nerdexam
Cisco

300-420 · Question #329

Refer to the exhibit. Currently the network uses a single-homed solution for connecting to the internet. An engineer must design a more resilient WAN using the internet circuits at each site. The…

The correct answer is C. SD-WAN. To design a resilient WAN with failover, load-sharing, and QoS over multiple internet circuits at each site, SD-WAN is the most comprehensive solution.

WAN for Enterprise Networks

Question

Refer to the exhibit. Currently the network uses a single-homed solution for connecting to the internet. An engineer must design a more resilient WAN using the internet circuits at each site. The design must provide failover connectivity, support load-sharing of traffic, and QoS. Which solution must the engineer choose?

Exhibit

300-420 question #329 exhibit

Options

  • AIPsec tunnels
  • BGet VPN
  • CSD-WAN
  • DDMVPN

How the community answered

(57 responses)
  • A
    14% (8)
  • B
    5% (3)
  • C
    72% (41)
  • D
    9% (5)

Why each option

To design a resilient WAN with failover, load-sharing, and QoS over multiple internet circuits at each site, SD-WAN is the most comprehensive solution.

AIPsec tunnels

While IPsec tunnels provide secure connectivity and can be configured for basic failover, implementing advanced load-sharing and granular application-aware QoS across multiple internet circuits dynamically is complex and not an inherent feature of basic IPsec without additional orchestration.

BGet VPN

Get VPN focuses on 'any-to-any' secure encrypted communication within a VPN domain but lacks the native intelligence for multi-link management, dynamic load-sharing, or advanced application-aware QoS capabilities that SD-WAN offers over diverse internet circuits.

CSD-WANCorrect

SD-WAN solutions are specifically engineered to aggregate and intelligently manage multiple WAN connections, including diverse internet circuits, at each site. They provide dynamic path selection for automatic failover, active-active load-sharing of traffic, and application-aware QoS to prioritize critical applications over best-effort internet links, fulfilling all specified requirements.

DDMVPN

DMVPN simplifies VPN deployments for hub-and-spoke or spoke-to-spoke topologies and supports failover, but it lacks the centralized control, intelligent path selection, dynamic load-sharing, and comprehensive application-aware QoS features across multiple, diverse internet links that SD-WAN provides.

Concept tested: WAN architecture- SD-WAN capabilities

Source: https://www.cisco.com/c/en/us/products/wan-optimization/what-is-sd-wan.html

Topics

#SD-WAN#WAN Design#Network Resilience#Traffic Load Balancing

Community Discussion

No community discussion yet for this question.

Full 300-420 Practice