nerdexam
Cisco

300-415 · Question #367

What is the first step for setting up traffic flows when enabling TLS Proxy in SD-WAN for security?

The correct answer is D. The TCP connection is established between the client and the proxy, and between the proxy and the server. This question asks for the initial step in establishing traffic flows when enabling TLS Proxy for security in an SD-WAN environment.

Security and Quality of Service

Question

What is the first step for setting up traffic flows when enabling TLS Proxy in SD-WAN for security?

Options

  • AThe sender authenticates the devices and individual users, and the receiver verifies the signature by decrypting the message with the public key of the sender.
  • BCertificate authorities in TLS Proxy issue certificates for authentication to all entities such as hosts, network devices, or users.
  • CWhen decryption policy is enabled for the flow, a client hello packet is received by Unified Threat Defense to define the decryption action.
  • DThe TCP connection is established between the client and the proxy, and between the proxy and the server.

How the community answered

(51 responses)
  • A
    2% (1)
  • B
    4% (2)
  • C
    2% (1)
  • D
    92% (47)

Why each option

This question asks for the initial step in establishing traffic flows when enabling TLS Proxy for security in an SD-WAN environment.

AThe sender authenticates the devices and individual users, and the receiver verifies the signature by decrypting the message with the public key of the sender.

Sender/receiver authentication and signature verification occur during the TLS handshake, which happens after the initial TCP connection establishment.

BCertificate authorities in TLS Proxy issue certificates for authentication to all entities such as hosts, network devices, or users.

Certificate authorities issuing certificates is a prerequisite for TLS to function, but it's an administrative step, not the first step in setting up a traffic flow through the proxy.

CWhen decryption policy is enabled for the flow, a client hello packet is received by Unified Threat Defense to define the decryption action.

Receiving a client hello packet and defining decryption action happens after the TCP connection is established and the client initiates the TLS handshake.

DThe TCP connection is established between the client and the proxy, and between the proxy and the server.Correct

The very first step for any traffic flow through a proxy, including a TLS proxy, is the establishment of the underlying TCP connection. The client initiates a TCP connection to the proxy, and the proxy then establishes a separate TCP connection to the destination server, acting as an intermediary for all subsequent traffic, including the TLS handshake.

Concept tested: TLS Proxy traffic flow initiation

Source: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/security/ios-xe-17/security-book-xe/tls-proxy.html

Topics

#TLS Proxy#SD-WAN Security#Traffic Flow Setup#TCP Connection

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 300-415 Practice