1.7 Identify and Describe Security Requirements and Configuration SD-WAN-ENGINEER Practice Questions (Page 6)

Questions 26–27

1. 26expert · hard

   A company is deploying SD-WAN and wants to implement a zero-trust security model. They want to ensure that all traffic is inspected and that access is granted based on user identity and device posture, not just network location. What is the most appropriate security configuration?

   • AEnable SSL decryption and threat prevention on all traffic, and use user-ID to enforce access policies.
   • BRely on the network perimeter firewall to protect the SD-WAN and assume all internal traffic is trusted.
   • CConfigure a single zone for all users and apply a broad allow policy.
   • DUse IPSec VPNs to encrypt all traffic and rely on the VPN for access control.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   To enforce segmentation between the corporate zone and the guest zone, what must be configured in a Palo Alto Networks firewall policy?

   • AA rule that denies traffic from the guest zone to the corporate zone
   • BA rule that allows all traffic between zones
   • CA rule that only inspects traffic without enforcing access
   • DA rule that encrypts traffic between zones
   Reveal Solution Discussion Select an answer first