An engineer must configure local redundancy on a site. Which configuration accomplish this task?
When VPNs are grouped to create destination zone in Zone-Based Firewall, how many zones can a single VPN be part of?
Which two hardware platforms support Cisco IOS XE SD-WAN images'' (Choose two)
What is the default value (in milliseconds) set tor the poll interval in the BFD basic configuration?
Which pathway under Monitor > Network > Select Device is used to verify service insertion configuration?
Which protocol is used between redundant vSmart controllers to establish a permanent communication channel?
Refer to the exhibit.
What does the BFD value of 8 represent?
Which component is used for stateful inspection of TCP, UDP. and ICMP flows in Cisco SD-WAN firewall policies?
Which Cisco SD-WAN configuration provides the advantages of day-zero deployment and reusable configuration components?
Which component of the Cisco SD-WAN control plane architecture should be located in a public Internet address space and facilitates NAT-traversal?
In a customer retail network with multiple data centers, what does the network administrator use to create a regional hub topology?
An engineer is configuring a centralized policy to influence network route advertisement. Which controller delivers this policy to the fabric?
A vEdge platform is sending VRRP advertisement messages every 10 seconds. Which value configures the router back to the default timer?
Refer to the exhibit vManage and vBond have an issue establishing a connection to vSmart Which two actions does the administrator take to fix the issue? (Choose two)
Install the certificate received from the certificate server.
Drag and drop the devices from the left into order on the right to upgrade the software from version 19 to version 20.
An engineer builds a three-node vManage cluster and then realizes that multiple nodes are unnecessary for the size of the company. How should the engineer revert the setup to a single vManage?
Refer to the exhibit.
The network team must configure branch B WAN Edge device 103 to establish dynamic full-mesh IPsec tunnels between all colors with branches over MPLS and Internet circuits. The branch ts configured with:
Which configuration meets the requirement?
A)
B)
C)
D)
A network engineer must configure all branches to communicate with each other through the Service Chain Firewall located at the headquarters site. Which configuration allows the engineer to accomplish this task?
A)
B)
C)
D)
How many concurrent sessions does a vManage REST API have before it invalidates the least recently used session if the maximum concurrent session number is reached?
An administrator is configuring the severity level on the vManage NMS for events that indicate that an action must be taken immediately. Which severity level must be configured?
Refer to the exhibit Which configuration must the engineer use to form underlay connectivity for the Cisco SD-WAN network?
A)
B)
C)
D)
An engineer must create a QoS policy by creating a class map and assigning it to the LLQ queue on a WAN Edge router Which configuration accomplishes the task?
A)
B)
C)
D)
What is the result during a WAN Edge software upgrade process if the version of the WAN Edge software is higher than the one running on a controller device?
Which SD-WAN component detects path performance information in the organization to report the issue to the service provider at site ID:S4288T5E44F04?
Refer to the exhibit. vManage logs are available for the past few months. A device name change deployed mistakenly at a critical site. How is the device name change tracked by operation and design teams?
A)
B)
C)
What are the two advantages of deploying cloud-based Cisco SD-WAN controllers? (Choose two.)
What prohibits deleting a VNF image from the software repository?
Refer to the exhibit. An engineer must configure the Overlay Management Protocol route preference so that when B2 tries to reach host routes advertised by B1 it always chooses the MPLS circuit. Which two match conditions must be configured to accomplish this task? (Choose two.)
An engineer is configuring a data policy IPv4 prefixes for a site WAN edge device on a site with edge devices. How is this policy added using the policy configuration wizard?
An engineer must configure two branch WAN Edge devices where an Internet connection is available and the controllers are in the headquarters. The requirement is to have IPsec VPN tunnels established between the same colors. Which configuration meets the requirement on both WAN Edge devices?
An engineer is tasked to improve throughput for connection-oriented traffic by decreasing round-trip latency. Which configuration will achieve this goal?
Refer to the exhibit. The ge0/0 interface connects to a 30-MB link. A network administrator wants to always have 10 MB available for high priority traffic. When lower-priority traffic busts exceed 20 MB. Traffic should be redirected to the second WAN interface ge0/1. Which set of configurations accomplishes this task?
A)
B)
C)
D)
Which protocol is used to measure loss latency, Jitter, and liveliness of the tunnel between WAN Edge router peers?
A network administrator is configuring Qos on a vEdge 5000 router and needs to enable it on the transport side interface. Which policy setting must be selected to accomplish this goal?
An engineer configured a data policy called ROME-POLICY. Which configuration allows traffic flow from the Rome internal network toward other sites?
How are custom application ports monitored in Cisco SD-WAN controllers?
