300-415 ENSDWI Implementing Cisco SD-WAN Solutions Online Questions

Implementing Cisco SD-WAN Solutions 300-415 ENSDWI online questions have been updated, which can help you test your knowledge of Cisco’s SD-WAN solution including SD-WAN architecture, controller deployment, WAN Edge router deployment, policies, security, quality of service, multicast, and management and operations. Learn the Cisco certification 300-415 ENSDWI exam free updated online questions below.

Page 1 of 14

 Loading...

1. Which feature builds transport redundancy by using the cross link between two redundant WAN Edge routers?

OMP

zero-touch provisioning

quality of service

TLOC extension

 Loading...

2. When redistribution is configured between OMP and BGP at two Data Center sites that have Direct Connection interlink, which step avoids learning the same routes on WAN Edge routers of the DCs from LAN?

Define different VRFs on both DCs

Set same overlay AS on both DC WAN Edge routers

Set down-bit on Edge routers on DC1

Set OMP admin distance lower than BGP admin distance

 Loading...

3. Refer to the exhibit.





Which two configurations are needed to get the WAN Edges registered with the controllers when certificates are used? (Choose two)

Generate a CSR manually within vManage server

Generate a CSR manually on the WAN Edge

Request a certificate manually from the Enterprise CA server

Install the certificate received from the CA server manually on the WAN Edge

Install the certificate received from the CA server manually on the vManage

 Loading...

4. Refer to the exhibit.





A network administrator is configuring OMP in vManage to advertise all the paths for the same prefix from a site that has two WAN Edge devices Each WAN Edge device is connected to three ISPs and two private MPLS transports .

What is the minimum value for 'Number of Paths advertised per Prefix" that should be configured?

2

3

5

10

 Loading...

5. DRAG DROP

Drag and drop the policies from the left onto the correct policy types on the right.

 Loading...

6. For data plane resiliency, what does the Cisco SD-WAN software implement?

BFD

establishing affinity between vSmart controllers and WAN Edge routers

multiple vBond orchestrators

OMP

 Loading...

7. In which device state does the WAN edge router create control connections, but data tunnels are not created?

valid

backup

active

staging

 Loading...

8. Which protocol is used to measure loss latency, Jitter, and liveliness of the tunnel between WAN Edge router peers?

OMP

IP SLA

NetFlow

BFD

 Loading...

9. Which configuration changes the packet loss priority from low to highly?

A)





B)





C)





D)

Option A

Option B

Option C

Option D

 Loading...

10. Which device information is requited on PNP/ZTP to support the zero-touch onboarding process?

serial and chassis numbers

interface IP address

public DNS entry

system IP address

Page 2 of 14

 Loading...

11. Refer to the exhibit.





Which configuration routes Site 2 through the firewall in Site 1?

Option A

Option B

Option C

Option D

 Loading...

12. Refer to the exhibit.





Which QoS treatment results from this configuration after the access list acl-guest is applied inbound on the vpn1 interface?

A UDP packet sourcing from 172.16.20.1 and destined to 172.16.10.1 is accepted

A TCP packet sourcing from 172.16.10.1 and destined to 172.16.20.1 is dropped

A UDP packet souring from 172.16.10.1 and destined to 172.16.20.1 is dropped.

A TCP packet sourcing from 172.16.20.1 and destined to 172.16.10.1 is accepted

 Loading...

13. DRAG DROP

Drag and drop the vManage policy configuration procedures from the left onto the correct definitions on the right.

 Loading...

14. When software is upgraded on a vManage NMS, which two image-adding options store images in a local vManage software repository? (Choose two.)

To be downloaded over a SMTP connection

To be downloaded over a SNMP connection

To be downloaded over an out-of-band connection

To be downloaded over a control plane connection

To be downloaded over an ICMP connection

 Loading...

15. Which pathway under Monitor > Network > Select Device is used to verify service insertion configuration?

Real Time

System Status

ACL Logs

Events

 Loading...

16. Which component of the Cisco SD-WAN control plane architecture should be located in a public Internet address space and facilitates NAT-traversal?

vBond

WAN Edge

vSmart

vManage

 Loading...

17. Refer to the exhibit .





Which configuration extends the INET interface on R1 to be used by R2 for control and data connections?

A)





B)





C)

Option A

Option B

Option C

 Loading...

