PCNSE · Question #573
PCNSE Question #573: Real Exam Question with Answer & Explanation
The correct answer is B: SD-WAN direct internet access (DIA) links. SD-WAN Direct Internet Access (DIA) links allow branch offices to route selected traffic - such as bandwidth-intensive SaaS or cloud applications - directly to the internet through the local ISP link, bypassing the VPN backhaul to the data-center hub. This reduces WAN costs and i
Question
Which feature of PAN-OS SD-WAN allows you to configure a bandwidth-intensive application to go directly to the internet through the branch's ISP link instead of going back to the data-center hub through the VPN tunnel, thus saving WAN bandwidth costs?
Options
- ASD-WAN Full Mesh with branches only
- BSD-WAN direct internet access (DIA) links
- CSD-WAN Interface profile
- DVPN Cluster
Explanation
SD-WAN Direct Internet Access (DIA) links allow branch offices to route selected traffic - such as bandwidth-intensive SaaS or cloud applications - directly to the internet through the local ISP link, bypassing the VPN backhaul to the data-center hub. This reduces WAN costs and improves latency for cloud-bound traffic. Full Mesh with branches only (A) connects branches directly to each other but still uses VPN tunnels. SD-WAN Interface profiles (C) define link characteristics like bandwidth and latency thresholds. VPN Clusters (D) group devices for hub-and-spoke or mesh VPN topologies but do not provide direct internet breakout.
Topics
Community Discussion
No community discussion yet for this question.