What is the OMP graceful restart default value on vSmart controllers and WAN Edge routers?
What is the minimum Red Hat Enterprise Linux operating system requirement for a Cisco SD-WAN controller deployment via KVM?
An engineer is configuring the branch office with a 172.16.0.0/16 subnet to use DIA for Internet traffic. All other traffic must flow to the central site or branches using the MPLS circuit Which configuration meets the requirement?
A)
B)
C)
D)
Drag and drop the devices from the left onto the correct functions on the right.
Refer to the exhibit. An engineer must block FTP traffic coming in from a particular Service VPN on a WAN Edge device Which set of steps achieves this goal?
Which table is used by the vSmart controller to maintain service routes of the WAN Edge routers in the hub and local branches?
Which protocol is used to propagate multicast join requests over the Cisco SD-WAN fabric?
When a WAN Edge device joins the SD-WAN overlay, which Cisco SD-WAN components orchestrates the connection between the WAN Edge device and a vSmart controller?
An engineer is configuring a WAN Edge router for DIA based on matching QoS parameters. Which two actions accomplish this task? (Choose two.)
What is a benefit of the application-aware firewall?
Which controller is excluded from the process of checking against the authorized, allowed list?
Which set of elements are verified by the controller to confirm the identity of edge devices?
Refer to the exhibit A small company was acquired by a large organization As a result, the new organization decided to update information on their Enterprise RootCA and generated a new certificate using openssl Which configuration updates the new certificate and issues an alert in vManage Monitor | Events Dashboard?
How are policies deployed on cloud-tiosted Cisco SD-WAN controllers?
How does the replicator role function in cisco SD-WAN?
Refer to the exhibit.
The engineer must assign community tags to 3 of its 74 critical server networks as soon as that are advertised to BGP peers. These server networks must not be advertised outside AS. Which configuration fulfill this requirement?
A)
B)
C)
D)
How is lhe software managed in Cisco SD-WAN?
What are the two functions of vSmart? (Choose two)
Refer to the exhibit.
An enterprise has hub and spoke topology where it has several VPNs. An engineer must allow users in VPN91 to reach users in VPN92 and VPN10 to reach VPN91 and VPN92. Which configuration meets these requirements?
Drag and drop the functions from the left onto the correct templates on the right.
An engineer must configure VRRP for redundancy on WAN Edge router1 running an earlier version than 20.6, considering WAN Edge router2 is configured correctly. Which configuration meets the requirement?
Which two features does the application firewall provide? (Choose two.)
Which command disables the logging of syslog messages to the local disk?
What are the two impacts of losing vManage connectivity to fabric in the Cisco SD-WAN network? (Choose two)
Refer to the exhibit. A Cisco SD-WAN network carries traffic for several departments and over 1200 users with several applications at site A and site B branches over the MPLS1 circuit. An engineer is provisioning a higher bandwidth on-demand metro circuit as a backup connection. Which two configurations must the engineer apply to implement the on-demand tunnels? (Choose two.)
An engineer must apply the configuration for certificate installation to vBond Orchestrator and vSmart Controller. Which configuration accomplishes this task?
A network administrator is configuring a tunnel interface on a branch Cisco IOS XE router to run TLOC extensions. Which configuration will extend a TLOC over a GRE tunnel to another router in the branch?
In a Cisco SD-WAN architecture, what is the role of the WAN Edge?
Refer to the exhibit. Which configuration value is used to change the administrative distance of iBGP routes to 20?
How many subnets are necessary in Azure VNet for a WAN Edge device to function in the cloud deployment?
Which IP address must be reachable by a WAN Edge device for the ZIP process to work?
A network administrator is creating an OMP feature template from the vManage GUI to be applied to WAN edge routers. Which configuration attribute will avoid the redistribution of the routes back into the OMP from the LAN side?
An enterprise needs DIA on some of its branches with a common location ID: A041:B70C: D78E::18 Which WAN Edge configuration meets the requirement?
A)
B)
C)
D)
What is a description of vManage NMS?
Which two prerequisites must be met before the Cloud onRamp for laaS is initiated on vManage to expand to the AWS cloud? (Choose two)
Refer to the exhibit An engineer must configure a QoS policy between me hub and site A (spoke) over a standard internet circuit where traffic shaping is adjusted automatically based on evaiiabk» bandwidth Which configuration meets the requirement?
Refer to the exhibit The network team must configure El GRP peering at HQ with devices in the service VPN connected to WAN Edge CSRv. CSRv is currently configured with
A)
B)
C)
D)
Which protocol runs between the vSmart controllers and WAN Edge routers when the vSmart controller acts like a route reflector?
Which service VPN must be reachable from all WAN Edge devices and the controllers?
