Which Cisco SD-WAN feature identifies applications dynamically for policy enforcement and SLA decisions?

Which Cisco SD-WAN feature identifies applications dynamically for policy enforcement and SLA decisions?

• A. VLAN tagging
• B. STP convergence
• C. NAT reflection
• D. DPI-based application awareness

Answer: (D)

Identifying applications dynamically to enforce policies and SLAs is achieved through DPI-based application awareness. Deep packet inspection looks at the traffic’s content and behavior to classify which application is generating each flow, even when apps use non-standard ports or are encrypted. Once the SD-WAN controller knows the specific application, it can apply per-application policies—such as QoS levels, path selection, and SLA targets—across the WAN, ensuring critical apps get the required performance and reliability. The other options don’t provide this capability. VLAN tagging is about separating traffic at the Ethernet layer for segmentation, not recognizing applications to drive policies. STP convergence deals with preventing loops in switched networks, not with application classification. NAT reflection concerns how NAT handles traffic to internal resources from within, unrelated to identifying apps or enforcing per-application SLAs.

Identifying applications dynamically to enforce policies and SLAs is achieved through DPI-based application awareness. Deep packet inspection looks at the traffic’s content and behavior to classify which application is generating each flow, even when apps use non-standard ports or are encrypted. Once the SD-WAN controller knows the specific application, it can apply per-application policies—such as QoS levels, path selection, and SLA targets—across the WAN, ensuring critical apps get the required performance and reliability.

The other options don’t provide this capability. VLAN tagging is about separating traffic at the Ethernet layer for segmentation, not recognizing applications to drive policies. STP convergence deals with preventing loops in switched networks, not with application classification. NAT reflection concerns how NAT handles traffic to internal resources from within, unrelated to identifying apps or enforcing per-application SLAs.