QUESTION 61
A Cisco Catalyst SD-WAN customer has a requirement to calculate the SHA value for files as they pass through the device to see the returned disposition and determine if the file is good, unknown, or malicious. The customer also wants to perform real-time traffic analysis and generate alerts when threats are detected. Which two Cisco Catalyst SD-
WAN solutions meet the requirements? (Choose two.)

A. Cisco AMP
B. Cisco Secure Endpoint
C. Cisco SD-WAN UTD Engine
D. Cisco Trust Anchor Module
E. Cisco Threat Grid

Correct Answer: AE

QUESTION 62
Which secure connection should be used to access the REST APIs through the Cisco Catalyst SD-WAN Manager web server?

A. authenticated HTTPS
B. HTTP inspector interface
C. JSON Inspector interface
D. authenticated DTLS

Correct Answer: A

QUESTION 63
When redistribution is configured between OMP and BGP at two Data Center sites (DC) that have Direct Connection Interlink, which step avoids learning the same routes on WAN Edge routers of the DCs from LAN?

A. Set down-bit on Edge routers on DC1
B. Define different VRFs on both DCs
C. Set OMP admin distance lower than BGP admin distance
D. Set same overlay AS on both DC WAN Edge routers

Correct Answer: D

QUESTION 64
Which two features does the application firewall provide? (Choose two.)

A. numbered sequences of match-action pairs
B. classification of 1000+ layer 4 applications
C. blocks traffic by application or application-family
D. classification of 1400+ layer 7 applications
E. application match parameters

Correct Answer: CD

QUESTION 65
A network administrator is creating an OMP feature template from the vManage GUI to be applied to WAN edge routers. Which configuration attribute will avoid the redistribution of the routes back into the OMP from the LAN side?

A. configure “Overlay AS Number”
B. configure “ECMP limit”
C. configure “Send Backup Paths”
D. configure “Number of Paths Advertised per Prefix”

Correct Answer: A

QUESTION 66
An engineer must configure VRRP for redundancy on WAN Edge router1 running an earlier version than 17.6, considering WAN Edge router2 is configured correctly. Which configuration meets the requirement?

A. Interface GigabitEthernet0/0/1
vrf forwarding 10
ip address 192.168.23.3 255.255.255.0
no ip redirects
ip mtu 1496
vrrp 1 address-family ipv4
timers advertise 500
priority 300
end
B. Interface GigabitEthernet0/0/1
vrf forwarding 10
ip address 192.168.23.3 255.255.255.0
no ip redirects
ip mtu 1600
vrrpv2
address 192.168.23.3 primary
exit-vrrp
arp timeout 1200
end
C. Interface GigabitEthernet0/0/1
vrf forwarding 10
ip address 192.168.23.3 255.255.255.0
no ip redirects
ip mtu 1496
vrrp 1 address-family ipv4
timers advertise 1000
priority 150
vrrpv2
address 192.168.23.1 primary
exit-vrrp
arp timeout 1200
end
D. Interface GigabitEthernet0/0/1
vrf forwarding 10
ip address 192.168.23.3 255.255.255.0
no ip redirects
ip mtu 1600
vrrp 1 address-family ipv4
timers advertise 1000
priority 100
vrrpv2
address 192.168.23.3 primary
exit-vrrp
arp timeout 1200
end

Correct Answer: C

QUESTION 67
Which type of data is used in the JSON for SD-WAN REST API?

A. GET, array, object
B. scalar, array, POST
C. scalar, POST, object
D. scalar, array, object

Correct Answer: D

QUESTION 68
Which component of the Cisco Catalyst SD-WAN AppNav solution accelerates network traffic based on configured optimization policies?

A. AppNav controller
B. WAAS central manager
C. WAAS node
D. SD-WAN Manager

Correct Answer: C

QUESTION 69
Which two functions does the SD-WAN Controller provide? (Choose two.)

A. device configuration management using templates
B. policy enforcement throughout the network
C. policies, routing information, and encryption keys dynamic distribution
D. authentication management
E. policy management including policy creation, management, and application

Correct Answer: BC

QUESTION 70
Which two advanced security features are included in unified software image on the Cisco Catalyst SD-WAN Edge device? (Choose two.)

A. Cisco Umbrella DNS Security
B. snort intrusion prevention system
C. URL filtering
D. Enterprise Firewall
E. Cisco AMP and AMP Threat Grid

Correct Answer: CD

QUESTION 71
What is the minimum number of Cisco Catalyst SD-WAN Manager instances required in a cluster for the Statistics Database and Configuration Database services

A. 1
B. 2
C. 3
D. 4

Correct Answer: C

QUESTION 72
What is the function of the colocation facility in the Cisco Catalyst SD-WAN Cloud OnRamp?

A. In the colocation solution, data traffic is routed toward the colocation facility and sent to the destination to decentralize services.
B. The branch router recognizes traffic and routes the traffic using the proper network function at the colocation facility based on the policy within SD-WAN Manager.
C. Colocation clusters are placed in colocations that have no direct connectivity to the SaaS provider applications and infrastructure.
D. Users traffic to the distant colocation efficiently to capitalize on the high-speed transport into the SaaS provider cloud

Correct Answer: B

QUESTION 73
An engineer must configure local router redundancy on a site. Which configuration is required to accomplish the task?

A. system
interface interfacel-name
tloc-extension interface2-name
B. system
tloc-extension interfacel-name
interface interface2-name
C. sdwan
interface interfacel-name
tloc-extension interface2-name
D. sdwan
tloc-extension interfacel-name
interface interface2-name

Correct Answer: C

QUESTION 74
A network administrator configures SNMPv3 on a Cisco WAN Edge router from CLI for monitoring purposes. How many characters are supported by the snmp user <username> command?

A. from 1 to 8
B. from 1 to 16
C. from 1 to 32
D. from 1 to 48

Correct Answer: C

QUESTION 75
How many concurrent sessions does a vManage REST API have before it invalidates the least recently used session if the maximum concurrent session number is reached?

A. 150
B. 200
C. 250
D. 300

Correct Answer: C

QUESTION 76
An engineer provisions a WAN Edge router. Which command should be used from the WAN Edge router to activate it with vManage?

A. request vedge-cloud activate serial <serial> token <token-number>
B. request vedge-cloud activate chassis-number <chassis-number> token <token-number>
C. request vedge-cloud activate chassis-number <chassis-number> serial <serial>
D. request vedge-cloud activate chassis-number <chassis-number> organization <organization>

Correct Answer: B

QUESTION 77
What are the two functions of vSmart? (Choose two.)
A. It ensures that valid WAN Edge routers can build the control plane connectivity.
B. It validates that the WAN Edge trying to join the overlay is authorized to join.
C. It uses TLOCs to uniquely identify the circuit interface to control plane and data plane information.
D. It orchestrates connectivity between WAN Edge routers using policies to create network topology.
E. It builds control plane connections with WAN Edge routers using TLS or DTLS.

Correct Answer: DE

QUESTION 78
Which component of the Cisco SD-WAN network assures that only valid customer nodes are participating in the overlay network?

A. vBond
B. vManage
C. vSmart
D. WAN Edge

Correct Answer: A

QUESTION 79
Which TCP Optimization feature is used by WAN Edge to prevent unnecessary retransmissions and large initial TCP window sizes to maximize throughput and achieve a better quality?

A. SYN
B. SEQ
C. SACK
D. RTT

Correct Answer: C

QUESTION 80
Which secure tunnel type should be used to connect one WAN Edge router to other WAN Edge routers?

A. SSL VPN
B. TLS
C. DTLS
D. IPsec

Correct Answer: D