WorksheetsPart 1.8
Total questions: 20
Worksheet time: 10mins
Which of the following best describes a primary benefit of implementing Software-Defined Networking (SDN) in a modern network environment?
It eliminates the need for any physical network hardware.
It allows centralized management and automation of network resources.
It increases network latency by adding more control layers.
It restricts network scalability to small environments.
When deploying SD-WAN, which strategy helps optimize application performance across multiple branch locations?
Using a single static route for all traffic
Dynamically selecting the best available WAN link based on real-time conditions
Disabling all security features to reduce overhead
Relying solely on MPLS circuits
How does VXLAN address the limitations of traditional VLANs in large-scale data centers?
By reducing the number of available VLAN IDs
By supporting up to 16 million logical networks over a shared infrastructure
By eliminating the need for any encapsulation
By restricting network segmentation
Which principle is central to Zero Trust Architecture (ZTA)?
Trusting all devices inside the corporate network
Never trust, always verify, regardless of network location
Allowing unrestricted access to internal resources
Using only perimeter-based security
Which of the following is a core component of Secure Access Service Edge (SASE)?
Physical firewalls only
Cloud-delivered security services integrated with wide area networking
Manual configuration of all network devices
On-premises-only access control
In SD-WAN environments, which approach enhances network security for remote branches?
Disabling encryption to improve speed
Integrating security policies and traffic inspection at the edge
Allowing all traffic without inspection
Using only a single ISP connection
How does Infrastructure as Code (IaC) improve network management?
By requiring manual configuration of each device
By enabling automated, repeatable deployment of network resources using code
By limiting network changes to once per year
By removing the need for version control
Which deployment method would best utilize SD-WAN to support a company with multiple cloud applications and remote users?
Directing all traffic through a central data center
Enabling local internet breakout at branch sites for cloud access
Forcing all users to use VPN tunnels to headquarters
Disabling dynamic path selection
What is a key use case for implementing VXLAN in a data center?
Limiting the number of virtual machines per network
Extending Layer 2 networks across geographically dispersed locations
Preventing any network segmentation
Reducing the number of available IP addresses
Which action aligns with the Zero Trust principle of “least privilege”?
Granting all users administrator access by default
Providing users only the minimum access necessary to perform their job functions
Allowing unrestricted access to all network resources
Disabling all authentication requirements
Which feature of SASE helps organizations protect users regardless of their location?
On-premises-only firewalls
Cloud-based security services that follow the user
Static routing tables
Manual VPN configuration for each device
How can SD-WAN improve the security posture of a distributed enterprise network?
By bypassing all security checks for faster performance
By segmenting traffic and applying security policies based on application and user identity
By using only a single communication protocol
By disabling all encryption
Which of the following best demonstrates the use of Infrastructure as Code (IaC) in network operations?
Manually updating router configurations via CLI
Using version-controlled scripts to automate switch provisioning
Physically replacing network cables
Disabling all automation tools
When implementing SDN, what is a common challenge organizations may face?
Increased network agility
Integration with legacy hardware and systems
Simplified network management
Automated policy enforcement
Which SD-WAN deployment strategy is most effective for ensuring business continuity during WAN link failures?
Relying on a single WAN connection
Implementing active-active multi-link failover
Disabling redundancy features
Using only broadband internet
How does VXLAN facilitate network scalability in cloud environments?
By limiting the number of virtual networks to 4096
By allowing the creation of millions of isolated virtual networks over a shared infrastructure
By requiring physical separation of all networks
By reducing the number of available VLANs
Which approach best applies Zero Trust principles to user authentication?
Single-factor authentication for all users
Multi-factor authentication and continuous verification of user identity
No authentication required for internal users
Trusting users based on their IP address alone
What is a distinguishing feature of Security Service Edge (SSE) within the SASE framework?
It focuses solely on physical network security
It delivers security services such as SWG, CASB, and ZTNA from the cloud
It requires all security appliances to be on-premises
It eliminates the need for any security policies
How does SD-WAN support secure direct internet access for branch offices?
By routing all traffic through the headquarters
By applying security policies and filtering at the branch edge before allowing internet access
By disabling all security features at the branch
By using only private MPLS circuits
Which practice demonstrates the use of Infrastructure as Code (IaC) for network configuration management?
Editing device settings manually through a GUI
Deploying network changes using automated scripts stored in a version control system
Making ad-hoc changes without documentation
Avoiding the use of any automation tools
