SD-WAN Design Considerations JN0-1103 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · medium

   What is the purpose of application-aware routing in SD-WAN?

   • ATo route all traffic over the same path regardless of application type.
   • BTo block all non-business applications.
   • CTo identify applications and route their traffic based on business intent and performance requirements.
   • DTo prioritize traffic based only on source IP address.
   Reveal Solution Discussion Select an answer first
2. 12foundation · medium

   How does SD-WAN typically identify applications for application-aware routing?

   • ABy only looking at the destination IP address.
   • BBy using the VLAN tag of the traffic.
   • CBy using deep packet inspection (DPI) and other classification techniques.
   • DBy using the source MAC address.
   Reveal Solution Discussion Select an answer first
4. 13foundation · medium

   What is the purpose of secure direct internet access (DIA) in an SD-WAN design?

   • ATo block all internet access from branch sites.
   • BTo use only MPLS for internet traffic.
   • CTo allow branch users to access the internet directly while applying security policies locally.
   • DTo route all internet traffic through the data center for security inspection.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   An architect is designing an SD-WAN for a company with MPLS and broadband at each branch. The company wants to use the broadband link for non-critical traffic and MPLS for critical traffic. However, the broadband link is sometimes congested, causing packet loss for critical traffic if it fails over. Which design should be implemented to prevent this?

   • AUse a single default route to MPLS and ignore broadband
   • BConfigure application-aware routing with SLA monitoring so critical traffic uses MPLS and only fails over to broadband when MPLS is down, with broadband reserved for non-critical traffic
   • CConfigure the broadband link as active and MPLS as backup
   • DUse ECMP across MPLS and broadband for all traffic
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company is deploying SD-WAN and wants to send guest Wi-Fi traffic directly to the internet from the branch, bypassing the headquarters data center, while keeping corporate traffic on the MPLS overlay. The security team requires that guest traffic be isolated from the corporate network and inspected. Which SD-WAN feature set should be enabled?

   • AIPsec tunnels only between the branch and the nearest gateway, with no local breakout
   • BA single flat network at each branch with a default route to the broadband link
   • CSecure direct internet access (DIA) with segmentation and integrated firewall inspection
   • DFull mesh VPN tunnels between all branches to carry guest traffic to headquarters
   Reveal Solution Discussion Select an answer first