300-415 Question 201
Select 3Your organization is deploying Cisco SD-WAN and needs to ensure both secure data transfer between branch sites and prioritization of critical traffic such as voice and video. Which combination of features would best meet these requirements?
- A
Enable IPsec encryption for all data plane traffic.
- B
Configure Application-Aware Routing policies to prioritize voice and video traffic.
- C
Use a Local Internet Breakout policy to route all traffic directly to the internet.
- D
Implement Transport-Based Quality of Service (QoS) to enforce bandwidth and priority rules.
- E
Disable TLOC extensions to reduce overhead on WAN links.
Show answer and explanation
Correct answers: A, B, D
Explanation
To meet the organization's requirements, IPsec encryption ensures data security between branch sites, Application-Aware Routing prioritizes critical traffic based on application performance, and Transport-Based QoS enforces bandwidth and priority rules for consistent quality. These features together address both security and QoS needs in a Cisco SD-WAN deployment.
- A. Correct.
Enabling IPsec encryption ensures secure data transfer by encrypting traffic between branch sites, meeting the security requirement.
- B. Correct.
Application-Aware Routing policies allow the prioritization of critical traffic like voice and video by dynamically selecting the best path based on application performance.
- C. Incorrect.
Using a Local Internet Breakout policy routes traffic directly to the internet, which is not relevant for securing branch-to-branch communication or prioritizing critical traffic.
- D. Correct.
Transport-Based QoS enforces bandwidth and priority rules, ensuring critical traffic like voice and video receives the necessary resources.
- E. Incorrect.
Disabling TLOC extensions reduces WAN link overhead but has no direct impact on security or traffic prioritization.