18. A network administrator is bringing up one WAN Edge for branch connectivity .

Which types of tunnels form when the WAN edge router connects to the SD-WAN fabric?

DTLS or TLS tunnel with vBond controller and IPsec tunnel with vManage controller.

DTLS or TLS tunnel with vBond controller and IPsec tunnel with other WAN Edge routers.

DTLS or TLS tunnel with vSmart controller and IPsec tunnel with other Edge routers.

DTLS or TLS tunnel with vSmart controller and IPsec tunnel with vBond controller.

 Loading...

19. Refer to the exhibit.





The network administrator has configured a centralized topology policy that results in the displayed routing table at a branch office .

Which two configurations are verified by the output? [Choose two.)

The routing table is for the transport VP

The default route is learned via OM

This routing table is from a cEdge router.

The default route is configured locally.

The configured policy is adding a route tag of 300 to learned routes.

 Loading...

20. Refer to the exhibit.





The tunnel interface configuration on both WAN Edge routers is:





Which configuration for WAN Edge routers will connect to the Internet?

Option A

Option B

Option C

Option D

Page 3 of 14

 Loading...

21. Which type of route advertisement of OMP can be verified?

OMP, VP

and origin

Origin, TLOC, and VPN

Origin, TLOC, and service

OMP, TLOC and service

 Loading...

22. What are the two advantages of deploying cloud-based Cisco SD-WAN controllers? (Choose two.)

centralized control and data plane

distributed authentication policies

management of SLA

infrastructure as a service

centralized raid storage of data

 Loading...

23. DRAG DROP

Drag and drop the attributes from the left that make each transport location unique onto the right. Not all options are used.

 Loading...

24. At which layer does the application-aware firewall block applications on a WAN Edge?

3

7

5

2

 Loading...

25. Company ABC has decided to deploy the controllers using the On-Prem method .

How does the administrator upload the WAN Edge list to the vManage?

A)





B)





C)





D)

Option A

Option B

Option C

Option D

 Loading...

26. Refer to the exhibit.





What binding is created using the tloc-extension command?

between ge 0/2.101 of port-type service and ge 0/0 of port-type service

between ge 0/2.101 of port-type transport and ge 0/0 of port-type service

between ge 0/2.101 of port-type service and ge 0/0 of port-type transport

between ge 0/2.101 of port-type transport and ge 0/0 of port-type transport

 Loading...

27. DRAG DROP

Drag and drop the REST API calls from the left onto the functions on the right.

 Loading...

28. DRAG DROP

Drag and drop the components from the left onto the corresponding Cisco NFV infrastructure Building Blocks on the right. Not all options are used.

 Loading...

29. Which policy blocks TLOCs from remotes and allows TLOCs from the data center to form hub-and-spoke peering?

localized control policy

localized data policy

centralized data policy

centralized control policy

 Loading...

30. An engineer is tasked to improve throughput for connection-oriented traffic by decreasing round-trip latency .

Which configuration will achieve this goal?

turn on "Enable TCP Optimization"

turn off "Enhance ECMP Keying"

turn off "Enable TCP Optimization"

turn on "Enhance ECMP Keying"

Page 4 of 14

 Loading...

31. Two sites have one WAN Edge each WAN Edge has two public TLOCs with no restriction configured. There is full reachability between the TLOCs .

How many data tunnels are formed on each Edge router?

2

8

6

4

 Loading...

32. Which combination of platforms are managed by vManage?

ISR4321, ASR1001, ENCS, lSRv

ISR4351, ASR1002HX, vEdge2000, vEdge Cloud

ISR4321, ASR1001, Nexus, ENCS

lSR435l, ASRl009, vEdge2000, CSR1000v

 Loading...

33. Where on vManage does an engineer find the details of control node failure?

Alarms

Events

Audit log

Network

 Loading...

34. Which two requirements must be met for DNS inspection when integrating with cisco umbrella? (Choose two)

Upload the WAN Edge serial allow list to the Umbrella portal.

Attach security policy to the device template.

Configure the Umbrella token on the vManage

Create and attach a System feature template with the Umbrella registration credentials.

Register and configure the vManage public IP and serial number in the Umbrella portal.

 Loading...

35. Which OSPF command makes the WAN Edge router a less preferred exit from a site with a dual WAN Edge design?

A)





B)





C)





D)

Option A

Option B

Option C

Option D

 Loading...

