nerdexam
Cisco

300-415 · Question #264

Which feature delivers traffic to the Cisco Umbrella SIG cloud from a Cisco SD-WAN domain?

The correct answer is B. IPsec tunnel. Cisco SD-WAN integrates with Cisco Umbrella Secure Internet Gateway (SIG) by establishing IPsec tunnels from SD-WAN edge devices to the Umbrella cloud.

Security and Quality of Service

Question

Which feature delivers traffic to the Cisco Umbrella SIG cloud from a Cisco SD-WAN domain?

Exhibit

300-415 question #264 exhibit

Options

  • AL2TPv3 tunnel
  • BIPsec tunnel
  • Clocal umbrella agent
  • Dsource NAT

How the community answered

(21 responses)
  • B
    95% (20)
  • C
    5% (1)

Why each option

Cisco SD-WAN integrates with Cisco Umbrella Secure Internet Gateway (SIG) by establishing IPsec tunnels from SD-WAN edge devices to the Umbrella cloud.

AL2TPv3 tunnel

L2TPv3 tunnels are not the standard mechanism for integrating Cisco SD-WAN with Cisco Umbrella SIG.

BIPsec tunnelCorrect

IPsec tunnels are the standard and recommended method for securely forwarding traffic from Cisco SD-WAN devices to the Cisco Umbrella SIG cloud for inspection and policy enforcement. These tunnels encrypt and authenticate the traffic, ensuring secure delivery to Umbrella's cloud-based security services.

Clocal umbrella agent
Dsource NAT

Concept tested: SD-WAN Umbrella SIG integration via IPsec

Source: https://www.cisco.com/c/en/us/td/docs/sdwan/sd-wan-release-20-x/configuration-guide/security/sdwan-security-cg/configure-umbrella-integration.html

Topics

#SD-WAN Cloud Security#Umbrella SIG Integration#IPsec Tunnels#Traffic Steering

Community Discussion

No community discussion yet for this question.

Full 300-415 Practice