Question 1

Identity and access management between multiple users and multiple applications has become a mandatory requirement for Company XYZ to fight against ever increasing cybersecurity threats. To achieve this, federated identity services have been deployed in the Company XYZ network to provide single sign-on and Multi-Factor Authentication for the applications and services. Which protocol can be used by Company XYZ to provide authentication and authorization services?

Options :

A : OAuth2

B : OpenID Connect

C : OpenID

D : SAML2.0

Answer: D

Question 2

Which two data plane hardening techniques are true? (Choose two)

Options :

A : warning banners

B : redundant AAA servers

C : Control Plane Policing

D : SNMPv3

E : infrastructure ACLs

F : disable unused services

G : routing protocol authentication

Answer: C,E

Question 3

A business wants to centralize services via VDI technology and to replace remote WAN desktop PCs with thin client-type machines to reduce operating costs. Which consideration supports the new business requirement?

Options :

A : VDI servers should be contained centrally within a DMZ.

B : VDI servers should be contained within dedicated VLANs in each branch location.

C : The WAN should offer low latency and be resized.

D : The thin client traffic should be placed in a WAN QoS priority queue.

Answer: D

Question 4

What is a design consideration of policy-based routing?

Options :

A : It should be implemented at both ends of a GRE tunnel

B : It can limit the network scalability

C : It decreases failure detection time.

D : It can create microloops during network reconvergence.

Answer: B

Question 5

SDWAN networks capitalize the usage of broadband Internet links over traditional MPLS links to offer more

cost benefits to enterprise customers. However, due to the insecure nature of the public Internet, it is

mandatory to use encryption of traffic between any two SDWAN edge devices installed behind NAT

gateways. Which overlay method can provide optimal transport over unreliable underlay networks that are

behind NAT gateways?

Options :

A : TLS

B : DTLS

C : IPsec

D : GRE

Answer: C