300-415 · Question #333
An engineer configured a data policy called ROME-POLICY. Which configuration allows traffic flow from the Rome internal network toward other sites?
The correct answer is A. apply-policy site-list Rome data-policy ROME-POLICY from-service. To allow traffic flow from the Rome internal network towards other sites using a data policy, the apply-policy command must specify from-service for the data policy.
Question
Options
- Aapply-policy site-list Rome data-policy ROME-POLICY from-service
- Bapply-policy site-list Rome data-policy ROME-POLICY from-tunnel
- Csite-list Rome control-policy ROME-POLICY out
- Dsite-list Rome control-policy ROME-POLICY in
How the community answered
(51 responses)- A75% (38)
- B8% (4)
- C4% (2)
- D14% (7)
Why each option
To allow traffic flow from the Rome internal network towards other sites using a data policy, the `apply-policy` command must specify `from-service` for the data policy.
The `apply-policy site-list <list> data-policy <policy-name> from-service` command applies the data policy to traffic originating from the local service-side (internal) network, directing it towards other sites in the SD-WAN fabric.
The `from-tunnel` option applies the data policy to traffic coming from the SD-WAN tunnel (from other sites) towards the local site, which is the opposite direction needed.
This command syntax is for applying a control policy, not a data policy, and `out` typically refers to outbound control plane traffic.
This command syntax is for applying a control policy, not a data policy, and `in` typically refers to inbound control plane traffic.
Concept tested: Cisco SD-WAN data policy application direction
Source: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/sdwan-xe-17-book/sdwan-policy-config.html
Topics
Community Discussion
No community discussion yet for this question.