1.7 Identify and Describe Security Requirements and Configuration SD-WAN-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which security service, when integrated with SD-WAN, allows the firewall to inspect encrypted traffic for threats?

   • AIPsec VPN
   • BDNS security
   • CURL filtering
   • DSSL decryption
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A retail company is deploying SD-WAN and wants to segment its network to isolate payment card data (PCI DSS) from other traffic. They have a mix of POS systems, corporate users, and guest Wi-Fi. The compliance team requires that POS traffic be isolated and that access to the payment system be restricted to authorized devices only. What is the most effective way to achieve this?

   • AUse a VLAN to separate POS traffic and rely on the VLAN for security.
   • BEnable SSL decryption on all traffic and rely on threat prevention to protect the payment system.
   • CCreate a separate zone for POS systems and write policies that only allow authorized POS devices to communicate with the payment system.
   • DPlace all devices in a single zone and use QoS to prioritize POS traffic.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A company is deploying SD-WAN and needs to connect 50 remote sites to a central data center. The traffic includes both sensitive financial data and general internet traffic. The company wants to ensure that sensitive data is encrypted, but they are concerned about the performance impact of encrypting all traffic. What is the best approach to balance security and performance?

   • AUse IPSec VPNs for all site-to-site traffic, but prioritize sensitive data with QoS to ensure it gets the necessary bandwidth.
   • BUse a separate MPLS network for sensitive data and the internet for general traffic, without encryption.
   • CEncrypt only the traffic that contains sensitive data, using policy-based routing to direct that traffic through an IPSec VPN.
   • DEncrypt all traffic between sites using IPSec VPNs, regardless of the data type.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which protocol is commonly used to implement site-to-site VPN encryption in a Palo Alto Networks SD-WAN deployment?

   • ASSL
   • BIPsec
   • CL2TP
   • DGRE
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A multinational corporation is deploying SD-WAN and must comply with data residency laws that require certain data to remain within specific geographic boundaries. The company has sites in the US, EU, and Asia. They need to ensure that EU customer data does not leave the EU. What is the most important security requirement to address in the SD-WAN design?

   • AUse SSL decryption to inspect all traffic and ensure that no sensitive data is being transmitted.
   • BConfigure the SD-WAN to route EU customer data only through sites within the EU, and prevent any traffic from EU sites to non-EU sites.
   • CImplement strong authentication for all users to prevent unauthorized access to EU data.
   • DEncrypt all traffic between sites using IPSec VPNs to protect data in transit.
   Reveal Solution Discussion Select an answer first