300-620 · Question #295
Which Cisco ACI feature allows the encryption of communication over TEP addresses connecting sites via the intersite network in a Cisco Multi-Site deployment?
The correct answer is D. CloudSec. CloudSec is the specific Cisco ACI Multi-Site feature that encrypts inter-site traffic over TEP addresses.
Question
Which Cisco ACI feature allows the encryption of communication over TEP addresses connecting sites via the intersite network in a Cisco Multi-Site deployment?
Options
- ATrustSec
- BIPsec
- CMACsec
- DCloudSec
How the community answered
(26 responses)- B4% (1)
- C4% (1)
- D92% (24)
Why each option
CloudSec is the specific Cisco ACI Multi-Site feature that encrypts inter-site traffic over TEP addresses.
TrustSec provides policy-based access and segmentation, but it is not the feature responsible for encrypting inter-site TEP communication in ACI Multi-Site.
IPsec is the underlying protocol used by CloudSec, but CloudSec is the specific Cisco ACI Multi-Site feature that implements this encryption.
MACsec operates at Layer 2 for point-to-point link encryption and is not used for encrypting inter-site TEP traffic over an IP-based intersite network.
CloudSec is a feature within Cisco ACI Multi-Site that uses IPsec ESP to encrypt data plane traffic and IKEv2 for key exchange, ensuring secure communication between ACI sites over the intersite network.
Concept tested: Cisco ACI Multi-Site inter-site encryption
Source: https://www.cisco.com/c/en/us/td/docs/dcn/aci/apic/5x/multi-site/cisco-aci-multi-site-architecture-white-paper-5x.html
Topics
Community Discussion
No community discussion yet for this question.