Which two statements about a Versa Secure SD-WAN deployment are true?

In a Versa Secure SD-WAN deployment, the following statements about traffic forwarding are accurate:

By default, all data traffic is forwarded on IPSec tunnels (Answer A): Versa SD-WAN solutions typically encrypt all data traffic by default using IPSec tunnels. This security measure ensures that data remains protected while transiting over the public or private WAN, safeguarding against eavesdropping and data theft.

By default, all control traffic is forwarded on IPSec tunnels (Answer B): Similarly, control traffic in Versa SD-WAN is also encrypted and sent through IPSec tunnels. This practice secures the signaling and management traffic, preventing potential attacks that could target the network’s control plane.

Options C (By default, all data traffic is forwarded on unencrypted tunnels) and D (By default, all control traffic is forwarded on unencrypted tunnels) are incorrect as they contradict the security-oriented design of Versa SD-WAN, which emphasizes the encryption of both data and control traffic by default.

References:This explanation utilizes Versa SD-WAN's documented security features and general network security protocols that prioritize encrypted communications for both data and control planes.