Which hardware component is involved in the Cisco SD-WAN authentication process for ISR platforms?
Which scheduling method is configured by default for the eight queues in the cloud vEdge router1?
Refer to the exhibit The engineering must assign tags to 3 Of its 74 server networks as soon as they are advertised to peers These server network must not be advertised AS which configuration fulfil the requirement?
A)
B)
C)
D)
Refer to the exhibit.
vManage and vBond have an issue establishing a connection to each other. Which configuration resolves the issue?
What is a key element used in a vBond Orchestrator redundancy topology?
Refer to the exhibit A vBond controller was added to the controller list with the same Enterprise Root CA certificate as vManage. The two controllers can reach each other via VPNO and share the same organization name, but the control connection is not initiated- Which action resolves the issue?
Refer to the exhibit.
Which QoS treatment results from this configuration after the access list acl-guest is applied inbound on the vpn1 interface?
Which two WAN Edge devices should be deployed in a cloud? (Choose two.)
An enterprise deployed a Cisco SD-WAN solution with hub-and-spoke topology using MPLS as the preferred network over the Internet. A network engineer must implement an application-aware routing policy to allow ICMP traffic to be load-balanced over both the available links. Which configuration meets the requirement?
A)
B)
C)
D)
An administrator must configure an ACL for traffic coming in from the service-side VPN on a specific WAN device with circuit ID 391897770. Which policy must be used to configure this ACL?
A network administrator is configuring a centralized control policy based on match action pairs for multiple conditions, which order must be configured to prefer Prefix List over TLOC and TLOC over Origin?
Which component of the Cisco SD-WAN secure extensible network provides a single pane of glass approach to network monitoring and configuration?
Which two platforms for the Cisco SD-WAN architecture are deployable in a hypervisor on-premises or in IAAS Cloud? (Choose two.)
Which configuration step is taken on vManage after WAN Edge list is uploaded?
How is the software managed in Cisco SD-WAN?
Which command displays BFD session summary information per TLOC on vEdge routers?
What is the default value for the number of paths advertised per prefix in the OMP feature template?
Refer to exhibit. An engineer is troubleshooting tear of control connection even though a valid CertificateSerialNumber is entered. Which two actions resolve Issue? (Choose two)
Which two REST API functions are performed for Cisco devices in an overlay network? (Choose two)
What is a default protocol for control plane connection?
What is the threshold to generate a warning alert about CPU or memory usage on a WAN Edge router?
Which configuration defines the groups of interest before creation of the access list or route map?
A)
B)
C)
D.
Refer to the exhibit. Which configuration stops Netconf CLI logging on WAN Edge devices during migration?
Which encryption algorithm is used for encrypting SD-WAN data plane traffic?
Which two mechanisms are used by vManage to ensure that the certificate serial number of the WAN Edge router that is needed to authenticate is listed in the WAN Edge Authorized Señal Number Hst’ (Choose two)
Which destination UDP port is used by WAN Edge router to make a DTLS connection with vBond Orchestrator?
Which type of certificate is installed on vManage for a user to access vManage via a web browser?
Which two criteria ate supported to filter traffic on a Cisco Umbrella Cloud-delivered firewall? (Choose two )
A network administrator configures SNMFV3 on a Cisco WAN Edge router from CL I for monitoring purposes How many characters are supported by the snmp user username command?
Refer to the exhibit.
What binding is created using the tloc-extension command?
Drag and drop the security terminologies from the left onto the PCI-compliant network features and devices on the right.
Which percentage for total memory or total CPU usage for a device is classified as normal in the WAN Edge Health pane?
Which two actions are necessary to set the Controller Certificate Authorization mode to indicate a root certificate? (Choose two)
Which two products are used to deploy Cisco WAN Edge Router virtual platforms? (Choose two.)
Refer to the exhibit.
An engineer configured OMP with an overlay-as of 10666. What is the AS-PATH for prefix 104.104.104.104/32 on R100?
Refer to the exhibit, which configuration configures IPsec tunnels in active and standby?
Which TLOC color is used for site-to-site communication in a Google Cloud integration with Cisco SD-WAN?
When software is upgraded on a vManage NMS, which two image-adding options store images in a local vManage software repository? (Choose two.)
Which capability does Cisco SD-WAN Multi-Region Fabric provide?
Refer to the exhibit, Which configuration routes Site 2 through the firewall in Site 1?
Which storage format Is used when vManage Is deployed as a virtual machine on a KVM hypervisor?
Which OMP route is selected for equal OMP route preference values on WAN Edge routers?
An engineer must use data prefixes to configure centralized data policies using the vManage policy configuration wizard. What is the first step to accomplish this task?
