Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

sdwan part 1 > part 1 > Flashcards

part 1 Flashcards

1
Q

Which component of the Cisco SD-WAN secure extensible network provides a single pane of glass approach to network monitoring and configuration?

A. APIC-EM
B. vSmart
C. vManage
D. vBond

A

C

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is a benefit of the application aware firewall feature in the Cisco SD-WAN solution?

A. application monitoring
B. application malware protection
C. application visibility
D. control policy enforcement

A

C

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

A network administrator is configuring QoS on a vEdge 5000 router and needs to enable it on the transport side interface. Which policy setting must be selected to accomplish this goal?

A. Cloud QoS Service side
B. Cloud QoS
C. Netflow
D. Application

A

B

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

A policy is created to influence routing path in the network using a group of prefixes. What policy application will achieve this goal when applied to a site list?

A. control-policy
B. vpn-membership policy
C. app-route policy
D. cflowd-template

A

A

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

An engineer wants to track tunnel characteristics within a SLA-based policy for convergence. Which policy configuration will achieve this goal?

A. Data policy
B. Control policy
C. App-route policy
D. VPN membership policy

A

C

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Refer to the exhibit.

vEdge-2(config-vpn-0)#interface ge0/2.101
vEdge-2(config-interface)#ip address 10.1.100.0/24
vEdge-2(config-interface)#tloc-extension ge0/0
vEdge-2(config-interface)#mtu 1496
vEdge-2(config-interface)#no shutdown

What binding is created using the tloc-extension command?

A. between ge0/2.101 of port-type transport and ge0/0 of port-type service
B. between ge0/2.101 of port-type service and ge0/0 of port-type service
C. between ge0/2.101 of port-type service and ge0/0 of port-type transport
D. between ge0/2.101 of port-type transport and ge0/0 of port-type transport

A

D

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Which two algorithms authenticate a user when configuring SNMPv3 monitoring on a WAN Edge router? (Choose two)

A. AES-256
B. SHA-1
C. AES-128
D. MD5
E. SHA-2
A

D,E

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

A network administrator is configuring an application-aware firewall between inside zones to an outside zone on a WAN edge router using vManage GUI. What kind of inspection is performed when the ”inspect” action is used?

A. Layer 7 inspection for TCP and Layer 4 inspection for UDP
B. IPS inspection for TCP and-Layer 4 inspection for UDP
C. stateful inspection for TCP and stateless inspection of UDP
D. stateful inspection for TCP and UDP

A

D

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is the purpose of ”vpn 0” in the configuration template when onboarding a WAN edge node?

A. It carries control traffic over secure IPsec connections between vSmart controllers and vEdge routers, and between vSmart and vManager
B. It carries control out-of-bond network management traffic among the Viptela devices in the overlay network.
C. It carries control traffic over secure DTLS or TLS connections between vSmart controllers and vEdge routers, and between vSmart and vBond

A

C

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

In Cisco SD-WAN, what protocol is used for control connections between SD-WAN devices?

A. BGP
B. OSPF
C. DTLS
D. OMP

A

C

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

In an AWS cloud, which feature provision WAN Edge routers automatically in Cisco SD-WAN?

A. Cloud OnRamp
B. vAnalytics
C. Cloud app
D. Network Designer

A

A

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

When a WAN Edge device joins the SD-WAN overlay, which Cisco SD-WAN components orchestrates the connection between the WAN Edge device and a vSmart controller?

A. OMP
B. vBond
C. vManage
D. APIC-EM

A

B

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

A network administrator is bringing up one WAN Edge for branch connectivity. Which types of tunnels form when the WAN edge router connects to the SD-WAN fabric?

A. DTLS or TLS tunnel with vBond controller and IPsec tunnel with vManage controller
B. DTLS or TLS tunnel with vBond controller and IPsec tunnel with other WAN Edge routers
C. DTLS or TLS tunnel with vSmart controller and IPsec tunnel with other Edge routers
D. DTLS or TLS tunnel with vSmart controller and IPsec tunnel with vBond controller

A

C

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

In the Cisco SD-WAN solution, vSmart controller is responsible for which two actions? (Choose two)

A. Authenticate and authorize vEdge routers.
B. Distribute the IP address from DHCP server to vEdge routers.
C. Distribute crypto key information among vEdge routers
D. Configure and monitor vEdge routers.
E. Distribute route and policy information via OMP.

A

C,E

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Which device in the SD-WAN solution receives and categorizes event reports, and generates alarms?

A. vSmart controllers
B. WAN Edge routers
C. vBond controllers
D. vManage NMS

A

D

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

An administrator needs to configure SD-WAN to divert traffic from the company’s private network to an ISP network. What action should be taken to accomplish this goal?

