300-415 Question 239
Select 3An organization has deployed Cisco SD-WAN in its infrastructure and plans to integrate cloud security solutions to ensure secure internet access for its branch offices. Which of the following actions are required to successfully integrate Cisco SD-WAN with a cloud-delivered security solution, such as Cisco Umbrella?
- A
Configure DNS redirection on the branch edge routers to route traffic to Cisco Umbrella.
- B
Establish a secure IPSec tunnel between branch edge routers and Cisco Umbrella.
- C
Enable BGP between the SD-WAN fabric and Cisco Umbrella to exchange routing information.
- D
Use vManage to configure a SIG template for Cisco Umbrella integration.
- E
Deploy an on-premises firewall at each branch office to inspect traffic before sending it to Cisco Umbrella.
Show answer and explanation
Correct answers: A, B, D
Explanation
To integrate Cisco SD-WAN with a cloud-delivered security solution like Cisco Umbrella, DNS redirection is used to route internet-bound traffic to the Umbrella cloud, and secure IPSec tunnels are established to ensure traffic confidentiality and integrity. Additionally, Cisco vManage allows administrators to create SIG templates, simplifying the integration process. BGP and on-premises firewalls are irrelevant in this scenario as Umbrella handles security in the cloud.
- A. Correct.
DNS redirection is required to route traffic from branch offices to Cisco Umbrella for cloud-based security enforcement.
- B. Correct.
A secure IPSec tunnel needs to be established between the branch edge routers and Cisco Umbrella for secure communication and traffic redirection.
- C. Incorrect.
BGP is not required for Cisco Umbrella integration as it uses DNS and secure tunneling mechanisms rather than routing protocol exchanges.
- D. Correct.
vManage provides a centralized way to configure a Secure Internet Gateway (SIG) template for Cisco Umbrella integration, streamlining the process.
- E. Incorrect.
Deploying an on-premises firewall at each branch office is unnecessary since Cisco Umbrella provides cloud-based security services.