300-415 Question 83
Single answerAn enterprise is deploying Cisco SD-WAN controllers in a hybrid hosting environment, using both public cloud platforms and private data centers. What is a key consideration for ensuring secure and reliable communication between the SD-WAN controllers and edge devices in such a hybrid hosting scenario?
- A
Establishing IPsec tunnels between edge devices and controllers in both public and private environments
- B
Using separate management consoles for public cloud and private data center controllers
- C
Disabling NAT traversal for public cloud controllers to simplify routing
- D
Relying solely on public IP addresses for communication between the controllers and edge devices
Show answer and explanation
Correct answer: A
Explanation
In a hybrid hosting environment, where Cisco SD-WAN controllers are deployed on both public and private platforms, establishing IPsec tunnels is critical for ensuring secure and reliable communication between edge devices and the controllers. This approach accommodates NAT traversal and supports both public and private IP address scenarios, providing a unified and secure architecture.
- A. Correct.
Establishing IPsec tunnels ensures secure and reliable communication between edge devices and controllers, regardless of whether the controllers are hosted in public or private environments. This is a best practice in hybrid deployments.
- B. Incorrect.
Using separate management consoles for public and private controllers increases complexity and is not required in Cisco SD-WAN deployments, which are designed to be managed centrally.
- C. Incorrect.
Disabling NAT traversal can lead to communication issues, especially in public cloud environments where NAT is often used. NAT traversal should be enabled to ensure seamless connectivity.
- D. Incorrect.
Relying solely on public IP addresses is not secure and does not account for private data center environments. Cisco SD-WAN supports both public and private IPs, and secure tunnels should be used.