QUESTION 121
What is the function of colocation in Cloud OnRamp Saas?
A. With colocation facility in Cloud OnRamp, the customer faces challenges to virtualize the security and optimization infrastructure that influence traffic through network elements.
B. Cloud OnRamp incorporates regional colocation facilities by choosing between cloud access points at the remote site and regional cloud access points at the colocation faucitis.
C. The Cloud OnRamp for colocation solution restricts the creation of different VNF service chains orchestrated in Cisco vManage and deployed on a cluster in a colocation facility.
D. In Cloud OnRamp, colocation supports the capability of virtualizing access-only locations and using colocation centers that require the customer to extend to the cloud.
Correct Answer: B
QUESTION 122
Which controller is used for provisioning and configuration in a Cisco SD-WAN solution?
A. vBond
B. vManage
C. vSmart
D. WAN Edge router
Correct Answer: B
QUESTION 123
What is the function of the AppNav Controller in the Cisco SD-WAN AppNav solution?
A. It accelerates specific traffic based on preconfigured policies.
B. It provides information about configured optimization policles on SD-WAN edge devices.
C. It provides configuration and monitoring for WAAS nodes.
D. It Intercepts and distributes network traffic based on configured polices.
Correct Answer: D
QUESTION 124
How many cloud gateway instance(s) can be created per region when provisioning Cloud OnRamp for Multicioud from AWS in a multiregion environment?
A. one
B. two
C. three
D. four
Correct Answer: A
QUESTION 125
What problem happens on a device with two serial numbers, a unique device identifier (UDI), and a secure unique device identifier (SUDI) when an engineer provisions ISR 4000 by PnP using only a UDI?
A. It encounters memory overload problems.
B. It encounters spanning tree issues.
C. It faces interface buffer overflow problems.
D. It encounters redirection problems.
Correct Answer: D
QUESTION 126
What is the primary function of an AppNav cluster?
A. connecting applications to navigation systems
B. optimizing traffic
C. monitoring application logs
D. distributing packet flow
Correct Answer: B
QUESTION 127
Which controller manages the orchestration plane of Cisco Catalyst SD-WAN in a cloud deployment?
A. SD-WAN Manager
B. SD-WAN Validator
C. SD-WAN Controller
D. Cisco Catalyst Center (formerly DNA Center)
Correct Answer: B
QUESTION 128
Which set of platforms must be in separate VMs as of release 16.1?
A. vManage and vSmart
B. vSmart and WAN Edge
C. WAN Edge and vBond
D. vBond and vSmart
Correct Answer: D
QUESTION 129
Which configuration component is used in a firewall security policy?
A. application match parameters
B. URL filtering policy
C. intrusion prevention policy
D. numbered sequences of match-action pairs
Correct Answer: D
QUESTION 130
Which two types of SGT propagation are supported by Cisco TrustSec? (Choose two.)
A. reconciliation
B. inline tagging
C. offline tagging
D. key chain
E. SXP
Correct Answer: BE
QUESTION 131
What is the result during a WAN Edge software upgrade process if the version of the WAN Edge software is higher than the one running on a controller device?
A. The upgrade proceeds with no warning message.
B. The upgrade proceeds with a warning message.
C. The upgrade button is greyed out
D. The upgrade fails with a warning message.
Correct Answer: B
QUESTION 132
Which type of service provider is responsible for secure, private connections between data centers, access regions, and cloud providers in Cisco SD-WAN Multi-Region Fabric?
A. last-mile network providers
B. distributed network providers
C. first-mile network providers
D. middle-mile network providers
Correct Answer: D
QUESTION 133
Which device connects access regions and the core region in Cisco SD-WAN Multi-Region Fabric?
A. border routers
B. SD-WAN GW
C. edge routers
D. SD-WAN CPEs
Correct Answer: A
QUESTION 134
Which solution provides enterprises with multiple distributed branch offices that are clustered around major cities or spread over several countries with the ability to regionalize the routing services in facilities?
A. Cloud OnRamp for Colocation
B. Cloud OnRamp for Multicloud
C. Cloud OnRamp for laaS
D. Cloud OnRamp for SaaS
Correct Answer: A
QUESTION 135
Which protocol does vManage use to provision the WAN Edge device during the onboarding process?
A. EPP
B. HTTPS
C. NETCONF
D. RESTCONF
Correct Answer: C
QUESTION 136
What is the first step for setting up traffic flows when enabling TLS Proxy in SD-WAN for security?
A. The TCP connection is established between the client and the proxy, and between the proxy and the server.
B. The sender authenticates the devices and individual users, and the receiver verifies the signature by decrypting the message with the public key of the sender.
C. When decryption policy is enabled for the flow, a client hello packet is received by Unified Threat Defense to define the decryption action.
D. Certificate authorities in TLS Proxy issue certificates for authentication to all entities such as hosts, network devices, or users.
Correct Answer: A
QUESTION 137
Which solution do service providers use to provide SD-WAN services to customers?
A. Cloud OnRamp for Colocation
B. Cloud OnRamp for Multicloud
C. Cloud OnRamp for laaS
D. Cloud OnRamp for SaaS
Correct Answer: A
QUESTION 138
Which two features are provided by Cisco SD-WAN Cloud Hub with Google Cloud? (Choose two.)
A. direct internet access
B. easy access to AWS
C. simplified management
D. underlay routing
E. automated provisioning
Correct Answer: CE
QUESTION 139
What are two benefits of installing Cisco SD-WAN controllers on cloud-hosted services? (Choose two.)
A. installs the controllers in two cloud regions in a primary and backup setup
B. allows integration of the WAN Edge devices in the cloud
C. utilizes well-known cloud services such as Azure, AWS, and GCP
D. automatically implements zone-based firewalling on the controllers
E. accelerates Cisco SD-WAN deployment
Correct Answer: AE
QUESTION 140
A network administrator is configuring a WAN Edge router with two WAN connections and two TLOCs. Which two attributes of TLOCs must be configured? (Choose two.)
A. site-id
B. encapsulation
C. group-id
D. color
E. tloc-ip
Correct Answer: BD