300-415 Question 210
Select 3An organization is deploying Cisco SD-WAN and wants to ensure that traffic between branch sites and the data center is encrypted and protected from unauthorized access. Additionally, they want to enable advanced security features such as URL filtering and malware detection. Which combination of Cisco SD-WAN security features can address these requirements?
- A
IPSec encryption
- B
URL filtering
- C
Next-Generation Intrusion Prevention System (NG IPS)
- D
Advanced QoS policies
- E
Cisco Umbrella integration
Show answer and explanation
Correct answers: A, B, C
Explanation
To meet the organization's requirements, Cisco SD-WAN provides IPSec encryption to secure data in transit, URL filtering to control access to web content, and NG IPS to detect and prevent advanced threats such as malware. These features together ensure both encryption and advanced security for the organization’s SD-WAN deployment.
- A. Correct.
IPSec encryption ensures that traffic between SD-WAN sites is encrypted and secure, protecting data from unauthorized access during transit.
- B. Correct.
URL filtering is an advanced security feature that blocks or allows access to specific URLs, helping to prevent access to malicious or inappropriate websites.
- C. Correct.
Next-Generation Intrusion Prevention System (NG IPS) provides advanced threat detection and prevention capabilities, protecting the network from malware and other security threats.
- D. Incorrect.
Advanced QoS policies are used to prioritize application traffic but do not provide encryption or advanced security features like URL filtering or intrusion prevention.
- E. Incorrect.
Cisco Umbrella integration provides cloud-based threat intelligence and DNS-layer security, but it is not explicitly required for the encryption and advanced security features mentioned in the scenario.