36. Refer to the exhibit.





The ge0/0 interface connects to a 30-MB link. A network administrator wants to always have 10 MB available for high priority traffic. When lower-priority traffic busts exceed 20 MB. Traffic should be redirected to the second WAN interface ge0/1 .

Which set of configurations accomplishes this task?

A)





B)





C)





D)

Option A

Option B

Option C

Option D

 Loading...

37. Which two features does the application firewall provide? (Choose two.)

classification of 1400+ layer 7 applications

blocks traffic by application or application-family

numbered sequences of match-action pairs

classification of 1000+ layer 4 applications

application match parameters

 Loading...

38. What is an advantage of using auto mode versus static mode of power allocation when an access point is connected to a PoE switch port?

It detects the device is a powered device

All four pairs of the cable are used

Power policing is enabled at the same time

The default level is used for the access point

 Loading...

39. Which alarm setting is configured to monitor serious events that affect but do not shut down, the operation of a network function?

Minor

Major

Medium

Critical

 Loading...

40. Which Cisco SD-WAN WAN Edge platform supports LTE and Wi-Fi?

vEdge2000

ASR1001

CSR 1000v

ISR 1101

Page 5 of 14

 Loading...

41. Which policy configures an application-aware routing policy under Configuration > Policies?

Localized policy

Centralized policy

Data policy

Control policy

 Loading...

42. In Cisco SD-WAN, what protocol is used for control connections between SD-WAN devices?

DTLS

OMP

BGP

OSPF

 Loading...

43. On which device is a service FW address configured to Insert firewall service at the hub?

vEdge at the branch

vSmart at the hub

vEdge at the hub

vSmart at the branch

 Loading...

44. When VPNs are grouped to create destination zone in Zone-Based Firewall, how many zones can a single VPN be part of?

two

four

one

three

 Loading...

45. What is the purpose of ‘’vpn 0’’ in the configuration template when onboarding a WAN edge node?

It carries control traffic over secure DTLS or TLS connections between vSmart controllers and vEdge routers, and between vSmart and vBond

It carries control out-of-band network management traffic among the Viptela devices in the overlay network.

It carries control traffic over secure IPsec connections between vSmart controllers and vEdge routers, and between vSmart and vManager

It carries control traffic over secure IPsec connections between vSmart controllers and vEdge routers, and between vSmart and vBond

 Loading...

46. Which two image formats are supported for controller codes? (Choose two.)

.nxos

.qcow2

.ova

.bin

Tgz

 Loading...

47. An engineer is troubleshooting a certificate issue on vEdge .

Which command is used to verify the validity of the certificates?

show control local-properties

show control summary

show certificate installed

show certificate status

 Loading...

48. Which component of the Cisco SD-WAN control plane architecture facilitates the storage of certificates and configurations for network components?

vSmart

vBond

WAN Edge

vManage

 Loading...

49. Refer to the exhibit.





Which configuration change is needed to configure the tloc-extention on Branch1-Edge1?

A)





B)





C)





D)

Option A

Option B

Option C

Option D

 Loading...

50. An engineer wants to track tunnel characteristics within an SLA-based policy for convergence .

Which policy configuration will achieve this goal?

App-route policy

VPN membership policy

Control policy

Data policy

Page 6 of 14

 Loading...

51. Which scheduling method is configured by default for the eight queues in the cloud vEdge router1?

low latency queue

priority queue

weighted random early detection

weighted round robin

 Loading...

52. Which logs verify when a device was upgraded?

Audit

Email

ACL

SNMP

 Loading...

53. Refer to the exhibit.





An engineer is configuring service chaining .

Which set of configurations is required for all traffic from Site ID 1 going toward Site ID 2 to get filtered through the firewall on the hub site?

A)





B)





C)





D)

Option A

Option B

Option C

Option D

 Loading...

54. DRAG DROP

Drag and drop the Cisco SD-WAN components from the left onto their functions on the right.

 Loading...

55. A large retail organization decided to move some of the branch applications to the AWS cloud .

How does the network architect extend the in-house Cisco SD-WAN branch to cloud network into AWS?

Create virtual WAN Edge devices Cloud through the AWS online software store

Create virtual instances of vSmart Cloud through the AWS online software store

Create GRE tunnels to AWS from each branch over the Internet

Install the AWS Cloud Router in the main data center and provide the connectivity from each branch

 Loading...

