Which Cisco SD-WAN feature enables centralized application-aware security policy enforcement across WAN Edge routers?

Which Cisco SD-WAN feature enables centralized application-aware security policy enforcement across WAN Edge routers?

• A. Native VLAN tagging
• B. STP optimization
• C. OSPF route tagging
• D. Centralized data policy

Answer: (D)

Centralized data policy drives application-aware security across the SD-WAN fabric. In Cisco SD-WAN, you define data-plane rules—based on applications, users, or attributes—in a central controller and push them to all WAN Edge routers. Each edge then enforces those rules locally, ensuring consistent security actions (such as firewalling, encryption, ACLs, or traffic-shaping) for the same applications no matter which path the traffic takes. This centralized approach lets you maintain a uniform security posture across the entire WAN without configuring policies separately on every edge. The other options relate to unrelated networking aspects (VLAN tagging, STP, or OSPF route tagging) and don’t provide centralized, application-aware security enforcement across WAN Edges.

Centralized data policy drives application-aware security across the SD-WAN fabric. In Cisco SD-WAN, you define data-plane rules—based on applications, users, or attributes—in a central controller and push them to all WAN Edge routers. Each edge then enforces those rules locally, ensuring consistent security actions (such as firewalling, encryption, ACLs, or traffic-shaping) for the same applications no matter which path the traffic takes. This centralized approach lets you maintain a uniform security posture across the entire WAN without configuring policies separately on every edge. The other options relate to unrelated networking aspects (VLAN tagging, STP, or OSPF route tagging) and don’t provide centralized, application-aware security enforcement across WAN Edges.