300-420 Question 238
Single answerAn enterprise network is designed with multiple branch offices connected to the headquarters via MPLS. The company wants to implement a scalable solution for providing internet access to all branches while ensuring security and minimizing latency. Which network service design should be implemented?
- A
Centralized internet access through headquarters with all branch traffic backhauled
- B
Direct internet access (DIA) at each branch with local firewall solutions
- C
Split tunneling with centralized internet access for specific applications
- D
Direct internet access (DIA) at each branch, with traffic sent to headquarters for firewall inspection
Show answer and explanation
Correct answer: B
Explanation
Providing direct internet access (DIA) at each branch with local firewall solutions ensures scalability, minimizes latency by avoiding backhauling traffic to headquarters, and maintains security. This approach is aligned with modern enterprise network design principles for distributed environments and is particularly relevant for applications requiring low latency, such as cloud-based services.
- A. Incorrect.
Centralized internet access through headquarters can lead to increased latency and bandwidth bottlenecks as all branch traffic must traverse the WAN to reach the internet, making it less optimal for a scalable solution.
- B. Correct.
Direct internet access (DIA) at each branch with local firewall solutions is the most scalable option, as it minimizes latency by sending branch traffic directly to the internet while ensuring security at the local level.
- C. Incorrect.
Split tunneling with centralized internet access for specific applications is a hybrid approach but still requires some traffic to traverse the WAN, which can add complexity and potential performance issues.
- D. Incorrect.
Direct internet access (DIA) at each branch with traffic sent to headquarters for firewall inspection defeats the purpose of DIA, as it adds unnecessary latency and WAN usage, reducing scalability.