ISC2 CISSP (Certified Information Systems Security Professional)Communication and Network SecurityMedium

A global organization is implementing a Software-Defined Wide Area Network (SD-WAN) to optimize traffic routing and improve application performance across its numerous branch offices. The solution needs to dynamically select the best path for application traffic based on real-time network conditions (e.g., latency, jitter, packet loss). Which component of the SD-WAN architecture is responsible for making these intelligent routing decisions?

  1. AOverlay Network
  2. BSD-WAN Orchestrator
  3. CSD-WAN Edge Appliance
  4. DUnderlay Network
Show answer & explanation

Correct answer: B. SD-WAN Orchestrator

The SD-WAN Orchestrator acts as the centralized brain of the SD-WAN, responsible for global policy enforcement, network monitoring, and making intelligent routing decisions based on real-time network conditions and application requirements. It pushes these decisions to the edge appliances.

Why the other options are wrong

  • A. The Overlay Network is the virtual network created by the SD-WAN over the underlay, providing connectivity but not making the routing decisions itself.
  • C. The SD-WAN Edge Appliance (CPE) enforces policies and routes traffic at the branch office, but receives instructions from the orchestrator.
  • D. The Underlay Network refers to the physical or logical transport infrastructure (e.g., MPLS, internet) over which the SD-WAN operates, not the decision-maker.

SD-WAN Orchestrator

The centralized management and control component of an SD-WAN, responsible for policy enforcement, global network visibility, and intelligent routing decisions.

  • Acts as the 'brain' of the SD-WAN.
  • Monitors network health and application performance.
  • Pushes policies and routing decisions to edge devices.

Memory trick: Orchestrator conducts, Edge executes.

More Communication and Network Security questions