MENU
SDWAN networks capitalize the usage of broadband Internet links over traditional MPLS links to offer more cost benefits to enterprise customers. However, due to the insecure nature of the public Internet, it is mandatory to use encryption of traffic between any two SDWAN edge devices installed behind NAT gateways. Which overlay method can provide optimal transport over unreliable underlay networks that are behind NAT gateways?
Suggested Answer: A
Get Premium 400-007 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
33 comments · newest first
BA
Barrie
11 months ago
TLS is good, but not ideal for this scenario.
LE
Leeann
11 months ago
Surprised to see GRE mentioned, isn't it outdated?
FI
Filiberto
11 months ago
Wait, isn't IPsec more secure though?
HO
Holley
11 months ago
Totally agree, DTLS handles packet loss better!
KI
Kina
12 months ago
I think DTLS is the way to go for unreliable networks.
LA
Larue
12 months ago
GRE seems less likely since it doesn’t provide encryption by itself, but I could be wrong about its use in SDWAN.
SH
Shizue
1 year ago
I recall a practice question where IPsec was mentioned, but I’m not sure if it’s optimal for NAT scenarios like this one.
GR
Graciela
1 year ago
I think DTLS might be the right choice since it’s designed for datagram transport and can handle packet loss better than others.
CO
Cordell
1 year ago
I remember studying about encryption methods, but I'm not entirely sure which one is best for unreliable networks behind NAT.
BR
Brianne
1 year ago
This is a great question that really tests our understanding of secure overlay protocols. I'm going to carefully consider the tradeoffs of each option before selecting my answer.
LO
Lonna
1 year ago
I'm a bit unsure about this one. The mention of NAT gateways has me wondering if some of the more basic VPN options like TLS might not work as well. I'll have to think it through carefully.
RU
Rusty
1 year ago
Okay, I've got this. The question is asking for an overlay method, so it's got to be something like DTLS or IPsec that can provide encryption and work with NAT. I'm confident I can nail this one.
QU
Quentin
1 year ago
Hmm, the key here is finding an overlay method that can handle the insecure public Internet and NAT gateways. I'm leaning towards DTLS or IPsec, but I'll need to review the differences.
PE
Penney
1 year ago
This seems like a tricky question. I'll need to think carefully about the requirements for secure transport over unreliable networks with NAT gateways.
TA
Tayna
1 year ago
I practiced a similar question, and I'm leaning towards option C as well. It feels like the direct way to change the refresher.
MI
Mireya
1 year ago
I heard they're developing a new overlay protocol called 'NAT-Man' - it can punch through any firewall, even your grandma's router!
CE
Cecil
1 year ago
C) IPsec
PA
Paul
1 year ago
B) DTLS
SU
Sue
1 year ago
A) TLS
DI
Diego
1 year ago
GRE? Are you kidding me? That's just a tunnel, not a secure overlay. IPsec is the only way to go if you want encrypted SDWAN traffic.
AP
Apolonia
2 years ago
DTLS? Really? I thought that was for IoT devices, not enterprise SDWAN. IPsec is clearly the best choice for this scenario.
SH
Sheridan
1 year ago
DTLS may be more commonly associated with IoT devices, but it can also be used in enterprise SDWAN networks for secure communication.
LA
Lajuana
1 year ago
I agree, IPsec is the most suitable option for securing traffic between SDWAN edge devices behind NAT gateways.
DO
Dolores
2 years ago
TLS is great for web traffic, but for SDWAN, I think IPsec is the way to go. It's more robust and can handle the NAT traversal.
BA
Barney
2 years ago
I'm not sure, but I think D) GRE might also be a good option for optimal transport over unreliable networks.
GL
Glen
2 years ago
IPsec is the correct answer here. It can handle the NAT translation and provide secure transport over the public internet.
JE
Jeniffer
1 year ago
IPsec is the correct answer here. It can handle the NAT translation and provide secure transport over the public internet.
MO
Mozell
1 year ago
D) GRE
ME
Melvin
1 year ago
C) IPsec
AM
Amber
1 year ago
B) DTLS
SA
Sabra
1 year ago
A) TLS
ED
Edelmira
2 years ago
I agree with Dierdre, IPsec is the best choice for securing traffic over unreliable networks.
DI
Dierdre
2 years ago
I think the answer is C) IPsec because it provides secure communication over the public Internet.