300-415 Question 69
Select 3An organization is deploying Cisco SD-WAN controllers in a public cloud environment. They want to ensure secure communication between the vManage controller, vSmart controller, and vBond orchestrator. Which of the following steps must be taken during the deployment process to accomplish this?
- A
Generate and apply a root certificate to all controllers.
- B
Configure the vBond orchestrator with a public IP address or DNS name.
- C
Enable BGP peering between vManage, vSmart, and vBond for route exchange.
- D
Ensure the controllers are registered with the Cisco Smart Licensing portal.
- E
Establish secure DTLS or TLS communication between the controllers.
Show answer and explanation
Correct answers: A, B, E
Explanation
To ensure secure communication between Cisco SD-WAN controllers, it is essential to establish a trust relationship using a root certificate, configure the vBond orchestrator to be publicly reachable, and utilize secure DTLS/TLS protocols for communication. These steps are critical for maintaining the integrity and security of the SD-WAN deployment. BGP peering is not applicable in this scenario, and while Smart Licensing registration is important for licensing, it does not directly impact inter-controller security.
- A. Correct.
A root certificate is required to establish a trust relationship between the SD-WAN controllers, ensuring secure communication.
- B. Correct.
The vBond orchestrator acts as the initial point of contact for SD-WAN edge devices and must be reachable via a public IP address or DNS name.
- C. Incorrect.
BGP is not used for communication between SD-WAN controllers; they use secure DTLS or TLS tunnels for communication.
- D. Incorrect.
Registering with Cisco Smart Licensing is necessary for license compliance but does not directly impact secure communication between controllers.
- E. Correct.
DTLS or TLS communication is mandatory between SD-WAN controllers to ensure secure data exchange.