QUESTION 101
What is the default value for the number of paths advertised per prefix in the OMP feature template?
A. 4
B. 8
C. 12
D. 16

Correct Answer: A

QUESTION 102
Which signature sets are available in vManage under the security policy configuration for IPS?

A. Connectivity, Balanced, Security
B. Blacklist, Balanced, Security
C. Malware, Security, Connectivity
D. Malware, Blacklist, Connectivity

Correct Answer: A

QUESTION 103
An engineer must configure egress QoS for voice traffic. Which queue must the engineer configure on the WAN Edge router to accomplish the task?

A. queue 0
B. queue 1
C. queue 3
D. queues 7

Correct Answer: A

QUESTION 104
What is the behavior of vBond orchestrator?

A. It builds permanent connections with WAN Edge routers.
B. It builds permanent connections with vSmart controllers.
C. It updates vSmart of WAN Edge routers behind NAT devices using OMP
D. It maintains vSmart and WAN Edge routers secure connectivity state.

Correct Answer: B

QUESTION 105
An engineer is configuring a data policy for lPv4 prefixes for a single WAN Edge device on a site with multiple WAN Edge devices. How is this policy added using the policy configuration wizard?

A. In vBond orchestrator, select the configure -> policies screen, select the localized policy tab, and click add policy.
B. In vSmart controller, select the configure -> policies screen, select the localized policy tab, and click add policy.
C. In vManage NMS, select the configure -> policies screen, select the centralized policy tab, and click add policy.
D. In vManage NMS, select the configure -> policies screen, select the localized policy tab, and click add policy.

Correct Answer: D

QUESTION 106
An engineer must automate certificate signing through Cisco. Which vManage configuration achieves this task?

A. vpn 512
allow-service dns
allow-service sshd
allow-service netconf
B. vpn 0
dns 208.67.222.222 primary
allow-service dns
allow-service sshd
allow-service netconf
C. vpn 512
dns 208.67.222.222 primary
allow-service dns
allow-service sshd
allow-service netconf
D. vpn 0
allow-service dns
allow-service sshd
allow-service netconf

Correct Answer: B

QUESTION 107
Which component is responsible for creating and maintaining the secure DTLS/TLS connection on the vSmart controller?

A. OMP
B. vdaemon
C. SNMP
D. NETCONF

Correct Answer: B

QUESTION 108
Which SD-WAN component allows an administrator to manage and store software images for SD-WAN network elements?

A. WAN Edge routers
B. vBond controllers
C. vSmart controllers
D. vManage NMS

Correct Answer: D

QUESTION 109
Which value of the IPsec rekey timer must be set by the engineer for an OMP graceful restart value set for 24 hours?

A. 6 hours
B. 12 hours
C. 36 hours
D. 48 hours

Correct Answer: D

QUESTION 110
How does the Cisco SD-WAN Cloud OnRamp solution rate the performance of a SaaS application from a branch office to the cloud via a given path?

A. It counts the number of interface errors.
B. It measures the delay and jitter of the path.
C. It monitors the packet loss of priority queues.
D. It computes a quality-of-experience score.

Correct Answer: D

QUESTION 111
Which action removes a WAN Edge device from the authorized list on the controller?

A. Run the remove command in vSmart
B. Change the status to invalidate under Configuration > Certificates > Controllers tab in vManage GUI.
C. Run the request invalidate command on the WAN Edge device.
D. Change the certificate status to invalid under Configuration > Certificates > WAN Edge List in vManage GUI.

Correct Answer: D

QUESTION 112
Which SD-WAN devices require multicast PIM and IGMP configurations when setting up SD-WAN multicast?

A. data center devices with multicast sources
B. data center replicator devices
C. branch devices with multicast receivers
D. branch devices with unicast traffic

Correct Answer: C

QUESTION 113
What are the two requirements for plug-and-play provisioning on Cisco IOS XE SD-WAN devices? (Choose two.)

A. Devices at branch offices must be able to reach the Cisco SD-WAN vSmart controller at the headquarters site.
B. The gateway router for the WAN Edge device must be able to reach public DNS servers.
C. The gateway router for the WAN Edge device must be able to reach devicehelper.cisco.com.
D. The WAN Edge device must have a valid certificate.
E. The gateway router for the WAN Edge device must be able to reach ztp.viptela.com.

Correct Answer: CD

QUESTION 114
The branch users of an organization must be prevented from accessing malicious destinations, and the local files on users’ systems must be protected from malware. Which two Cisco products must the organization deploy? (Choose two.)

A. Cisco Umbrella
B. Cisco SecureX
C. Cisco Stealthwatch
D. Cisco Cloudlock
E. Cisco AMP

Correct Answer: AE

QUESTION 115
Which condition must be present to support DRE in a Cisco SD-WAN environment?

A. client-server topology
B. hub-and-spoke topology
C. flow symmetry
D. TCP Optimization

Correct Answer: C

QUESTION 116
An engineer must advertise OSPF-learned routes and modify the update interval for route filtering by TLOC color to 300 on an SD-WAN device. Which configuration accomplishes this task?

A. address-family ipv4
advertise ospf external
tloc-color-cap-update-interval 300
B. address-family
ipv4
timers
tloc-color-cap-update-interval 300
exit
advertise
ospf external
C. omp
timers
tloc-color-cap-update-interval 300
exit
address-family ipv4
advertise ospf external
D. omp
address-family ipv4
advertise ospf external
tloc-color-cap-update-interval 300

Correct Answer: C

QUESTION 117
Which keyword is used to choose a specific type of tunnel when SLA class is matched by the data traffic?

A. default
B. sla-preferred-color
C. strict
D. preferred-color

Correct Answer: D

QUESTION 118
Which policy allows communication between TLOCs of data centers and spokes and blocks communication between spokes?

A. centralized data policy
B. localized control policy
C. centralized control policy
D. localized data policy

Correct Answer: C

QUESTION 119
What are three types of data that JSON uses when Cisco APIC REST API uses JavaScript?

A. GET, PUT, and DELETE
B. SCALAR, POST, and OBJECT
C. SCALAR, OBJECT, and ARRAY
D. GET, PUT, and POST

Correct Answer: C

QUESTION 120
A network engineer sets tags in OMP for routes that were originated in the Service VPN. Which monitoring tab must be used to verify tags on the next hop?

A. Troubleshooting > Tunnel Health
B. Troubleshooting > Simulate Flows
C. Realtime > OMP Received TLOCs
D. Realtime > OMP Received Routes

Correct Answer: C