300-415 Question 34
Single answerA network administrator is configuring a Cisco SD-WAN deployment. The administrator needs to establish a secure site-to-site tunnel between two branch offices using a Cisco SD-WAN edge device. The solution should provide encryption for data in transit. Which tunneling protocol should the administrator choose, and why?
- A
IPsec, because it offers encryption and is widely used for securing site-to-site communication.
- B
GRE, because it provides encryption and supports multicast traffic.
- C
IPsec, because it supports encryption but does not add overhead to the packet.
- D
GRE, because it offers low overhead and is designed for secure communication.
Show answer and explanation
Correct answer: A
Explanation
IPsec is the preferred tunneling protocol for Cisco SD-WAN deployments when encryption and secure site-to-site communication are required. GRE, while useful for encapsulation and supporting multicast traffic, does not provide encryption by itself. Therefore, IPsec is the correct choice in this scenario.
- A. Correct.
IPsec is the correct choice for secure site-to-site communication because it provides encryption for data in transit. This makes it suitable for securing SD-WAN traffic between branch offices.
- B. Incorrect.
GRE does not provide encryption on its own. While it supports multicast traffic, it requires additional mechanisms (such as IPsec) to secure data in transit.
- C. Incorrect.
Although IPsec supports encryption, it does add some overhead to the packet due to encapsulation and encryption processes.
- D. Incorrect.
GRE provides low overhead and supports tunneling, but it does not offer inherent security features such as encryption. It is not designed for secure communication without additional protocols like IPsec.