300-415 Question 88
Single answerYour organization is deploying Cisco SD-WAN and needs to install the vManage, vSmart, and vBond controllers in a private data center. During the installation process, which key step ensures that the controllers can authenticate each other and establish secure communication?
- A
Generate and exchange certificates for each controller using a Certificate Authority (CA).
- B
Ensure all controllers are connected to the same physical VLAN for secure communication.
- C
Manually configure IPsec tunnels between the vManage, vSmart, and vBond controllers.
- D
Use pre-shared keys between controllers to establish mutual authentication.
Show answer and explanation
Correct answer: A
Explanation
In Cisco SD-WAN, the vManage, vSmart, and vBond controllers must exchange and validate certificates issued by a Certificate Authority (CA) to authenticate each other and establish secure communication. This step is crucial for setting up a secure SD-WAN environment. Using certificates provides scalability and strong security compared to other methods like pre-shared keys or manual IPsec tunnel configuration.
- A. Correct.
Correct. Cisco SD-WAN controllers require certificates to authenticate each other and establish secure communication. Certificates, issued by a trusted Certificate Authority (CA), are a key part of the SD-WAN infrastructure.
- B. Incorrect.
Incorrect. While the controllers need to communicate, being on the same VLAN is not a requirement for secure communication. SD-WAN relies on certificates, not network proximity.
- C. Incorrect.
Incorrect. IPsec tunnels are automatically established between SD-WAN controllers after proper authentication using certificates. Manual tunnel configuration is not required.
- D. Incorrect.
Incorrect. Pre-shared keys are not used for authentication in Cisco SD-WAN. The architecture relies on certificates for secure and scalable authentication.