Implementing Cisco SD-WAN Solutions (ENSDWI)382 questions across 39 pages are complete and free, with no account or card.
382 questions in this bank
Free access · progress saved on this device
Which protocol is used by the REST API to communicate with network devices in the Cisco SD-WAN network?
Answer: A
Rest API Monitoring uses HTTP requests to access and use data as the main protocol. That data can be GET, PUT, POST AND DELETE data classification! Option [A] Cisco Press Link:- https://www.ciscopress.com/articles/article.asp?p=3145761&seqNum=6
Source: Adapted from community discussion — NetArch_Teck
Refer to the exhibit. Cisco SD-WAN is deployed with controllers hosted in a data center. All branches have WAN Edge devices with dual connections to the data center: one via Internet and the other using MPLS. Three branches out of 20 have issues with their control connections on MPLS circuit. The local error refers to Control Connection Failure. Which action resolves the issue?
Answer: B
The "DCONFAIL" error is a result of an underlying routing issue, according to Cisco white papers, the steps outlined are:- *The next hop route is not reachable *The default gateway is not installed in the RIB (Routing Information Base) *The Datagram Transport Layer Security port is not open. All of the above alludes to routing in the SD-WAN network fabric. Answer = [B] Ref:- https://www.cisco.com/c/en/us/support/docs/routers/sd-wan/214509-troubleshoot-control-connections.html#toc-hId--1851267275
Source: Adapted from community discussion — NetArch_Teck
Refer to the exhibit. Which NAT type must the engineer configure for the vEdge router to bring up the data plane tunnels?
Answer: D
The question describes the VEdge Router to the NAT router (In a Private Network) This eliminates option D (Use a public color on the TLOC) This is all from my working knowledge working within the SD-WAN and being an Network Architect for 5 years. Due to the relatively new technology, their isn't a blueprint or templates to reference for this At least one side of the WAN Edge tunnel can always initiate a connection inbound to a second WAN Edge even if there is a firewall in the path. It is recommended to configure full-cone, or 1-to-1 NAT at the data center or hub site so that, regardless of what NAT type is running at the branch (restricted-cone, port-restricted cone, or symmetric NAT), the branch can send traffic into the hub site using IPsec at a minimum without issue. The logical answer here would be [B] - Full Cone NAT Link Reference https://www.cisco.com/c/en/us/td/docs/solutions/CVD/SDWAN/cisco-sdwan-design-guide.html
Source: Adapted from community discussion — NetArch_Teck
What is the default value for the number of paths advertised per prefix in the OMP feature template?
Answer: A
https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/routing/vEdge-20-x/routing-book/m-unicast-routing.html "A Cisco vSmart Controller learns the same OMP route, 10.10.10.0/24, from two Cisco vEdge devices in the same site. If all other parameters are the same, both routes are chosen and advertised to other OMP peers. By default, up to four equal-cost routes are selected and advertised."
Source: Adapted from community discussion — brutusmail
Which two vRoute attributes should be matched or set in vSmart policies and modified by data policies? (Choose two.)
Answer: AE
Vroute configuration within the policy suggests the TLOC and VPN keywords Option A & E is correct! Ref https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/policies/vedge/policies-book/policy-framework.html#id_113316 Document that Brutusmail is has also been verified, table 5 details vroute attributes being TLOC and VPN
Source: Adapted from community discussion — NetArch_Teck
What are the two components of an application-aware firewall? (Choose two.)
Answer: CE
What are the two prerequisites for a Cloud OnRamp for SaaS feature to show the accurate vQoE score? (Choose two.)
Answer: AB
The cisco guide for Cloud OnRamp SaaS requires that NAT to be enabled for VPN 0 and a default route that directs traffic out to the internet (This requirement is necessary for the interface to be a candidate for local exit, regardless of any other NAT configured for the site). Options [A] & [B] Reference Link:- https://www.cisco.com/c/dam/en/us/td/docs/solutions/CVD/SDWAN/CVD-SD-WAN-Cloud-onRamp-for-SaaS-Deployment-Guide-2018JUL.pdf
Source: Adapted from community discussion — NetArch_Teck
What is a requirement for a WAN Edge to reach vManage, vBond, and vSmart controllers in a data center?
Answer: D
attention to the question: What is a requirement for a WAN Edge to reach "vManage, vBond, and vSmart" controllers in a data center? IGP or static routing is needed to get from WANEDGE to VBOND, but then DTLS/TLS tunnels need to be established for wan edge to reach VSMART, VMANAGE note 1: I replace the IGP with static routing to reach the vbond , but I need DTLS/TLS for the wan edge to reach the other controllers NOTE 2 vbond needs DTLS/TLS to authenticate the wANEDGE if that will never reach the controllers link: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/security/vedge/security-book/security-overview.html shows that the vBond can use TLS to connect to the wanEdge
Source: Adapted from community discussion — RREVECO
Which website allows access to visualize the geography screen from vManager using the internet?
Answer: D
Which queue must an engineer configure for control and BFD traffic for convergence on a WAN Edge router?
Answer: A
Queue 0 is always configured as a low-latency queue and is the only queue that supports Low Latency Queuing. Additionally, all control traffic that is originated by the WAN Edge router, including DTLS/TLS, BFD probes, and rout- ing protocol traffic, is automatically mapped to queue 0.
Source: Adapted from community discussion — brutusmail
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
300-415 practice, question 151. 382 questions available.
Version 1.0.0. How we source questions