300-415 Question 118
Select 3An enterprise is deploying Cisco SD-WAN and needs to configure the data plane to ensure that critical traffic between branch sites is encrypted while maintaining performance. The enterprise also wants to enable dynamic path selection between WAN links based on application performance. Which configuration steps are required to achieve this?
- A
Configure TLOC extensions on branch devices for redundancy across WAN links.
- B
Enable IPsec encryption on the data plane tunnels between branch devices.
- C
Implement application-aware routing policies using SLA-based metrics.
- D
Configure the BFD protocol for real-time link monitoring.
- E
Enable multicast routing to optimize bandwidth usage for critical applications.
Show answer and explanation
Correct answers: B, C, D
Explanation
To achieve secure and performant data plane communication in Cisco SD-WAN, IPsec encryption must be enabled for traffic security. Dynamic path selection is implemented through application-aware routing using SLA-based metrics, which requires real-time link monitoring provided by BFD. These configurations together ensure encrypted traffic and optimal performance across WAN links.
- A. Incorrect.
TLOC extensions are used to optimize connectivity redundancy but are not directly related to encrypting traffic or enabling dynamic path selection.
- B. Correct.
IPsec encryption ensures that data plane traffic between branch devices is secure, meeting the requirement for encrypted communication.
- C. Correct.
Application-aware routing with SLA-based metrics is essential for dynamic path selection as it evaluates WAN link performance and routes traffic accordingly.
- D. Correct.
BFD (Bidirectional Forwarding Detection) is required for real-time link monitoring, which is critical for measuring SLA metrics and supporting dynamic path selection.
- E. Incorrect.
Multicast routing is useful for specific applications like video streaming but is not directly related to encrypting traffic or dynamic path selection.