56. An engineer wants to automate the onboarding process for a WAN Edge router with vManage .

Which command will accomplish this?

request vedge-cloud activate chassis-number <chassis-number> serial <serial>

request vedge-cloud activate chassis-number <chassis-number> token <token-number>

request vedge-cloud activate serial <serial> token <token-number>

request vedge-cloud activate chassis-number <chassis-number> organization <organization>

 Loading...

57. When a WAN Edge device joins the SD-WAN overlay, which Cisco SD-WAN components orchestrates the connection between the WAN Edge device and a vSmart controller?

vManage

vBond

OMP

APIC-EM

 Loading...

58. Which device in the SD- WAN solution receives and categorizes event reports, and

generates alarms?

WAN Edge routers

vSmart controllers

vManage NMS

vBond controllers

 Loading...

59. DRAG DROP

Drag and drop the steps from the left into the order on the right to upload software on vManage repository that is accessible from maintenance > Software Repository.

 Loading...

60. DRAG DROP

Drag and drop the functions from the left onto the correct templates on the right.

Page 7 of 14

 Loading...

61. Which combination of platforms are managed by vManage?

ISR4351, ASR1002HX, vEdge2000, vEdge Cloud

ISR4321, ASR1001, Nexus, ENCS

ISR4321, ASR1001, ENCS, ISRv

ISR4351, ASR1009, vEdge2000, CSR1000v

 Loading...

62. What is the default interval for BFD packets?

1 second

15 second

10 second

5 second

 Loading...

63. Which two platforms can host a vEdge Cloud Router? (Choose two)

Microsoft Azure

Dream host

AWS

DigitalCloud

Google

 Loading...

64. Which two services are critical for zero touch provisioning onboarding? (Choose two)

EMAIL

SNMP

AAA

DHCP

DNS

 Loading...

65. Which statement about VRRP is true?

It supports load balancing

It can be configured with HSRP on a switch or switch stack

It supports IPv4 and IPv6

It supports encrypted authentication

 Loading...

66. Where does the Cisco V-Edge Router perform QoS traffic classification?

Per VPN

Per vEdge

Egress interface

Ingress interface

 Loading...

67. Which on-the-box security feature is supported by the Cisco ISR 4451 SD-WAN device and not on vEdge?

Cloud Express service

Enterprise Firewall with Application Awareness

reverse proxy

iPsec/GRE cloud proxy

 Loading...

68. A policy is created to influence routing in the network using a group of prefixes.

What policy application will achieve this goal when applied to a site list?

Vpn-membership policy

Control-policy

cflowd-template

App-route policy

 Loading...

69. Which secure connection should be used to access the REST APIs through the Cisco vManage web server?

HTTP inspector interface

authenticated HTTPS

authenticated DTLS

JSON Inspector interface

 Loading...

70. Which two products that perform lifecycle management for virtual instances are supported by WAN Edge cloud routers? (Choose two.)

OpenStack

AWS

VMware vCenter

Azure

IBM Cloud

Page 8 of 14

 Loading...

71. What is a description of vManage NMS?

It is accessible only from VPN 512 (the management VPN).

A cluster requires device templates to be created on and attached to the same server

It is a software process on a dedicated WAN Edge router in the network.

A cluster consists of a minimum of two vManage NMSs

 Loading...

72. In which device state does the WAN edge router create control connections, but data tunnels are not created?

valid

backup

active

staging

 Loading...

73. Which two WAN Edge devices should be deployed in a cloud? (Choose two.)

vEdge 5000v

ASR 1000v

CSR 1000v

vEdge 100wm

vEdge cloud

 Loading...

74. Which port is used for vBond under controller certificates if no alternate port is configured?

12345

12347

12346

12344

 Loading...

75. A network administrator is creating an OMP feature template from the vManage GUI to be applied to WAN edge routers.

Which configuration attribute will avoid the redistribution of the routes back into the OMP from the LAN side?

configure "Number of Paths Advertised per Prefix"

configure "Overlay AS Number"

configure "Send Backup Paths"

configure "ECMP limit"

 Loading...

76. Which device information is requited on PNP/ZTP to support the zero touch onboarding process?

serial and chassis numbers

interface IP address

public DNS entry

system IP address

 Loading...

