QUESTION 41
Which health check layer is used in the tracker for failover when using automatic tunneling to Cisco Umbrella as SIG?
A. Layer 2
B. Layer 3
C. Layer 5
D. Layer 7
Correct Answer: D
QUESTION 42
How does the BDF protocol work inside Cisco Catalyst SD-WAN fabric?
A. It is incompatible with an SD-WAN deployment.
B. It provides MTU detection capability.
C. It is configured with a feature template.
D. It is configured only on physical interfaces.
Correct Answer: C
QUESTION 43
Which model is used by REST API to represent the data associated with network devices?
A. XML
B. YAML
C. JSON
D. TOML
Correct Answer: C
QUESTION 44
Which SD-WAN device offers native support for the maximum bandwidth provided by a Tier 3 license without additional modules?
A. ISR 1100-6G
B. Cisco 4451
C. C8300-2N2S-4T2X
D. C8200L-1N-4T
Correct Answer: C
QUESTION 45
Which two parameters are considered for vQoE score to determine the optimal route for a Cisco Catalyst SD-WAN Cloud OnRamp for SaaS? (Choose two.)
A. higher administrative distance
B. jitter
C. delay
D. bandwidth
E. loss
Correct Answer: CE
QUESTION 46
Which type of components are responsible for on-premises SD-WAN deployment, which includes establishing secure tunnels, optimizing traffic, and applying policies across multiple transport links?
A. SD-WAN Controller
B. SD-WAN Validator controller
C. Transport node
D. Edge router
Correct Answer: A
QUESTION 47
A company is using Catalyst SD-WAN Manager as its root certificate authority server and must generate a root certificate using the vShell (Linux) built into the CLI of Catalyst SD-WAN Manager. Which command must be issued to generate the root certificate?
A. openssl req -x509 -new-nodes -key XYZ.pem -sha256 -days 365 subj “/C=US/ST=DC/L=DC/O=Cisco/CN=device.lab” -out ABC.key
B. openssl req -x509 -new-nodes -key XYZ.key -sha256 -days 365 subj “/C=US/ST=DC/L=DC/O=Cisco/CN=device.lab” -out ABC.pem
C. openssl genrsa -out ROOTCA.pem 2048
D. openssl genrsa -out ROOTCA.key 2048
Correct Answer: B
QUESTION 48
Which protocol between Catalyst SD-WAN Controllers and WAN Edge routers is used to exchange route prefixes, next-hop routes, and crypto keys?
A. OMP
B. BGP
C. TLOC
D. BFD
Correct Answer: A
QUESTION 49
Through which mechanism is inter-region VNET to VPN forwarding accomplished when integrating Azure Virtual WAN Hub with Cisco Catalyst SD-WAN?
A. Traffic is routed between virtual hubs in different regions through the Azure backbone.
B. Traffic is routed between virtual hubs in different regions through the underlay SD-WAN network.
C. Traffic is routed between SD-WAN edge devices in different regions through the Azure backbone.
D. Traffic is routed between SD-WAN edge devices in different regions through the underlay SD-WAN network.
Correct Answer: A
QUESTION 50
What is the primary purpose of monitoring “Event Trace” for OMP agent and SD-WAN subsystems?
A. It provides the functionality to capture the SD-WAN traces between the SD-WAN daemons and SD-WAN subsystems.
B. It adds support for event notifications for Cisco IOS XE devices and SD-WAN subsystems.
C. It adds support for event alerts for Cisco WAN Edge routers and SD-WAN subsystems.
D. It provides the functionality to run diagnostics of SD-WAN tracking between the SD-WAN Manager and SD-WAN subsystems.
Correct Answer: A
QUESTION 51
An engineer is initiating a software upgrade for a WAN Edge device from the SD-WAN Manager GUI. Company policy does not allow to store software images on additional or remote servers. Which VPN interface will the WAN Edge device use to download a software image?
A. VPN10
B. VPN99
C. VPN0
D. VPN512
Correct Answer: C
QUESTION 52
Which sequence represents the recommended high-level upgrade path for Cisco Catalyst SDWAN fabric?
A. SD-WAN Manager instances, SD-WAN Validator orchestrators, SD-WAN Controllers, WAN Edges
B. SD-WAN Validator orchestrators, SD-WAN Manager instances, SD-WAN Controllers, WAN Edges
C. SD-WAN Manager instances, SD-WAN Validator orchestrators, one half of SD-WAN Controllers, WAN Edges
D. WAN Edges, SD-WAN Validator orchestrators, SD-WAN Controllers, SD-WAN Manager instances
Correct Answer: A
QUESTION 53
The engineer is configuring the vSmart controller to transmit the initial set of non-best routes to the vEdge routers. Which configuration command is required under the Overlay Management Protocol to satisfy the requirements?
A. controller-send-path-limit 10
B. send-path-limit 10
C. send-backup-paths
D. send backup paths
Correct Answer: C
QUESTION 54
What is an advantage of using configuration groups in a Cisco SD-WAN environment?
A. identifying devices based on tags
B. associating devices to a configuration group and a template
C. incorporating multiple tag rules within a group
D. adding a device to multiple groups
Correct Answer: B
QUESTION 55
Which port is used for SD-WAN Validator under controller certificates if no alternate port is configured?
A. 12344
B. 12345
C. 12346
D. 12347
Correct Answer: C
QUESTION 56
What is the minimum Red Hat Enterprise Linux operating system requirement for a Cisco SD-WAN controller deployment via KVM?
A. RHEL 4.4
B. RHEL 6.5
C. RHEL 6.7
D. RHEL 7.5
Correct Answer: D
QUESTION 57
Which feature builds transport redundancy by using the cross link between two redundant WAN Edge routers?
A. OMP
B. zero-touch provisioning
C. TLOC extension
D. quality of service
Correct Answer: C
QUESTION 58
A network administrator is configuring a centralized control policy based on match action pairs for multiple conditions. Which order must be configured to prefer Prefix List over TLOC and TLOC over Origin?
A. deterministic order
B. nonsequential order
C. lowest to highest sequence number
D. highest to lowest sequence number
Correct Answer: C
QUESTION 59
Which two sets of identifiers does OMP carry when it advertises TLOC routes between WAN Edge routers? (Choose two.)
A. TLOC public and private address, tunnel ID, and performance
B. source and destination IP address, MAC, and site ID
C. system IP address, link color, and encapsulation
D. TLOC public and private address, carrier, and preference
E. VPN ID, local site network, and BGP next-hop IP address
Correct Answer: CD
QUESTION 60
What is the procedure to upgrade all Cisco Catalyst SD-WAN control nodes to a recent version?
A. Upgrade and reboot are performed first on SD-WAN Validator, then on SD-WAN Controller, and finally on the Cisco WAN Edge devices.
B. The upgrade is performed for a group of WAN Edge devices first to ensure data-plane availability when other controllers are being updated.
C. Upgrade and reboot are performed first on SD-WAN Manager, then on SD-WAN Validator, then on SD-WAN Controller, and finally on the Cisco WAN Edge devices.
D. The upgrade is performed first on SD-WAN Manager, then on WAN Edge devices, then on SD-WAN Validator, and finally on SD-WAN Controller. The reboot must start from WAN Edge devices.
Correct Answer: C