Exact2Pass
What is the procedure to upgrade all Cisco SD-WAN devices to a recent version?
Where on vManage does an engineer find the details of control node failure?
Drag and drop the devices from the left into order on the right to upgrade the software from version 19 to version 20.
Drag and drop the Cisco SD-WAN components from the left onto their functions on the right.
An engineer is configuring a data policy for packets that must be captured through the policy. Which command accomplishes this task?
An engineer is configuring a centralized policy to influence network route advertisement. Which controller delivers this policy to the fabric?
Refer to the exhibit An engineer must configure a QoS policy between me hub and site A (spoke) over a standard internet circuit where traffic shaping is adjusted automatically based on evaiiabk» bandwidth Which configuration meets the requirement?
Drag and drop the policies from the left onto the correct policy types on the right.
Which destination UDP port is used by WAN Edge router to make a DTLS connection with vBond Orchestrator?
Refer to the exhibit.
An enterprise has hub and spoke topology where it has several VPNs. An engineer must allow users in VPN91 to reach users in VPN92 and VPN10 to reach VPN91 and VPN92. Which configuration meets these requirements?
Which component of the Cisco SD-WAN control plane architecture facilitates the storage of certificates and configurations for network components?
How many concurrent sessions does a vManage REST API have before it invalidates the least recently used session if the maximum concurrent session number is reached?
A network administrator is configuring Qos on a vEdge 5000 router and needs to enable it on the transport side interface. Which policy setting must be selected to accomplish this goal?
WAN Edge routers are configured manually to use UDP port offset to use nondefault offset values when IPsec tunnels are created. What is the offse range?
Drag and drop the steps from the left into the sequence on the right for a WAN Edge router after powering on for zero touch provisioning.
Which storage format Is used when vManage Is deployed as a virtual machine on a KVM hypervisor?
Which encryption algorithm secures binding exchanges Between Cisco TrustSec SXP peers?
Which attributes are configured to uniquely Identify and represent a TLOC route?
Refer to the exhibit.
What binding is created using the tloc-extension command?
Refer to the exhibit Cisco SD-WAN is deployed with controllers hosted in a data center All branches have WAN Edge devices with dual connections to the data center one via Internet and the other using MPLS Three branches out of 20 have issues with their control connections on MPLS circuit The local error refers to Control Connection Failure Which action resolves the issue*?
Drag and drop the actions from the left into the correct sequence on the right to create a data policy to direct traffic to the Internet exit.
What is the maximum number of IPsec that are temporarily created and converged on a new set if IPsec Sas in the pairwise keys process during a simultaneous rekey?
Drag and drop the vManage policy configuration procedures from the left onto the correct definitions on the right.
Company ABC has decided to deploy the controllers using the On-Prem method. How does the administrator upload the WAN Edge list to the vManage?
A)
B)
C)
D)
Which issue triggers the Cisco Umbrella resolver to toward DNS requests to the intelligent proxy?
Which issue triggers the Cisco Umbrella resolver to toward DNS requests to the intelligent proxy?
How many subnets are necessary in Azure VNet for a WAN Edge device to function in the cloud deployment?
A network administrator is creating an OMP feature template from the vManage GUI to be applied to WAN edge routers. Which configuration attribute will avoid the redistribution of the routes back into the OMP from the LAN side?
An engineer must create a QoS policy by creating a class map and assigning it to the LLQ queue on a WAN Edge router Which configuration accomplishes the task?
A)
B)
C)
D)
Refer to the exhibit.
The engineer must assign community tags to 3 of its 74 critical server networks as soon as that are advertised to BGP peers. These server networks must not be advertised outside AS. Which configuration fulfill this requirement?
A)
B)
C)
D)
Refer to the exhibit. The Cisco SD-VYAN is deployed using the default topology. The engineer v/ants to configure a service insertion policy such that all data traffic between Rome to Paris is forwarded through the NGFW located in London. Which configuration fulfills this requirement, assuming that the Sen/ice VPN ID is 1?
A)
B)
C)
D)
Which configuration allows VPN 10 traffic to have direct internet access locally from the WAN Edge device?
A)
B)
C)
D)
A vEdge platform is sending VRRP advertisement messages every 10 seconds. Which value configures the router back to the default timer?
Refer to the exhibit. Which configuration value is used to change the administrative distance of iBGP routes to 20?
Which two virtualized environments are available for a company to install the controllers using the on-premises model? (Choose two )
Refer to the exhibit.