77. An engineer is configuring a centralized policy to influence network route advertisement.

Which controller delivers this policy to the fabric?

vSmart

vManage

WAN Edge

vBond

 Loading...

78. An engineer is tasked to improve throughput for connection-oriented traffic by decreasing round-trip latency Which configuration will achieve this goal?

turn on "Enable TCP Optimization"

turn off "Enhance ECMP Keying"

turn off "Enable TCP Optimization"

turn on "Enhance ECMP Keying"

 Loading...

79. Which VPN connects the transport-side WAN Edge interface to the underlay/WAN network?

VPN 1

VPN 511

VPN 0

VPN 512

 Loading...

80. Refer to the exhibit.





A network administrator is configuring OMP in vManage to advertise all the paths for the same prefix from a site that has two WAN Edge devices Each WAN Edge device is connected to three ISPs and two private MPLS transports.

What is the minimum value for 'Number of Paths advertised per Prefix" that should be configured?

2

3

5

10

Page 9 of 14

 Loading...

81. If Smart Account Sync is not used, which Cisco SD-WAN component Is used to upload an authorized serial number file?

WAN Edge

vManage

vSmart

vBond

 Loading...

82. Which feature builds transport redundancy by using the cross link between two redundant WAN Edge routers?

OMP

zero-touch provisioning

quality of service

TLOC extension

 Loading...

83. A network administrator is configuring a tunnel interface on a branch Cisco IOS XE router to run TLOC extensions.

Which configuration will extend a TLOC over a GRE tunnel to another router in the branch?

A)





B)





C)





D)

Option A

Option B

Option C

Option D

 Loading...

84. Which component of the Cisco SD-WAN architecture oversees the control plane of overlay network to establish, adjust, and maintain the connections that form the Cisco SD-WAN fabric?

APIC-EM

vSmart

vManage

vBond

 Loading...

85. Which two hardware platforms support Cisco IOS XE SD-WAN images? (Choose two.)

ISR4000 series

ISR9300 series

vEdge-1000 series

ASR9000 series

ASR1000 series

 Loading...

86. What is a default protocol for control plane connection?

HTTPS

TLS

IPsec

DTLS

 Loading...

87. Which component of the Cisco SD-WAN control plane architecture should be located in a public Internet address space and facilitates NAT-traversal?

WAN Edge

vSmart

vBond

vManage

 Loading...

88. Which Cisco SD-WAN WAN Edge platform supports LTE and Wi-Fi?

ISR 1101

ASR 1001

CSR 1000v

vEdge 2000

 Loading...

89. Refer to the exhibit.





What does the BFD value of 8 represent?

dead timer of BFD session

poll-interval of BFD session

hello timer of BFD session

number of BFD sessions

 Loading...

90. What are the two advantages of deploying cloud-based Cisco SD-WAN controllers? (Choose two.)

centralized control and data plane

infrastructure as a service

management of SLA

centralized raid storage of data

distributed authentication policies

Page 10 of 14

 Loading...

91. Which two image formats are supported for controller codes? (Choose two.)

.nxos

.qcow2

.iso

.ova

.tgz

 Loading...

92. Which two platforms for the Cisco SD-WAN architecture are deployable in a hypervisor on-premises or in IAAS Cloud? (Choose two.)

CSR 1000v

ISR 4431

vEdge 100c

vEdge 2000

vEdge Cloud

 Loading...

93. How is the scalability of the Manage increased in Cisco SD-WAN Fabric?

Increase the bandwidth of the WAN link connected to the vManage

Increase licensing on the vManage

Deploy more than one vManage controllers on different physical server

Deploy multiple vManage controllers in a cluster

 Loading...

94. Which component of the Cisco SD-WAN control plane architecture facilitates the storage of certificates and configurations for network components?

vSmart

WAN Edge

vManage

vBond

 Loading...

95. An engineer is troubleshooting a vEdge router and identifies a “DCONFAIL C DTLS connection failure” message.

What is the problem?

memory issue

certificate mismatch

organization mismatch

connectivity issue

 Loading...

96. An engineer is troubleshooting a certificate issue on vEdge.

Which command is used to verify the validity of the certificates?

show control local-properties

show control summary

show certificate installed

show certificate status

 Loading...

97. Refer to the exhibit.





An engineer is troubleshooting a control connection issue.

What does “connect” mean in this show control connections output?

