300-415 Question 179
Single answerYou are tasked with configuring a data policy in Cisco SD-WAN to ensure that all traffic from branch site VPN 10 destined for a specific SaaS application is forwarded directly to the internet, bypassing the default data center route. Which configuration step is required to achieve this?
- A
Create a data policy with a match condition for the SaaS application's domain name and set the action to 'forward to internet'.
- B
Configure a centralized control policy to advertise the SaaS application's prefix into the branch site's routing table.
- C
Modify the default data policy to include a match for traffic destined to the SaaS application and set the action to 'drop'.
- D
Define a localized data policy at the branch site that matches the SaaS application's IP address range and set the action to 'forward to internet'.
Show answer and explanation
Correct answer: A
Explanation
In Cisco SD-WAN, data policies are used to define how traffic is forwarded based on specific criteria such as application type, source/destination, or domain name. To forward traffic destined for a SaaS application directly to the internet, a data policy must be created with a match condition for the application's domain and an action to forward traffic to the internet. This ensures the traffic bypasses the default route to the data center.
- A. Correct.
This is the correct option. A data policy can be created to match traffic destined for the SaaS application (using its domain name) and configure the action to forward such traffic directly to the internet.
- B. Incorrect.
This option is incorrect because a centralized control policy is not used to manipulate data plane forwarding decisions. It is used to control route advertisements and path selection.
- C. Incorrect.
This option is incorrect as 'drop' is not the desired action for this scenario. The goal is to forward traffic to the internet, not block it.
- D. Incorrect.
This option is incorrect because data policies are typically centralized. Localized policies are not ideal for ensuring consistent traffic forwarding decisions across multiple sites.