nerdexam
Cisco

300-620 · Question #295

Which Cisco ACI feature allows the encryption of communication over TEP addresses connecting sites via the intersite network in a Cisco Multi-Site deployment?

The correct answer is D. CloudSec. CloudSec is the specific Cisco ACI Multi-Site feature that encrypts inter-site traffic over TEP addresses.

Multi-Pod and Multi-Site

Question

Which Cisco ACI feature allows the encryption of communication over TEP addresses connecting sites via the intersite network in a Cisco Multi-Site deployment?

Options

  • ATrustSec
  • BIPsec
  • CMACsec
  • DCloudSec

How the community answered

(26 responses)
  • B
    4% (1)
  • C
    4% (1)
  • D
    92% (24)

Why each option

CloudSec is the specific Cisco ACI Multi-Site feature that encrypts inter-site traffic over TEP addresses.

ATrustSec

TrustSec provides policy-based access and segmentation, but it is not the feature responsible for encrypting inter-site TEP communication in ACI Multi-Site.

BIPsec

IPsec is the underlying protocol used by CloudSec, but CloudSec is the specific Cisco ACI Multi-Site feature that implements this encryption.

CMACsec

MACsec operates at Layer 2 for point-to-point link encryption and is not used for encrypting inter-site TEP traffic over an IP-based intersite network.

DCloudSecCorrect

CloudSec is a feature within Cisco ACI Multi-Site that uses IPsec ESP to encrypt data plane traffic and IKEv2 for key exchange, ensuring secure communication between ACI sites over the intersite network.

Concept tested: Cisco ACI Multi-Site inter-site encryption

Source: https://www.cisco.com/c/en/us/td/docs/dcn/aci/apic/5x/multi-site/cisco-aci-multi-site-architecture-white-paper-5x.html

Topics

#Multi-Site#encryption#CloudSec#intersite network

Community Discussion

No community discussion yet for this question.

Full 300-620 Practice