Control connection is down

Control connection is up

Control connection attempt is in progress

Control connection is connected

 Loading...

98. A vEdge platform is sending VRRP advertisement messages every 10 seconds.

Which value configures the router back to the default timer?

2 seconds

5 seconds

1 second

3 seconds

 Loading...

99. Which OSPF command makes the WAN Edge router a less preferred exit from a site with a dual WAN Edge design?

A)





B)





C)





D)

Option A

Option B

Option C

Option D

 Loading...

100. Which two services are critical for zero touch provisioning on-boarding? (Choose two.)

EMAIL

SNMP

AAA

DHCP

DNS

Page 11 of 14

 Loading...

101. When redistribution is configured between OMP and BGP at two Data Center sites that have Direct Connection Interlink, which step avoids learning the same routes on WAN Edge routers of the DCs from LAN?

Set down-bit on Edge routers on DC1

Define different VRFs on both DCs

Set OMP admin distance lower than BGP admin distance

Set same overlay AS on both DC WAN Edge routers

 Loading...

102. Which device information is required on PNP/ZTP to support the zero touch onboarding process?

serial and chassis numbers

interface IP address

public DNS entry

system IP address

 Loading...

103. Which configuration step is taken on vManage after WAN Edge list is uploaded to support the on-boarding process before the device comes online?

Verify the device certificate

Enable the ZTP process

Set the device as valid

Send the list to controllers

 Loading...

104. On which device is a service FW address configured to insert firewall service at the hub?

vSmart at the branch

vEdge at the branch

vEdge at the hub

vSmart at the hub

 Loading...

105. Which attributes are configured to uniquely identify and represent a TLOC route?

system IP address, link color, and encapsulation

origin, originator, and preference

site ID, tag, and VPN

firewall, IPS, and application optimization

 Loading...

106. Which type of route advertisement of OMP can be verified?

Origin, TLOC, and VPN

Origin, TLOC, and service

OMP, VPN, and origin

OMP, TLOC, and service

 Loading...

107. When VPNs are grouped to create destination zone in Zone-Based Firewall, how many zones can a single VPN be part of?

two

four

one

three

 Loading...

108. Which template configures the out-of band management VPN?

A)





B)





C)





D)

Option A

Option B

Option C

Option D

 Loading...

109. Which on-the-box security feature is supported by the Cisco ISR 4451 SD-WAN device and not on vEdge?

Cloud Express service

Enterprise Firewall with Application Awareness

reverse proxy

iPsec/GRE cloud proxy

 Loading...

110. What is a benefit of the application-aware firewall?

It blocks traffic by MTU of the packet

It blocks encrypted traffic

It blocks traffic by application

It blocks traffic by MAC address

Page 12 of 14

 Loading...

111. Which value is verified in the certificates to confirm the identity of the device?

Serial Number

OTP

System-IP

Chassis-ID

 Loading...

112. Which hardware component is involved in the Cisco SD-WAN authentication process for ISR platforms?

ZTP

OTPC

SUDI

TPMD

 Loading...

113. Which alarm setting is configured to monitor serious events that affect, but do not shut down, the operation of a network function?

Critical

Medium

Major

Minor

 Loading...

114. Which command disables the logging of syslog messages to the local disk?

no system logging disk local

system logging server remote

no system logging disk enable

system logging disk disable

 Loading...

115. Which logs verify when a device was upgraded?

ACL

Email

SNMP

Audit

 Loading...

116. Which protocol is used to measure loss, latency, jitter, and liveliness of the tunnel between WAN Edge router peers?

OMP

NetFlow

BFD

IP SLA

 Loading...

117. Which pathway under Monitor > Network > Select Device is used to verify service insertion configuration?

System Status

ACL Logs

Real Time

Events

 Loading...

118. Drag and drop the devices from the left onto the correct functions on the right.

 Loading...

119. Drag and drop the vManage policy configuration procedures from the left onto the correct definitions on the right.

 Loading...

120. Drag and drop the policies from the left onto the correct policy types on the right.

Page 13 of 14

 Loading...

121. Drag and drop the route verification output from show omp tlocs from the left onto the correct explanations on the right.

 Loading...

122. Drag and drop the actions from the left into the correct sequence on the right to create a data policy to direct traffic to the Internet exit

 Loading...

123. Drag and drop the functions from the left onto the correct templates on the right.

 Loading...

