300-415 Question #92: Real Exam Question with Answer & Explanation

The provided exhibit images contain two distinct drag-and-drop questions. The question text refers to configuring service chaining, which aligns with the second set of options related to networking parameters (IP address, color, encapsulation, VPN, service).

Policies

Question

Refer to the exhibit. An engineer is configuring service chaining. Which set of configurations is required for all traffic from Site ID 1 going toward Site ID 2 to get filtered through the firewall on the hub site?

Explanation

Approach. To configure service chaining for traffic redirection to a firewall on the hub site, the three most critical parameters to select from the given options are 'service', 'IP address', and 'VPN'. These should be dragged to the three available targets ('target1', 'target2', 'target3'). While the specific order of placement into the targets might not be strict in a conceptual question, a logical approach involves: 1. Defining the 'service' type (e.g., Firewall) that the traffic will be redirected to. 2. Specifying the 'IP address' of the next-hop interface on the firewall appliance where the traffic will be sent. 3. Identifying the 'VPN' (Service VPN ID) within which the firewall appliance is logically located, ensuring traffic is routed to the correct segment. Therefore, 'service', 'IP address', and 'VPN' are the correct selections.

Common mistakes.

common_mistake. Selecting 'color' or 'encapsulation' as part of the three required configurations for service chaining would be incorrect. 'Color' in SD-WAN primarily identifies the type of underlying transport network (e.g., MPLS, LTE, Public-Internet) used for establishing overlay tunnels between SD-WAN devices. While essential for overall connectivity, it's not a direct configuration parameter for defining the redirection path to a service appliance itself. 'Encapsulation' refers to the tunnel type (e.g., IPsec, GRE) used for the overlay tunnels. Although tunnels are fundamental to SD-WAN communication, the act of configuring a service chain redirection to an internal firewall primarily involves identifying the service, its next-hop IP, and its VPN context, rather than the underlying transport's color or encapsulation. These options are less directly related to the specific setup of a service chain compared to 'service', 'IP address', and 'VPN'.

Concept tested. SD-WAN service chaining configuration, specifically the definition of service routes and policies to redirect traffic to an external service appliance like a firewall, and the understanding of key SD-WAN networking configuration parameters.

Topics

#Service Chaining#Centralized Policy#Firewall Integration#Traffic Steering

Community Discussion

No community discussion yet for this question.

Full 300-415 Practice