300-415 Question 200
Select 3An enterprise is deploying Cisco SD-WAN and needs to ensure that all traffic between branches is encrypted and adheres to compliance standards. At the same time, the business-critical traffic such as VoIP should always maintain high-quality service even during network congestion. Which combination of features should the enterprise configure to meet these requirements?
- A
Enable IPsec encryption for all SD-WAN tunnels
- B
Configure an Application-Aware Routing policy for business-critical traffic
- C
Use a centralized control policy to block non-essential traffic
- D
Implement DSCP marking for prioritizing VoIP traffic
- E
Enable ZBFW (Zone-Based Firewall) on all branch routers
Show answer and explanation
Correct answers: A, B, D
Explanation
To meet the encryption and QoS requirements in the scenario, the enterprise must enable IPsec for secure communication, use Application-Aware Routing to ensure VoIP traffic is prioritized during congestion, and implement DSCP marking to classify and prioritize VoIP traffic across the network. While ZBFW and traffic blocking policies enhance security and reduce unwanted traffic, they do not directly address the primary goals of encryption and QoS in this scenario.
- A. Correct.
IPsec encryption ensures that all traffic between SD-WAN endpoints is encrypted, providing data confidentiality and compliance with security standards.
- B. Correct.
Application-Aware Routing allows the SD-WAN solution to prioritize and route business-critical traffic such as VoIP based on performance metrics like latency, loss, and jitter.
- C. Incorrect.
While blocking non-essential traffic can help reduce congestion, it does not directly prioritize or improve the quality of service for VoIP traffic.
- D. Correct.
DSCP (Differentiated Services Code Point) marking is used to prioritize VoIP traffic in the network by assigning it a higher priority in the QoS queue.
- E. Incorrect.
While Zone-Based Firewall (ZBFW) enhances security by inspecting traffic flows, it does not directly address encryption or Quality of Service requirements for business-critical traffic.