SDWAN Security and Monitoring

Which of the following is used to measure the One-Way Delay Variation of a specific application’s data? 

• Service Activation Test (SAT)

• Application Flow Measurement Point (AFMP)

• Tunnel Virtual Connection Measurement Point (TVC MP)

• Service Readiness Test (SRT)

A school wishes to filter out gambling websites from students and faculty. How should the school go about enforcing this as a Subscriber?

• Each site must be blocked individually by the Subscriber’s IT staff, regardless of the Service Provider.

• The school provides the category to be blocked and the Provider uses Machine Learning and Artificial Intelligence to override any false positive matches.

• The Subscriber provides the category to be blocked to the Service Provider (SP). The SP then dynamically updates the Blocked database to the Subscriber with detailed match criteria for that category.

• The Subscriber policy provides individual sites to the blocked and the Service Provider can approve or deny each entry.

With stateful TCA reporting of PM (Performance Monitoring) Metrics, what is mandatory to avoid a condition where the SET and CLEAR criteria are met at the same time?

• The number of PM metric Calculation Intervals defined by SET-TCA Window Threshold is less than the number defined by the CLEAR-TCA Window Threshold.

• The number of PM metric Calculation Intervals defined by SET-TCA Window Threshold is equal to the number defined by the CLEAR-TCA Window Threshold.

• SET and CLEAR criteria are never capable of being met at the same time regardless of values.

• The number of PM metric Calculation Intervals defined by SET-TCA Window Threshold is greater than the number defined by the CLEAR-TCA Window Threshold.

A hospital uses an SD-WAN service to prioritize multiple Paths for outbound traffic to one of the hospital’s COTS (Commercial off-the-shelf) applications that is sensitive to Packet Delay. The SD-WAN Provider has applied the following PERFORMANCE Policy Criterion:

<<”One-way Packet Delay” , 15 ms>, <”One-way Packet Loss Ratio”, .06%>>

 

The three paths to the application are:

     Path A = <10 ms, .05%>

     Path C = <14 ms, .03%>

     Path B = <16 ms, .01%>

 

Which of the following is true when evaluating the three paths listed?

• Path C should be assigned first in the priority list.

• Path A is correctly assigned first in priority.

• Path B should be removed from the list given that 16 ms is above the threshold for that Performance Metric.

• Path B should be the first Path option instead of Path A given that it has the most desirable “One-way Packet Loss Ratio”.

A hospital is using the Service Providers' DNS servers to resolve DNS lookups. The hospital only uses an SD-WAN Subscriber Security Function that checks DNS Protocol Filtering (DPF).

What is applied to DNS messages from the Hospital?

• Only unencrypted DNS can be checked. Encrypted DNS messages are handled as another other packet in the Application Flow.

• All DNS messages can be checked regardless of whether it is encrypted or unencrypted.

• Only encrypted DNS can be checked. Unencrypted DNS messages are handled as another other packet in the Application Flow.

• Neither encrypted nor unencrypted DNS traffic can be checked.

A hospital is using a third-party DNS service instead of the Service Provider’s DNS servers. The hospital only uses an SD-WAN Subscriber Security Function that checks DNS Protocol Filtering (DPF).

What is applied to DNS messages from the Hospital?

• All DNS messages can be checked regardless of whether it is encrypted or unencrypted.

• Only encrypted DNS can be checked. Unencrypted DNS messages are handled as another other packet in the Application Flow.

• Neither encrypted nor unencrypted DNS traffic can be checked.

• Only unencrypted DNS can be checked. Encrypted DNS messages are handled as another other packet in the Application Flow.

A Stateless TCA Function uses which Threshold Crossing Alert (TCA) criteria to determine if a TCA should be set?

• TCA Performance Threshold Value only

• TCA Performance Threshold Value
  • PM Metric Calculation Interval
  • PM Metric Value

• • TCA Window Threshold
  • TCA Window Size
  • PM Metric Value

• • TCA Window Threshold
  • TCA Window Size
  • PM Metric Calculation Interval
  • PM Metric Value

Which of the following is true:

• SSL is more secure than TLS.

• IPsec can encrypt both the header and data.

• SNMP encrypts transmissions of HTTP pages.

• GRE cannot be used in a tunnel.

A school district is working to connect different schools together using an SD-WAN service. The Service Provider decides to run Service Readiness Testing (SRT) to verify connectivity between existing schools and a newly added school. How should SRT be implemented?

• Use the SRT to test connectivity between the Controller and the SD-WAN Edge.

• Use the Service Readiness Measurement Point (SRMP) at the SWVC (SD-Wan Virtual Connection) to test the UCS End Point Ordered Pairs connectivity.

• Use the Service Readiness Measurement Point (SRMP) at the SD-WAN Edge to test the UCS End Point Ordered Pairs connectivity.

• Use the SRT to test connectivity between the Orchestrator and the SD-WAN Edge.

An SD-WAN Subscriber has failed to obtain the most recent up-to-date database of security threats to guard against from the Service Provider. What is the result?

• The Service Provider classification takes precedence and updates the SD-WAN Subscriber’s threat database.

• The user’s device blocks the traffic regardless of the SD-WAN Subscriber threat database.

• The Service Provider classification takes precedence and traffic is blocked at the Subscriber before the threat database is updated.

• The SD-WAN Subscriber classification takes precedence and updates the Providers threat database.