An engineer configured OMP with an overlay-as of 10666. What is the AS-PATH for prefix 104.104.104.104/32 on R100?
Which two advanced security features are available on the Cisco SD-WAN WAN Edge (vEdge) device? (Choose two.)
How is an event monitored and reported for an individual device in the overlay network at site ID:S4300T6E43F36?
Which two products are used to deploy Cisco WAN Edge Router virtual platforms? (Choose two.)
Which SD-WAN component detects path performance information in the organization to report the issue to the service provider at site ID:S4288T5E44F04?
Which two platforms for the Cisco SD-WAN architecture are deployable in a hypervisor on-premises or in IAAS Cloud? (Choose two.)
Refer to the exhibit Which configuration sets up direct Internet access for VPN 1?
A bank is looking for improved customer experience for applications and reduce overhead related to compliance and security. Which key feature or features of the Cisco SD-WAN solution will help the bank to achieve their goals?
In an AWS cloud, which feature provision WAN Edge routers automatically in Cisco SD-WAN?
An enterprise deployed a Cisco SD-WAN solution with hub-and-spoke topology using MPLS as the preferred network over the Internet. A network engineer must implement an application-aware routing policy to allow ICMP traffic to be load-balanced over both the available links. Which configuration meets the requirement?
A)
B)
C)
D)
Refer to the exhibit An engineer is configuring a QoS policy to shape traffic for VLAN 100 on a subinterface Which policy configuration accomplishes the task?
A)
B)
C)
D)
Which on-the-box security feature supported by the Cisco ISR 4451 SD-WAN device and not on vEdge?
How do WAN Edge devices operate when vSmart is inaccessible or fails to be reached by the WAN Edge?
A network administrator is configuring VRRP to avoid a traffic black hole when the transport side of the network is down on the master device. What must be configured to get the fastest failover to standby?
Which IP address must be reachable by a WAN Edge device for the ZIP process to work?
Which two protocols are supported for software image delivery when images are hosted on a remote server? (Choose two.)
An engineer modifies a data policy for DIA in VPN 67. The location has two Internet-bound circuits. Only the web browsing traffic must be admitted for DIA. without further discrimination about which transport to use.
Here is the existing data policy configuration:
Which policy configuration sequence meets the requirements?
An engineer is configuring a shaping rate of 1 Mbps on the WAN link of a WAN Edge router Which configuration accomplishes this task’?
An engineer is creating a policy for VPN1 users. Their scavenger traffic at site 101 must pass through a firewall. Which two match conditions must be selected to enable this policy? (Choose two.)
Refer to the exhibit. An engineer is enabling command line access via MPLS for in-band management. Which command completes the partial SD-WAN interface configuration with the highest degree of security?
An engineer must configure the SD-WAN Edge router to identify DSCP 26 traffic coming from the router's local site and then change the DSCP value to DSCP 18 before sending it over to the SD-WAN fabric. What are the two ways to create the required configuration? (Choose two).
Refer to the exhibit An engineer is getting a CTORGNMMIS error on a controller connection Which action resolves this issue?
Which secure tunnel type should be used to connect one WAN Edge router to other WAN Edge routers?
Which timer specifies information in the cache after all OMP sessions are lost at location S0123T4E56F78?
An engineer must improve video quality by limiting HTTP traffic to the Internet without any failover. Which configuration in vManage achieves this goal?
Which SD-WAN component allows an administrator to manage and store software images for SD-WAN network elements?
Which feature allows reachability to an organization’s internally hosted application for an active DNS security policy on a device?
Refer to the exhibit, which configuration configures IPsec tunnels in active and standby?
How is multicast routing enabled on devices in the Cisco SD-WAN overlay network?
Exhibit.
The SD-WAN network Is configured with a default full-mesh topology. The network engineer wants the Rome WAN Edge to use the MPLS TLOC as the preferred TLOC when ….. Telnet traffic as long as me MPLS Ink has these, characteristics:
Loss: 5%
Latency: 100ms
Jitter: 100 ms
Which configuration must the network engineer use to create a list that that classifies the MPLS link characteristics?
A)
B)
C)
D)
Which Cisco SD-WAN configuration provides the advantages of day-zero deployment and reusable configuration components?
Which protocol is used to measure loss latency, Jitter, and liveliness of the tunnel between WAN Edge router peers?
Which OMP route is selected for equal OMP route preference values on WAN Edge routers?
Refer to the exhibit.
