nerdexam
Cisco

300-415 · Question #241

A network engineer must configure all branches to communicate with each other through the Service Chain Firewall located at the headquarters site. Which configuration allows the engineer to…

The correct answer is B. Screenshot of vManage 'CONFIGURATION POLICIES' menu, with 'Centralized Policy' highlighted. To configure all branches to communicate through a centralized service chain firewall located at the headquarters site, an engineer must utilize a Centralized Policy in vManage, as this policy type controls traffic flow across the entire SD-WAN fabric.

Policies

Question

A network engineer must configure all branches to communicate with each other through the Service Chain Firewall located at the headquarters site. Which configuration allows the engineer to accomplish this task?

Options

  • AScreenshot of vManage 'Administration' menu, showing 'Settings' and 'Cluster Management' options, with 'Administration' and 'Settings' highlighted.
  • BScreenshot of vManage 'CONFIGURATION POLICIES' menu, with 'Centralized Policy' highlighted.
  • CScreenshot of vManage 'Administration' menu, showing 'Settings' and 'Cluster Management' options, with 'Administration' and 'Cluster Management' highlighted.
  • DScreenshot of vManage 'CONFIGURATION POLICIES' menu, with 'Localized Policy' highlighted.

How the community answered

(49 responses)
  • A
    6% (3)
  • B
    76% (37)
  • C
    4% (2)
  • D
    14% (7)

Why each option

To configure all branches to communicate through a centralized service chain firewall located at the headquarters site, an engineer must utilize a Centralized Policy in vManage, as this policy type controls traffic flow across the entire SD-WAN fabric.

AScreenshot of vManage 'Administration' menu, showing 'Settings' and 'Cluster Management' options, with 'Administration' and 'Settings' highlighted.

The 'Administration' menu in vManage, including 'Settings', is for general platform management and configuration, not for defining network-wide traffic policies or service chains.

BScreenshot of vManage 'CONFIGURATION POLICIES' menu, with 'Centralized Policy' highlighted.Correct

Centralized Policies in vManage are specifically designed to define and apply network-wide traffic steering, segmentation, and service chaining rules across the entire SD-WAN overlay. To direct branch-to-branch traffic through a centralized firewall, a Centralized Policy is the correct configuration tool.

CScreenshot of vManage 'Administration' menu, showing 'Settings' and 'Cluster Management' options, with 'Administration' and 'Cluster Management' highlighted.

The 'Administration' -> 'Cluster Management' menu is used for managing the vManage cluster itself, such as adding or removing nodes, and is unrelated to configuring network traffic policies.

DScreenshot of vManage 'CONFIGURATION POLICIES' menu, with 'Localized Policy' highlighted.

Localized Policies are applied to individual WAN Edge devices or groups for site-specific routing, ACLs, and QoS, not for enforcing network-wide service chaining across multiple sites.

Concept tested: Centralized policy for service chaining

Source: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/sdwan-xe-gs-book/config-policies.html

Topics

#Service Chaining#Centralized Policy#Traffic Steering#Cisco SD-WAN Policies

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 300-415 Practice