350-401 Architecture Practice Question
A network architect is designing a Cisco SD-WAN solution with multiple data centers and a mix of MPLS and Internet transports. The company requires that business-critical traffic (e.g., ERP) always use the MPLS transport, while guest traffic uses the Internet. Which Cisco SD-WAN feature should be used to enforce this policy?
⚠ Common exam trap
Many exam-takers confuse application-aware routing, which dynamically chooses paths based on SLA, with centralized data policy, which can enforce a static transport preference for specific applications.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Centralized data policy
Centralized data policy in Cisco SD-WAN is used to define traffic steering rules. By creating a policy that matches ERP traffic and sets the preferred transport to MPLS, and another that matches guest traffic and sets the transport to Internet, the architect can enforce the requirement. Other features like AAR or VPN segmentation do not provide this static transport enforcement.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Centralized data policy
Why this is correct
Centralized data policy in Cisco SD-WAN allows you to define traffic steering based on application, source/destination, and transport. You can create a policy that matches ERP traffic and directs it exclusively to the MPLS transport, while matching guest traffic and directing it to the Internet. This enforces the required path selection.
- ✗
Direct Internet Access (DIA)
Why it's wrong here
DIA allows traffic to break out directly to the Internet from a branch, rather than backhauling to a data center. It does not enforce that ERP uses MPLS. DIA is about local Internet egress, not about steering specific applications to a particular WAN transport.
- ✗
Application-aware routing
Why it's wrong here
Application-aware routing (AAR) dynamically selects the best path based on SLA metrics like latency, jitter, and loss. It does not enforce a static preference for a specific transport. While AAR can steer traffic based on performance, it cannot guarantee that ERP always uses MPLS regardless of SLA; a strict transport preference requires a different policy construct.
- ✗
VPN segmentation
Why it's wrong here
VPN segmentation (VRF-like) isolates traffic into separate VPNs, but it does not control which transport is used. It provides separation of routing tables and policies, but path selection across transports is handled by data policy. Segmentation alone would not ensure ERP uses MPLS.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 350-401 question from scratch — 1,923 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.