headquarters to a remote branch over the internet. The traffic between these sites includes sensitive financial data. The network team wants to ensure that this data is encrypted and that the VPN tunnel is established securely. What is the primary configuration required on the SD-WAN devices?

   • AUse a simple routing protocol like OSPF to exchange routes between the sites and assume the internet is secure.
   • BEnable GRE tunneling between the sites and rely on the GRE protocol for encryption.
   • CConfigure an IPSec VPN tunnel between the two sites with pre-shared keys or certificates for authentication.
   • DConfigure a VLAN across the internet to isolate the traffic.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company is deploying SD-WAN and wants to inspect encrypted traffic to detect threats that might be hidden in SSL/TLS sessions. They are concerned about the performance impact of decryption. What is the best approach to balance security and performance?

   • ADisable SSL decryption and rely on threat prevention to inspect encrypted traffic.
   • BEnable SSL decryption on all traffic, regardless of the destination.
   • CEnable SSL decryption only for traffic to specific high-risk categories or destinations, and use a decryption profile to exclude low-risk sites.
   • DUse a separate firewall for SSL decryption and send all traffic through it.
   Reveal Solution Discussion Select an answer first