Implementing Cisco SD-WAN Solutions (ENSDWI) — Question 254

Which two actions must be taken to allow certain department to require firewall protection when interacting with data center networks without including other departments? (Choose two.)

Answer options

• A. Use classification, policing, and marking
• B. Advertise to vSmart controllers.
• C. The regional hub advertises the availability of the firewall service.
• D. Apply data policies at vEdge.
• E. Deploy a service-chained firewall service per VPN.

Correct answer: C, E

Explanation

The correct answer includes option C, which refers to the regional hub making the firewall service available specifically for that department. Option E is also correct as it involves deploying a dedicated firewall service for each VPN, ensuring only the specified department utilizes it. The other options do not directly address the requirement of isolating firewall protection to a specific department.