Cisco CCNP Security Core (SCOR) 350-701Network SecurityMedium
A large enterprise is migrating its on-premises data center to a hybrid cloud environment. The security team needs to extend their existing network security policies, including firewall rules and intrusion prevention, consistently across both the on-premises infrastructure and the public cloud. They also want to achieve automated policy deployment and orchestration. Which network security concept provides the framework for achieving this unified, automated security management across heterogeneous environments?
- ATraditional Hardware-based Firewalls
- BNetwork Function Virtualization (NFV)
- CSoftware-Defined Networking (SDN) with Security Functions
- DCloud Access Security Broker (CASB)
Show answer & explanationAnswer & explanation
Correct answer: C. Software-Defined Networking (SDN) with Security Functions
Software-Defined Networking (SDN) allows for centralized control and programmability of network infrastructure. When integrated with security functions, it enables consistent policy enforcement, automated deployment, and orchestration across diverse environments (on-premises and cloud) from a single control plane, which is ideal for a hybrid cloud security strategy.
Why the other options are wrong
- A. Traditional hardware-based firewalls are environment-specific and do not offer unified, automated policy management across a hybrid cloud.
- B. NFV focuses on virtualizing network services (like firewalls) but doesn't inherently provide the centralized, unified policy orchestration across different infrastructures.
- D. CASB focuses on securing SaaS applications and cloud services, not extending network security policies across IaaS/on-premises infrastructure.
SDN for Hybrid Cloud Security
Leveraging Software-Defined Networking principles to centralize and automate network security policy management and enforcement across both on-premises and cloud infrastructures.
- Centralized control plane for policies
- Automated policy deployment
- Consistent security across heterogeneous environments
Memory trick: SDN: One brain, many networks.