Implementing Cisco SD-WAN Solutions (ENSDWI)382 questions across 39 pages are complete and free, with no account or card.
382 questions in this bank
Free access · progress saved on this device
What is an attribute of TLOC?
Answer: D
A is the correct answer, be careful not to confuse "local preference" with "preference" which is another TLOC attribute, local preference being a BGP attribute.
Source: Adapted from community discussion — khanda
What is the maximum number of IPsec SAs that are temporarily created and converged on a new set of IPsec SAs in the pairwise keys process during a simultaneous rekey?
Answer: D
This question is designed to be purposively misleading, in that it does not specify simultaneous key pairs but only states the maximum IPSec SA's (Security Associations) This is from the cisco white paper below:- During a simultaneous rekey, up to four pairs of IPsec Security Associations (SAs) can be temporarily created. These four pairs converge on a single rekey of a device. 4 pairs = 8 The maximum number of IPsec SA temporarily created is therefore answer D https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/security/ios-xe-17/security-book-xe/ipsec-pairwise-keys.html
Source: Adapted from community discussion — NetArch_Teck
Which protocol is used to propagate multicast join requests over the Cisco SD-WAN fabric?
Answer: D
What is the default value for the Multiplier field of the BFD basic configuration in vManage?
Answer: D
The BFD Multiplier Default Value is 6. the range is from 1-6 as per Cisco white papers. Answer D Reference:- https://www.cisco.com/c/en/us/td/docs/routers/sdwan/command/sdwan-cr-book/config-cmd.html#r_shaping_rate_3056.xml
Source: Adapted from community discussion — NetArch_Teck
A customer wants to use AWS for Cisco SD-WAN IaaS services by deploying virtual SD-WAN routers in a transit AWS VPC. The transit VPC then connects via site-to-site IPsec tunnels to an AWS transit gateway. Which transit VPC connects via site-to-site IPsec tunnels to an AWS transit gateway?
Answer: C
Refer to the exhibit.
A WAN Edge device was recently added to vManage, but a control connection could not be established. Which action resolves this issue?
Answer: D
another source, and I agree that answer is D https://www.cisco.com/c/en/us/support/docs/routers/sd-wan/214509-troubleshoot-control-connections.html#toc-hId-1981257189 If the serial number is not present on the controllers for a given device, the control connections fail. When you troubleshoot such a problem, ensure that the correct serial number and device model was configured and provisioned on the PnP portal (software.cisco.com) and vManage.
Source: Adapted from community discussion — PepaZdepa33
DRAG DROP - Drag and drop the alarm states from the left onto the corresponding alarm descriptions on the right.
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
Which two mechanisms are used by vManage to ensure that the certificate serial number of the WAN Edge router that is needed to authenticate is listed in the WAN Edge Authorized Serial Number list? (Choose two.)
Answer: CD
C & D guys. vManage Sync with the Cisco Smart account and adds devices to the list automatically when you purchase them. The other way is uploading a list manually to vManage.
Source: Adapted from community discussion — michyshark14
Which component is responsible for creating and maintaining the secure DTLS/TLS connection on the vSmart controller?
Answer: A
A Cisco SD-WAN daemon running on each vSmart controller and router creates and maintains the secure DTLS or TLS connections between the devices. This daemon is called vdaemon . https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/security/vedge/security-book/security-overview.html
Source: Adapted from community discussion — Roger95
What is the behavior of vBond orchestrator?
Answer: A
A. Is correct. The major components of the Cisco vBond Orchestrator are: Control plane connection: Each Cisco vBond Orchestrator has a persistent control plane connection in the form of a DTLS tunnel with each Cisco vSmart Controller in its domain. In addition, the Cisco vBond Orchestrator uses DTLS connections to communicate with edge routers when they come online, to authenticate the router, and to facilitate the router's ability to join the network. Basic authentication of an edge router is done using certificates and RSA cryptography. NAT traversal: The Cisco vBond Orchestrator facilitates the initial orchestration between edge routers and Cisco vSmart Controllers when one or both of them are behind NAT devices. Standard peer-to-peer techniques are used to facilitate this orchestration. Load balancing: In a domain with multiple Cisco vSmart Controllers, the Cisco vBond Orchestrator automatically performs load balancing of edge routers across the Cisco vSmart Controllers when routers come online. https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/sdwan-xe-gs-book/system-overview.html#c_Components_of_the_Viptela_SEN_9290.xml
Source: Adapted from community discussion — Eliasmiranda
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
300-415 practice, question 131. 382 questions available.
Version 1.0.0. How we source questions