300-415 Question 199
Single answerAn organization has implemented Cisco SD-WAN with multiple branch sites. The IT team wants to enable direct Internet access (DIA) at a branch site for cloud applications while ensuring that non-cloud traffic is sent through the data center. Which configuration step is required to achieve this?
- A
Configure an Application-Aware Routing (AAR) policy to steer cloud traffic directly to the Internet.
- B
Enable NAT on the branch router and configure a centralized policy to identify traffic for DIA.
- C
Create a local traffic policy at the branch site to identify and forward DIA traffic to the Internet.
- D
Deploy a centralized Internet breakout policy to route all Internet traffic through the hub site.
Show answer and explanation
Correct answer: B
Explanation
To enable direct Internet access (DIA) at a branch site in Cisco SD-WAN, NAT must be enabled at the branch router, and a centralized policy must be configured to identify and route cloud application traffic directly to the Internet. This ensures that only specific traffic is routed directly to the Internet, while other traffic is sent to the data center.
- A. Incorrect.
Application-Aware Routing (AAR) is used to steer traffic based on performance metrics but does not directly enable direct Internet access (DIA).
- B. Correct.
Enabling NAT on the branch router and configuring a centralized policy allows the identification of DIA traffic and ensures it is routed directly to the Internet.
- C. Incorrect.
Local traffic policies can be used to forward some traffic types, but a centralized policy is more appropriate for managing DIA across multiple sites in a Cisco SD-WAN deployment.
- D. Incorrect.
A centralized Internet breakout policy routes all Internet traffic through the hub, which contradicts the requirement for direct Internet access at the branch.