300-415 Question 236
Single answerYour organization utilizes Cisco SD-WAN for its multi-cloud architecture and is planning to integrate a cloud-based security solution to ensure secure internet and SaaS access for its branch locations. Which of the following is a key consideration when integrating a cloud security solution like Cisco Umbrella into Cisco SD-WAN?
- A
Ensure that all branch devices have direct internet breakout enabled to route traffic to the cloud security solution.
- B
Configure the Cisco SD-WAN fabric to direct traffic to the cloud security solution using a SIG (Secure Internet Gateway) tunnel.
- C
Disable local breakout at branch locations to force all traffic through the primary data center for security inspection.
- D
Deploy additional hardware firewalls at each branch location to enforce security policies for cloud traffic.
Show answer and explanation
Correct answer: B
Explanation
Integrating cloud security solutions like Cisco Umbrella into Cisco SD-WAN involves configuring the SD-WAN fabric to direct traffic to the cloud security solution using a Secure Internet Gateway (SIG) tunnel. This ensures that branch locations can securely access internet and SaaS applications without relying on centralized data center-based security, reducing latency and improving performance.
- A. Incorrect.
While direct internet breakout is a feature of Cisco SD-WAN, ensuring direct breakout alone does not establish integration with a cloud security solution. A Secure Internet Gateway (SIG) tunnel is required for this purpose.
- B. Correct.
This is the correct answer. Integrating a cloud security solution like Cisco Umbrella with Cisco SD-WAN involves configuring the SD-WAN fabric to direct relevant traffic to the cloud security solution using a SIG tunnel.
- C. Incorrect.
Disabling local breakout contradicts the purpose of integrating a cloud security solution, which is to inspect and secure traffic closer to the branch location rather than routing it through the data center.
- D. Incorrect.
Deploying additional hardware firewalls at branch locations is not necessary when integrating a cloud-based security solution. Cisco SD-WAN and cloud security solutions like Umbrella work together to secure traffic without requiring extra hardware.