Cisco
350-201(NEW-127Q) · Question #3
350-201(NEW-127Q) Question #3: Real Exam Question with Answer & Explanation
Sign in or unlock 350-201(NEW-127Q) to reveal the answer and full explanation for question #3. The question stem and answer options stay visible for context.
Network Security
Question
A multinational corporation, with a complex network infrastructure comprising a central data center, several remote offices, and cloud-based services, faces challenges in managing network security and performance. The company has experienced unexpected network traffic, leading to concerns about potential security vulnerabilities and reduced performance for critical applications. To address these issues, the IT team is considering network segmentation and must consider these variables: diverse geographical locations of offices, a mix of critical and non-critical applications, varying levels of data sensitivity, and the need for secure but efficient inter-office communication. How should the IT team apply network segmentation to optimize security and performance?
Options
- AEstablish a zero-trust model across the network, segmenting based on user roles and data access needs, applying uniform security policies across all segments, and using SD-WAN to manage traffic between remote offices and the data center.
- BSegment the network based on data sensitivity levels, isolating highly sensitive data in a secure segment with restricted access, and use quality of service policies to prioritize critical application traffic across segments.
- CCreate segments based on application criticality, with dedicated segments for critical applications to ensure performance, and enforce strict access control and monitoring for segments with sensitive data.
- DImplement VLANs to segregate traffic based on the geographical location of offices, use VPNs for secure inter-office communication, and apply stricter access controls for segments that handle sensitive data.
Unlock 350-201(NEW-127Q) to see the answer
You've previewed enough free 350-201(NEW-127Q) questions. Unlock 350-201(NEW-127Q) for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Network Segmentation#Zero Trust Architecture#SD-WAN#Access Control