QUESTION 1
An engineer wants to change the configuration of the certificate authorization mode from manual to automated. Which GUI selection will accomplish this?
A. Administration > Settings
B. Maintenance > Security
C. Configuration > Certificates
D. Tools > Operational Commands
Correct Answer: A
QUESTION 2
Which plane builds and maintains the network topology and makes decisions where the traffic flows?
A. Orchestration
B. Management
C. Control
D. Data
Correct Answer: C
QUESTION 3
What is a benefit of the application-aware firewall?
A. It blocks traffic by MTU of the packet
B. It blocks encrypted traffic
C. It blocks traffic by application
D. It blocks traffic by MAC address
Correct Answer: C
QUESTION 4
Which two virtualized environments are available for a company to install the controllers using the on-premises model? (Choose two.)
A. VMware vSphere ESXi
B. OpenStack
C. kernel-based virtual machine
D. Microsoft Hyper-V
E. VMware Workstation
Correct Answer: AB
QUESTION 5
Which hardware component is involved in the Cisco Catalyst SD-WAN authentication process for ISR platforms?
A. ZTP
B. TPCC
C. SUDI
D. TPMD
Correct Answer: C
QUESTION 6
What are the two components of centralized policy deployment in SD-WAN Manager? (Choose two.)
A. policy-based routing
B. policy definition
C. lists
D. QoS map
E. route policy
Correct Answer: BC
QUESTION 7
Which two ways does a Cisco Catalyst SD-WAN Manager software repository allow an engineer to download images on a Cisco Catalyst SD-WAN Edge device? (Choose two.)
A. Use out-of-band management to download an image from the local SD-WAN Manager server.
B. Use a control plane connection to download an image from a SD-WAN Validator controller validating the device list.
C. Use a remote file server that is reachable through an FTP or HTTP URL.
D. Use an image on a USB to upload an image on the SD-WAN Manager server directly.
E. Use a data plane connection to download an image from the bootflash of other Cisco WAN Edge devices.
Correct Answer: AC
QUESTION 8
An administrator is configuring a centralized firewall to filter HTTP/HTTPS traffic flowing between certain departments. No other traffic or network segments should be subject to the filter. Which two actions must be taken on the Cisco Catalyst SD-WAN fabric to meet the requirements? (Choose two)
A. Apply Control Policy on SD-WAN Controllers
B. Use classification, policing, and marking.
C. Advertise firewall service per VPN
D. Apply Data Policy onto cEdge devices
E. Set up Hub&Spoke topology
Correct Answer: CD
QUESTION 9
Which method is used for SD-WAN Validator reachability to be resolved by SD-WAN Manager?
A. BGP
B. DNS
C. IPsec
D. OMP
Correct Answer: B
QUESTION 10
Which phrase describes a benefit of integrating Cisco Catalyst SD-WAN with AppNav?
A. graphical WAAS troubleshooting interface from SD-WAN Manager
B. decentralized policy distribution from AppNav controllers
C. intelligent traffic flow distribution among WAAS devices
D. reduced complexity in the SD-WAN deployment
Correct Answer: C
QUESTION 11
What are two benefits of installing Cisco Catalyst SD-WAN controllers on cloud-hosted services vs on-premises? (Choose two.)
A. Enhanced security and compliance control
B. Allowed integration of the WAN Edge devices in the Cloud
C. Reduced Operational Burden
D. Reduced dependency on external cloud services
E. Simplified deployment and management
Correct Answer: CE
QUESTION 12
Which platform for the Cisco Catalyst SD-WAN architecture is deployable in a hypervisor on-premises or in IAAS Cloud?
A. Catalyst 8000v
B. ISR 4431
C. Catalyst 8500
D. ISR 1100
Correct Answer: A
QUESTION 13
The engineer must augment the vRoute path limit to 10 between Cisco Catalyst SD-WAN controllers via CLI. Which configuration command meets the requirement under OMP?
A. send-path-limit 10
B. ecmp-limit 10
C. controller-send-path-limit 10
D. maximum-paths 10
Correct Answer: C
QUESTION 14
Which policy is configured to ensure that a voice packet is always sent on the link with less than a 50 msec delay?
A. localized data policy
B. centralized control policy
C. localized control policy
D. centralized data policy
Correct Answer: D
QUESTION 15
In which device state does the WAN edge router create control connections, but data tunnels are not created?
A. Valid
B. Backup
C. Actives
D. Staging
Correct Answer: D
QUESTION 16
Two sites have one WAN Edge each. Each WAN Edge has two public TLOCs with no restrict configured. There is full reachability between the TLOCs. How many data tunnels are formed on each WAN Edge router?
A. 6
B. 2
C. 4
D. 8
Correct Answer: C
QUESTION 17
Which two products are used to deploy Cisco WAN Edge Router virtual platforms? (Choose two.)
A. Cisco ENCS 5000 Series
B. Cisco UCS
C. Sun SPARC Node running AIX
D. HP ProLiant DL 360 Generation10 running HP-UX
E. Sun Enterprise M4000 Server running Sun Solaris
Correct Answer: AB
QUESTION 18
A network engineer is advertising the EIGRP learned route to Overlay Management Protocol (OMP) in the SD-WAN network. Which configuration accomplishes this task?
A. config-transaction
sdwan
omp
no shutdown
graceful-restart
address-family ipv4 vrf 1
advertise eigrp
!
B. config-transaction
sdwan
address-family omp
advertise eigrp
!
C. config-transaction
sdwan
address-family ipv4 vrf 1
omp advertise eigrp
!
D. config-transaction
sdwan
eigrp
no shutdown
graceful-restart
address-family ipv4 vrf 1
advertise omp
!
Correct Answer: A
QUESTION 19
Which component calculates Quality of Experience in a Cisco Catalyst SD-WAN Cloud OnRamp environment?
A. WAN Edge device
B. SD-WAN Manager
C. SD-WAN Validator
D. SD-WAN Controller
Correct Answer: B
QUESTION 20
What are the two distinct capabilities directly exposed by the Cisco Catalyst SD-WAN Manager REST API for managing and monitoring the overlay network? (Choose two.)
A. applying a full device configuration template to a specific Catalyst 8300 router
B. managing connections for smart licensing for the SD-WAN Manager itself
C. managing the distribution of Cisco IOS XE images to traditional branch routers that are not part of the SD-WAN fabric
D. performing a deep packet inspection signature update on an integrated security appliance
E. querying real-time and historical application-aware performance metrics across the overlay fabric
Correct Answer: AE