300-420 Question 141
Select 4An enterprise network administrator is designing a Cisco SD-Access deployment for a multinational organization. The administrator needs to ensure that the network supports automatic segmentation of traffic based on business policies, provides centralized wireless management, and integrates security at all levels. Which components of the SD-Access architecture are critical to achieving these requirements?
- A
Underlay network for physical connectivity and transport of overlay traffic
- B
Overlay network for virtual segmentation and policy enforcement
- C
Cisco DNA Center for automation, centralized management, and policy creation
- D
Control plane for path computation and endpoint tracking
- E
Data plane for encrypting traffic between endpoints using VXLAN
Show answer and explanation
Correct answers: A, B, C, D
Explanation
In Cisco SD-Access, the underlay network provides the physical foundation for connectivity, while the overlay network enables virtual segmentation and policy enforcement. Automation and centralized management are achieved through Cisco DNA Center, which is critical for deploying business policies. The control plane ensures efficient traffic routing and endpoint tracking. While the data plane enables traffic forwarding using VXLAN, it does not inherently provide encryption, so it is not a standalone solution to the security requirement in this scenario.
- A. Correct.
The underlay network provides the physical infrastructure for connectivity and transport, which is essential for enabling the overlay network in SD-Access.
- B. Correct.
The overlay network enables virtual segmentation of traffic and enforces policies, which is a critical component for achieving business policy-based traffic isolation.
- C. Correct.
Cisco DNA Center plays a key role in automation, centralized management, and policy creation, which are necessary to meet the enterprise’s requirements.
- D. Correct.
The control plane is responsible for path computation and endpoint tracking, which are required for efficient traffic routing and endpoint location services.
- E. Incorrect.
The data plane uses VXLAN for traffic forwarding but does not inherently provide encryption. Security in SD-Access is achieved through trustsec and policy enforcement rather than data plane encryption alone.