A customer wants to implement primary and secondary Cisco SD-WAN overlay routing for prefixes that are advertised for both data centers. The east data center (TLOC 101.101.101.101) is primary for east sites, and the west data center (TLOC 100.100.100.100) is primary for west sites. Which configuration change achieves this objective?
An administrator must deploy the controllers using the On-Prem method while vManage can access the PnP portal from inside How are the two WAN Edge authorized allowed lists to be made available to vManage? (Choose two)
Refer to the exhibit. vManage logs are available for the past few months. A device name change deployed mistakenly at a critical site. How is the device name change tracked by operation and design teams?
A)
B)
C)
An engineer must use data prefixes to configure centralized data policies using the vManage policy configuration wizard. What is the first step to accomplish this task?
When VPNs are grouped to create destination zone in Zone-Based Firewall, how many zones can a single VPN be part of?
What is the role of the Session Traversal Utilities for NAT server provided by the vBond orchestrator?
Which plane assists in the automatic onboarding of the SD-WAN routers into the SD-WAN overlay?
Refer to the exhibit. An enterprise decides to use the Cisco SD-WAN Cloud onRamp for SaaS feature and utilize H.Q site Biz iNET to reach SaaS Cloud for branch C. currently reaching SaaS Cloud directly. Which role must be assigned to devices at both sites in vManage Cloud Express for this solution to work?
An engineer is troubleshooting a certificate issue on vEdge. Which command is used to verify the validity of the certificates?
Which table is used by the vSmart controller to maintain service routes of the WAN Edge routers in the hub and local branches?
Which device in the SD- WAN solution receives and categorizes event reports, and generates alarms?
Refer to the exhibit.
The Cisco SD-WAN network is configured with a default full-mesh topology. An engineer wants Paris WAN Edge to use the Internet HOC as the preferred TLOC for MSN Messenger and AOL Messenger traffic. Which policy achieves this goal?
A)
B)
C)
D)
Drag and drop the route verification output from show omp tlocs from the left onto the correct explanations on the right.
An enterprise needs DIA on some of its branches with a common location ID: A041:B70C: D78E::18 Which WAN Edge configuration meets the requirement?
A)
B)
C)
D)
A network administrator is configuring a tunnel interface on a branch Cisco IOS XE router to run TLOC extensions. Which configuration will extend a TLOC over a GRE tunnel to another router in the branch?
What is the threshold to generate a warning alert about CPU or memory usage on a WAN Edge router?
The network administrator is configuring a QoS scheduling policy on traffic received from transport side tunnels on WAN Edge 5000 routers at location 406141498 Which command must be configured on these devices?
An engineer must configure a centralized policy on a site in which all HTTP traffic should use the Public Internet circuit if the loss on this circuit is below 10%. otherwise MPLS should be used Which configuration wizard fulfils this requirement?
Refer to the exhibit vManage and vBond have an issue establishing a connection to vSmart Which two actions does the administrator take to fix the issue? (Choose two)
Install the certificate received from the certificate server.
What is the default value for the number of paths advertised per prefix in the OMP feature template?
Which type of lists are used to group related items via an application-aware routing policy under the policy lists command hierarchy on vSmart controllers?
Which controller is used for provisioning and configuration in a Cisco SD-WAN solution?
Which two different states of a WAN Edge certificate are shown on vManage? (Choose two.)
Refer to the exhibit.
Which shaping-rate does the engineer use to shape traffic at 9 Mbps?
Which two actions are necessary to set the Controller Certificate Authorization mode to indicate a root certificate? (Choose two)
Which hardware component is involved in the Cisco SD-WAN authentication process for ISR platforms?
The Cisco SD-WAN engineer is configuring service chaining for a next-generation firewall located at the headquarters. Which configuration creates the service?
A)
B)
C)
D)
Which policy blocks TLOCs from remotes and allows TLOCs from the data center to form hub-and-spoke peering?
A WAN Edge device has several service VPNs with no routing protocol configured in the service VPNs The device must be configured so that all connected routes are visible in OMP for VPN 10 Which configuration meets the requirement?
A)
B)
C)
D)
What is an advantage of using auto mode versus static mode of power allocation when an access point is connected to a PoE switch port?
An engineer configures Rome WAN Edge 10 use MPLS cloud as the preferred link to reach Paris WAN Edge and use biz-internet as a backup. Which policy configuration must be led in the outbound direction toward Rome to accomplish the task?
A)
B)
C)
D)
Refer to the exhibit.
vManage and vSmart have an issue establishing a connection to vBond. Which configuration resolves the issue?
