QUESTION 181
Which requirement must be met before deploying data redundancy elimination in SD-WAN?
A. Disable shaping in the queue assigned for the application.
B. Create a DRE feature template in vManage
C. Ensure that traffic is sent through a GRE tunnel.
D. Ensure that routing is symmetric between locations.
Correct Answer: D
QUESTION 182
What are the two advantages of configuration groups in a Cisco SD-WAN deployment? (Choose two.)
A. An individual device has multiple tag rules.
B. Individual devices are added to multiple groups.
C. Individual devices are associated with a configuration group and a device template.
D. Individual devices are grouped based on a shared configuration.
E. A subset of devices is identified with tags.
Correct Answer: CD
QUESTION 183
Which vBond system configuration under VPN 0 allows for a routable public IP address even if the DNS name, hostname, or IP address of the vBond orchestrator are omitted?
A. dns-name
B. vbond-only
C. WAN
D. local
Correct Answer: D
QUESTION 184
A company deploys a Cisco SD-WAN solution but has unstable Internet connection. When the link to vSmart comes back up, the WAN Edge router routing table is not refreshed, and some traffic to the destination network is dropped. The headquarters in the hub site, and it continuously adds new sites to the SD-WAN network. An engineer must configure
route refresh between WAN edge and vSmart within 2 minutes. Which configuration meets this requirement?
A. omp
no shutdown
no graceful-restart
B. omp
no shutdown
graceful-restart
timers
advertisement-interval 120
C. omp
no shutdown
graceful-restart
timers
eor-timer 120
D. omp
no shutdown
graceful-restart
timers
holdtime 120
Correct Answer: B
QUESTION 185
Which protocol is used by the REST API to communicate with network devices in the Cisco SD-WAN network?
A. HTTP
B. SSL
C. SSH
D. IPsec
Correct Answer: A
QUESTION 186
How is vBond reachability resolved by vManage?
A. BGP
B. DNS
C. OMP
D. IPsec
Correct Answer: B
QUESTION 187
An engineer must apply the configuration for initial certificate installation to SD-WAN Validator Orchestrator and SD-WAN Controller. Which configuration accomplishes this task?
A. vpn 512
interface eth1
ip address 199.1.1.1/28
tunnel-interface
allow-service netconf
no allow-service ntp
no allow-service stun
B. vpn 512
interface eth1
ip address 199.1.1.1/28
tunnel-interface
allow-service sshd
allow-service Netconf
C. vpn 0
interface eth1
ip address 199.1.1.1/28
tunnel-interface
allow-service sshd
allow-service ntp
D. vpn 0
interface eth1
ip address 199.1.1.1/28
tunnel-interface
allow-service sshd
allow-service Netconf
no shutdown
Correct Answer: D
QUESTION 188
What prohibits deleting a VNF image from the software repository?
A. if the image is included in a configured policy
B. if the image is stored by vManage
C. if the image is uploaded by a WAN Edge device
D. if the image is referenced by a service chain
Correct Answer: D
QUESTION 189
A bank is looking for improved customer experience for applications and reduce overhead related to compliance and security. Which key feature or features of the Cisco SD-WAN solution will help the bank to achieve their goals?
A. implementation of a modem age core banking system
B. integration with PaaS providers to offer the best possible application experience
C. implementation of BGP across the enterprise routing for selecting optimal path
D. QoS including application prioritization and meeting critical applications SLA for selecting optimal path
Correct Answer: D
QUESTION 190
What are the two components of an application-aware firewall? (Choose two.)
A. default action
B. sequence
C. firewall policy
D. zone pair
E. lists
Correct Answer: CD
QUESTION 191
How are policies deployed on cloud-hosted Cisco SD-WAN controllers?
A. Policies are created on vSmart and enforced by vManage.
B. Policies are created on vManage and enforced by vSmart.
C. Policies are created on vManage and enforced by vManage.
D. Policies are created on vSmart and enforced by vSmart.
Correct Answer: B
QUESTION 192
What is the OMP graceful restart default value on vSmart controllers and WAN Edge routers?
A. 21,600 seconds
B. 43,200 seconds
C. 86,400 seconds
D. 604,800 seconds
Correct Answer: B
QUESTION 193
A network administrator is configuring VRRP to avoid a traffic black hole when the transport side of the network is down on the master device. What must be configured to get the fastest failover to standby?
A. lower timer interval
B. higher group ID number
C. OMP tracking
D. prefix-list tracking
Correct Answer: D
QUESTION 194
Which issue triggers the Cisco Umbrella resolver to forward DNS requests to the intelligent proxy?
A. A domain is grey-listed.
B. A domain is block-listed.
C. A domain is locally reachable.
D. A domain is nonexistent.
Correct Answer: A
QUESTION 195
Which two criteria are supported to filter traffic on a Cisco Umbrella Cloud-delivered firewall? (Choose two.)
A. Protocol
B. Tunnels
C. site ID
D. URL
E. geolocation
Correct Answer: AB
QUESTION 196
What is a key element used in a vBond Orchestrator redundancy topology?
A. load-balancer with health probes
B. DHCP server
C. stun server
D. fully qualified domain name
Correct Answer: D
QUESTION 197
What is the advantage of installing the controller on-premises?
A. full control of the data plane and the control plane
B. scalability and a cost-saving
C. automatic geographical redundancy and security
D. ease of deployment and management
Correct Answer: A
QUESTION 198
What is the next step when the WAN Edge device boots up and resolves the domain in the ZTP process for WAN Edge deployment?
A. The WAN Edge device establishes secure control plane connections with the controllers and secure data plane connections in the SD-WAN overlay network.
B. The WAN Edge device establishes secure connections with the vManage and vSmart and downloads the configuration using NETCONF.
C. The WAN Edge device learns the vBond and organization name from the configuration and initiates a secure control connection to the vBond orchestrator.
D. The WAN Edge router authenticates to the vBond orchestrator with the chassis serial number and root certificate.
Correct Answer: D
QUESTION 199
Which two protocols are supported for software image delivery when images are hosted on a remote server? (Choose two.)
A. TFTP
B. FTP
C. HTTPS
D. HTTP
E. SSL
Correct Answer: BD
QUESTION 200
What is a requirement for deployment of on-premises vBond controllers through the Cisco Plug and Play Connect process?
A. Internet connectivity from vManage
B. a defined controller profile
C. a DNS name that identifies vBond
D. a CSV file that contains all controllers
Correct Answer: B