A. configure the data security policy
B. configure the application aware policy
C. configure the control policy
D. configure the data policy

A

D

17
Q

Drag and drop the definitions from the left to the configuration on the right.



A

+ destination zone: grouping of VPNs where the data traffic flows terminate
+ firewall policy: matching condition that allows traffic flow between two zones
+ source zone: grouping of VPNs where the data traffic flows originate
+ zone pair: container that associates forwarding and blocking decisions

18
Q

Drag and drop the attributes from the left that make each transport location unique onto the right. Not all options are used.



A

+ target 1: color
+ target 2: IP address
+ target 3: encapsulation

19
Q

Drag and drop the steps from the left into the order on the right to upload software on vManage repository that is accessible from maintenance > Software Repository.



A

+ Step 1: Click the repository
+ Step 2: Click Add new software
+ Step 3: Select vManage to store the software image
+ Step 4: Choose the file and click to upload

20
Q

Which software security feature is supported by the Cisco ISR 4451 router?

A. IPsec/GRE cloud proxy
B. reverse proxy
C. Enterprise Firewall with Application Awareness
D. Cloud Express service

A

C

21
Q

Which feature builds transport redundancy by using the cross link between two redundant WAN Edge routers?

A. OMP
B. TLOC extension
C. quality of service
D. zero-touch provisioning

A

B

22
Q

An engineer is configuring a centralized policy to influence network route advertisement. Which controller delivers this policy to the fabric?

A. vSmart
B. vBond
C. WAN Edge
D. vManage

A

A

23
Q

Which two WAN Edge devices should be deployed in a cloud? (Choose two)

A. vEdge 100wm
B. ASR 1000v
C. CSR 1000v
D. vEdge 5000v
E. vEdge cloud
A

C,E

24
Q

Which two products that perform lifecycle management for virtual instances are supported by WAN Edge cloud routers? (Choose two)

A. OpenStack
B. VMware vCenter
C. AWS
D. IBM Cloud
E. Azure
A

A,B

25
Q

Which secure connection should be used to access the REST APIs through the Cisco vManage web server?

A. HTTP inspector interface
B. authenticated HTTPS
C. authenticated DTLS
D. JSON Inspector interface

A

B

26
Q

What is a description of vManage NMS?

A. A cluster requires device templates to be created on and attached to the same server
B. It is accessible only from VPN 512 (the management VPN)
C. It is a software process on a dedicated WAN Edge router in the network
D. A cluster consists of a minimum of two vManage NMSs

A

A

27
Q

In which device state does the WAN edge router create control connections, but data tunnels are not created?

A. valid
B. backup
C. active
D. staging

A

D

28
Q

A network administrator is configuring OMP in vManage to advertise all the paths for the same prefix from a site that has two WAN Edge devices. Each WAN Edge device is connected to three ISPs and two private MPLS transports. What is the minimum value for ‘Number of Paths advertised per Prefix” that should be configured?

A. 2
B. 3
C. 5
D. 10

A

C

29
Q

A network administrator is configuring a tunnel interface on a branch Cisco IOS XE router to run TLOC extensions. Which configuration will extend a TLOC over a GRE tunnel to another router in the branch?

Option A
Option B
Option C
Option D


A. Option A
B. Option B
C. Option C
D. Option D

A

C

30
Q

If Smart Account Sync is not used, which Cisco SD-WAN component is used to upload an authorized serial number file?

A. vSmart
B. WAN Edge
C. vManage
D. vBond

A

C

31
Q

A network administrator is creating an OMP feature template from the vManage GUI to be applied to WAN edge routers. Which configuration attribute will avoid the redistribution of the routes back into the OMP from the LAN side?

A. configure “Number of Paths Advertised per Prefix”
B. configure “ECMP limit”
C. configure “Send Backup Paths”
D. configure “Overlay AS Number”

A

D

32
Q

An engineer is tasked to improve throughput for connection-oriented traffic by decreasing round-trip latency. Which configuration will achieve this goal?

A. turn on “Enable TCP Optimization”
B. turn off “Enable TCP Optimization”
C. turn off “Enhance ECMP Keying”
D. turn on “Enhance ECMP Keying”

A

A

33
Q

Which VPN connects the transport-side WAN Edge interface to the underlay/WAN network?

A. VPN 0
B. VPN 1
C. VPN 511
D. VPN 512

A

A

34
Q

Which port is used for vBond under controller certificates if no alternate port is configured?

A. 12345
B. 12347
C. 12346
D. 12344

A

C

sdwan part 1 (3 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions