Secure Access Service Edge (SASE) Overview Answers 1. What is one primary function of a secure web gateway? A. To protect end users from phishing attacks and malicious content. B. To reduce the need for virtual private networks (VPNs). C. To provide physical security for network hardware. D. To increase network latency for data transfers. Answer: To protect end users from phishing attacks and malicious content. (A) A secure web gateway primarily protects users from phishing attacks and malicious websites, enhancing overall network security. 2. Which characteristic best describes SD-WAN? A. It allows dynamic configuration across various network connections. B. It operates solely on traditional private lines. C. It requires manual routing adjustments for traffic management. D. It offers limited application performance optimization. Answer: It allows dynamic configuration across various network connections. (A) SD-WAN allows for dynamic configuration and optimized routing, making it adaptable to varying network conditions. 3. How does SD-WAN contribute to network management? A. By providing immediate physical access to all network locations. B. By allowing seamless connectivity and improving application performance. C. By preventing unauthorized user access to the main server. D. By simplifying the deployment of hardware firewalls. Answer: By allowing seamless connectivity and improving application performance. (B) SD-WAN simplifies network management by providing seamless connectivity and enhancing application performance across different locations. 4. What role does a secure web gateway play in the SASE framework? A. It focuses solely on the optimization of network bandwidth. B. It exclusively manages physical hardware security. C. It provides centralized user access management. D. It acts as a protective layer against web-based threats and ensures compliance with acceptable usage policies. Answer: It acts as a protective layer against web-based threats and ensures compliance with acceptable usage policies. (D) In the SASE framework, a secure web gateway helps protect against web-based threats while ensuring compliance with security policies. 5. Which of the following is NOT a benefit of using SD-WAN? A. Reduced reliance on dedicated network connections. B. Dynamic path selection for improved traffic management. C. Optimized routing based on application needs. D. Increased dependency on expensive physical links. Answer: Increased dependency on expensive physical links. (D) A key benefit of SD-WAN is the reduction in reliance on expensive dedicated physical links, promoting cost-efficient connectivity. 6. What is the primary purpose of secure web gateways (SWG)? A. To control and monitor web traffic passing through a network B. To provide multi-factor authentication for users C. To encrypt data transmitted across a network D. To prevent malware from entering cloud applications Answer: To control and monitor web traffic passing through a network (A) SWGs specifically focus on monitoring and controlling web traffic to enhance security. 7. Which of the following is a key characteristic of Zero Trust Architecture (ZTA)? A. Block all traffic from unauthorized devices B. Verification of users and devices regardless of location C. Implicit trust of devices within a network D. Full access to all users once they are authenticated Answer: Verification of users and devices regardless of location (B) ZTA operates on the principle of 'never trust, always verify,' requiring constant verification. 8. What is a major benefit of implementing Secure Access Service Edge (SASE)? A. Limiting the number of cloud applications accessed B. A separate solution for each security challenge C. Increased physical presence of security appliances D. Reduction in the complexity of managing separate networking and security infrastructures Answer: Reduction in the complexity of managing separate networking and security infrastructures (D) SASE aims to simplify management by consolidating networking and security functions into one platform. 9. Which technology is essential for securing data and resources transmitted across a network? A. Firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) B. File integrity monitoring (FIM) C. Cloud Access Security Brokers (CASB) D. Virtual Private Networks (VPNs) Answer: Firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) (A) These technologies form the backbone of network security, protecting against various threats. 10. What is a major concern of cloud security? A. Hardware failures in on-premises infrastructure B. Increasing bandwidth for web traffic C. Data breaches and unauthorized access D. Outdated firewall technology Answer: Data breaches and unauthorized access (C) Cloud security focuses greatly on protecting against threats like data breaches and unauthorized access. 11. What does the principle 'never trust, always verify' in Zero Trust Architecture signify? A. There is trust in established network perimeters B. Only external users need verification for access C. Users can trust their own devices once they are connected D. Every access attempt must be evaluated before granting permission Answer: Every access attempt must be evaluated before granting permission (D) This principle emphasizes the need for continuous verification of all access attempts. 12. Which of the following components is integral to Secure Access Service Edge (SASE)? A. Software-defined Wide Area Network (SD-WAN) B. Virtual Private Network (VPN) C. Traditional firewalls D. On-premises data centers Answer: Software-defined Wide Area Network (SD-WAN) (A) SD-WAN is a key part of the SASE architecture, enhancing networking capabilities. 13. Which strategy is commonly employed in cloud security to protect sensitive data? A. Relying solely on firewall protective measures B. Implementing multi-factor authentication C. Full disk encryption D. Restricting user access based on geographical location Answer: Implementing multi-factor authentication (B) Multi-factor authentication is a vital practice in cloud security to enhance data protection.