124. Which component of the Cisco SD-WAN secure extensible network provides a single pane of glass approach to network monitoring and configuration?

APIC-EM

vSmart

vManage

vBond

 Loading...

125. What is a benefit of the application aware firewall feature in the Cisco SD-WAN solution?

application monitoring

application malware protection

application visibility

control policy enforcement

 Loading...

126. A network administrator is configuring QoS on a Vedge 5000 router and needs to enable it on the transport side interface.

Which policy setting must be selected to accomplish this goal?

Cloud QoS Service side

Cloud QoS

Netflow

Application

 Loading...

127. A policy is created to influence routing path in the network using a group of prefixes.

What policy application will achieve this goal when applied to a site list?

control-policy

vpn-membership policy

app-route policy

cflowd-template

 Loading...

128. An engineer wants to track tunnel characteristics within a SLA-based policy for convergence.

Which policy configuration will achieve this goal?

Data policy

Control policy

App-route policy

VPN membership policy

 Loading...

129. Refer to the exhibit.





What binding is created using the tloc-extension command?

between ge0/2.101 of port-type transport and ge0/0 of port-type service

between ge0/2.101 of port-type service and ge0/0 of port-type service

between ge0/2.101 of port-type service and ge0/0 of port-type transport

between ge0/2.101 of port-type transport and ge0/0 of port-type transport

 Loading...

130. Which two algorithms authenticate a user when configuring SNMPv3 monitoring on a WAN Edge router? (Choose two)

AES-256

SHA-1

AES-128

MD5

SHA-2

Page 14 of 14

 Loading...

131. A network administrator is configuring an application-aware firewall between inside zones to an outside zone on a WAN edge router using vManage GUI.

What kind of inspection is performed when the ”inspect” action is used?

Layer 7 inspection for TCP and Layer 4 inspection for UDP

IPS inspection for TCP and-Layer 4 inspection for UDP

stateful inspection for TCP and stateless inspection of UDP

stateful inspection for TCP and UDP

 Loading...

132. What is the purpose of ”vpn 0” in the configuration template when onboarding a WAN edge node?

It carries control traffic over secure IPsec connections between vSmart controllers and vEdge routers, and between vSmart and vManager

It carries control out-of-bond network management traffic among the Viptela devices in the overlay network.

It carries control traffic over secure DTLS or TLS connections between vSmart controllers and vEdge routers, and between vSmart and vBond

 Loading...

133. In Cisco SD-WAN, what protocol is used for control connections between SD-WAN devices?

BGP

OSPF

DTLS

OMP

 Loading...

134. In an AWS cloud, which feature provision WAN Edge routers automatically in Cisco SD - WAN?

Cloud OnRamp

vAnalytics

Cloud app

Network Designer

 Loading...

135. When a WAN Edge device joins the SD-WAN overlay, which Cisco SD-WAN components orchestrates the connection between the WAN Edge device and a vSmart controller?

OMP

vBond

vManage

APIC-EM

 Loading...

136. A network administrator is bringing up one WAN Edge for branch connectivity.

Which types of tunnels form when the WAN edge router connects to the SD -WAN fabric?

DTLS or TLS tunnel with vBond controller and IPsec tunnel with vManage controller

DTLS or TLS tunnel with vBond controller and IPsec tunnel with other WAN Edge routers

DTLS or TLS tunnel with vSmart controller and IPsec tunnel with other Edge routers

DTLS or TLS tunnel with vSmart controller and IPsec tunnel with vBond controller

 Loading...

137. In the Cisco SD-WAN solution, vSmart controller is responsible for which two actions? (Choose two)

Authenticate and authorize vEdge routers.

Distribute the IP address from DHCP server to vEdge routers.

Distribute crypto key information among vEdge routers

Configure and monitor vEdge routers.

Distribute route and policy information via OM

 Loading...

138. Which device in the SD-WAN solution receives and categorizes event reports, and generates alarms?

vSmart controllers

WAN Edge routers

vBond controllers

vManage NMS

 Loading...

139. An administrator needs to configure SD-WAN to divert traffic from the company’s private network to an ISP network.

What action should be taken to accomplish this goal?

configure the data security policy

configure the application aware policy

configure the control policy

configure the data policy

 Loading...

140. Drag and drop the definitions from the left to the configuration on the right.

 Loading...