300-415 Question 58
Single answerYour organization is deploying Cisco SD-WAN in a hybrid cloud environment where multiple workloads are hosted in an IaaS platform such as AWS or Azure. The goal is to extend the SD-WAN fabric securely to the cloud environment while maintaining optimal application performance. Which feature or capability would most effectively achieve this objective?
- A
Deploy Cisco SD-WAN vEdge Cloud in the IaaS environment to act as a virtual edge router.
- B
Utilize traditional IPsec tunnels from on-prem vEdge devices directly to the IaaS workloads.
- C
Enable Application-Aware Routing policies to prioritize traffic to the IaaS environment.
- D
Use a private MPLS circuit to connect the on-prem branch to the IaaS provider.
Show answer and explanation
Correct answer: A
Explanation
To extend the Cisco SD-WAN fabric to an IaaS environment, deploying vEdge Cloud in the IaaS platform is the most effective approach. It provides seamless integration of the cloud workloads into the SD-WAN fabric, enabling secure communication, traffic optimization, and centralized management. Other options either lack the capability to integrate the cloud environment into the SD-WAN fabric or are not cost-effective.
- A. Correct.
Deploying Cisco SD-WAN vEdge Cloud in the IaaS environment integrates the IaaS workloads into the SD-WAN fabric, ensuring secure and optimized connectivity.
- B. Incorrect.
While IPsec tunnels can provide secure connectivity, they do not integrate the IaaS environment into the SD-WAN fabric, limiting visibility and control.
- C. Incorrect.
Application-Aware Routing optimizes traffic within the SD-WAN fabric but does not address the specific need to extend SD-WAN to the IaaS environment.
- D. Incorrect.
Using a private MPLS circuit is costly and does not leverage the benefits of SD-WAN for cloud connectivity.