QUESTION 141
Which IP address should be reachable by a WAN Edge device for the ZTP process to work in a scenario of “automatic IP address detection” (no DHCP) on WAN interface?
A. 172.16.1.1
B. 8.8.8.8
C. 10.1.1.1
D. 4.4.4.4
Correct Answer: B
QUESTION 142
A customer must upgrade the Cisco SD-WAN devices and controllers from version 19.2 to version 20.3. The devices include WAN Edge Cloud, vManage, vSmart, and vBond. Which types of image files are needed for this upgrade?
A. one file for vManage and one file for all other devices with extension tar.gz
B. one file for vManage, one for vSmart, and one for vBond + WAN Edge Cloud with extension tar.gz
C. one file for vManage, one for vSmart, and one for vBond + WAN Edge Cloud with extension .bin
D. one file for vManage and one file for all other devices with extension .bin
Correct Answer: A
QUESTION 143
What is the function of the OMP TLOCs in a Cisco SD-WAN network?
A. carries OMP service route information
B. represents services in the data center
C. identifiers that map an OMP route to a physical site
D. QoS tags that are used to prioritize traffic
Correct Answer: C
QUESTION 144
Which two actions are necessary to set the Controller Certificate Authorization mode to indicate a root certificate? (Choose two.)
A. Change the organization name of the Cisco SD-WAN fabric.
B. Select the Controller Certificate Authorization mode that is recommended by Cisco
C. Upload an SSL certificate to vManage.
D. Select a validity period from the drop-down menu
E. Select a private certificate signing authority instead of a public certificate signing authority.
Correct Answer: CE
QUESTION 145
Which two features are not supported when FIPS mode is enabled on a Cisco IOS XE SD-WAN device? (Choose two.)
A. SXP reflectors
B. Cisco TrustSec
C. Static IP-SGT mapping
D. PAC Authentication Key
E. SXP over IPv6
Correct Answer: BD
QUESTION 146
How is a TLOC uniquely identified from a WAN Edge router to the SD-WAN transport network?
A. system IP address
B. SD-WAN site ID
C. OMP
D. VPN ID
Correct Answer: A
QUESTION 147
What is the procedure to add software images to the repository in the Cisco vManage server?
A. The software images are stored on the remote vManage server after downloading to the SD-WAN devices over a data plane connection.
B. The SD-WAN device sends the FTP URL to the vManage server and connects to the remote file server to download the software images.
C. The vManage server sends the access request to the SD-WAN device and connects to the remote file server to download the software images.
D. The software images are stored on the local vManage server and downloaded to the SD-WAN devices over an out-of-band management connection.
Correct Answer: D
QUESTION 148
Which Cloud OnRamp solution is used by partners and vendors without Cisco SD-WAN but still needs connectivity to their customers without installing SD-WAN routing appliances on their sites?
A. Cloud OnRamp for Multicloud
B. Cloud OnRamp for SaaS
C. Cloud OnRamp for Colocation
D. Cloud OnRamp for IaaS
Correct Answer: C
QUESTION 149
Which two hardware platforms support Cisco IOS XE SD-WAN images? (Choose two.)
A. ISR4000 series
B. ISR9300 series
C. vEdge-1000 series
D. ASR9000 series
E. ASR1000 series
Correct Answer: AE
QUESTION 150
An engineer is configuring a centralized policy to influence network route advertisement. Which controller delivers this policy to the fabric?
A. SD-WAN Manager
B. SD-WAN Controller
C. WAN Edge
D. SD-WAN Validator
Correct Answer: B
QUESTION 151
Which two mechanisms are used to guarantee the integrity of data packets in the Cisco Catalyst SD-WAN architecture data plane? (Choose two.)
A. certificates
B. transport locations
C. authentication headers
D. encapsulation security payload
E. TPM chip
Correct Answer: CD
QUESTION 152
What is the advantage of deploying configuration groups over device templates?
A. Transport profiles are attached to devices before their deployment, unlike templates.
B. Rules and tags are used to detach devices from groups automatically.
C. Features are reused across groups instead of device models.
D. Configuration groups match specific site needs, unlike device templates.
Correct Answer: C
QUESTION 153
Which service VPN must be reachable from all WAN Edge devices and the controllers?
A. VPN0
B. VPN10
C. VPN215
D. VPN512
Correct Answer: A
QUESTION 154
A network administrator is configuring QoS on a WAN Edge 5000 router and needs to enable it on the transport side interface. Which policy setting must be selected to accomplish this goal?
A. Cloud QoS
B. Cloud QoS Service side
C. Application
D. Netflow
Correct Answer: A
QUESTION 155
What are two attributes of vRoute? (Choose two.)
A. carrier
B. encapsulation
C. domain ID
D. originator
E. service
Correct Answer: DE
QUESTION 156
Which action is performed during the onboarding process when a WAN Edge router is connected to ZTP server ztp.viptela.com?
A. The router is connected to WAN Edge Cloud Center.
B. The router is connected to SD-WAN Controller via a DTLS/TLS tunnel.
C. The router is synced with SD-WAN Controller via an IPsec tunnel.
D. The router receives its SD-WAN Validator Orchestrator information.
Correct Answer: D
QUESTION 157
Which protocol is used to propagate multicast join requests over the Cisco Catalyst SD-WAN fabric?
A. Auto-RP
B. OMP
C. ARP
D. IGMP
Correct Answer: D
QUESTION 158
Which Cisco SD-WAN feature propagates packets with SGTs through the network?
A. QOE
B. SGT Enforcement
C. TrustSec Inline Tagging
D. SXP
Correct Answer: D
QUESTION 159
Which Cisco Umbrella SIG feature prevents users from browsing specific websites in a Cisco Catalyst SD-WAN branch?
A. Secure Web Gateway
B. DNS filtering
C. cloud-delivered firewall
D. Talos correlated intelligence
Correct Answer: A
QUESTION 160
Which compression algorithm does DRE use in a Cisco SD-WAN environment?
A. Ziv Huffman encoding
B. run-length encoding
C. Huffman encoding
D. Lempel-Ziv-Welch encoding
Correct Answer: D