300-415 Question 203
Select 3An enterprise is using Cisco SD-WAN to connect multiple branch locations. The IT team is tasked with ensuring that critical voice traffic receives priority over other applications while also implementing advanced security features to protect sensitive data. Which combination of actions should the IT team take to meet these requirements?
- A
Configure application-aware routing policies to prioritize voice traffic based on DSCP markings.
- B
Enable IPSec encryption on all transport links to secure data in transit.
- C
Set up a QoS policy to reserve bandwidth for voice traffic and apply it to the TLOC path.
- D
Enable ZBFW (Zone-Based Firewall) to inspect and filter traffic between branch sites.
- E
Deploy a cloud security solution to offload QoS policies for voice traffic.
Show answer and explanation
Correct answers: A, B, C
Explanation
To meet the requirements of prioritizing voice traffic and securing sensitive data, the IT team should configure application-aware routing policies to identify and prioritize voice traffic, enable IPSec encryption to secure data, and set up QoS policies to reserve bandwidth for voice. These actions ensure both quality of service and robust security for critical applications.
- A. Correct.
This is correct because application-aware routing policies allow the SD-WAN fabric to identify and prioritize specific traffic types such as voice, ensuring low-latency and high-quality communication.
- B. Correct.
This is correct because IPSec encryption ensures that sensitive data, including voice traffic, is securely transmitted across the SD-WAN fabric.
- C. Correct.
This is correct because setting up a QoS policy to reserve bandwidth for voice traffic ensures that critical applications like voice receive the required resources to maintain quality.
- D. Incorrect.
This is incorrect because ZBFW focuses on traffic inspection and filtering, which is not directly related to prioritizing voice traffic or securing data in transit.
- E. Incorrect.
This is incorrect because cloud security solutions are used for centralized threat detection and protection, not for implementing QoS policies specifically for voice traffic.