Question 1

Which on-the-box security feature is supported by the Cisco ISR 4451 SD-WAN device and not on vEdge?

Accepted Answer

A)  IPsec/GRE cloud proxy 
B)  reverse proxy 
C)  Enterprise Firewall with Application Awareness 
D)  Cloud Express service 
A)  IPsec/GRE cloud proxy 
B)  reverse proxy 
C)  Enterprise Firewall with Application Awareness 
D)  Cloud Express service C

Question 2

When VPNs are grouped to create destination zone in Zone-Based Firewall, how many zones can a single VPN be part of?

Accepted Answer

A)  two 
B)  four 
C)  one 
D)  three 
A)  two 
B)  four 
C)  one 
D)  three C

Question 3

An engineer is configuring a new mobility anchor for a WLAN on the CLI with the config wlan mobility anchor add 3 10.10.10.10 command, but the command is failing. Which two conditions must be met to be able to enter this command? (Choose two.)

Accepted Answer

A)  The anchor controller IP address must be within the management interface subnet. 
B)  The anchor controller must be in the same mobility group. 
C)  The WLAN ID must be enabled. 
D)  The mobility group keepalive must be configured. 
E)  The indicated WLAN ID must be present on the controller. 
A)  The anchor controller IP address must be within the management interface subnet. 
B)  The anchor controller must be in the same mobility group. 
C)  The WLAN ID must be enabled. 
D)  The mobility group keepalive must be configured. 
E)  The indicated WLAN ID must be present on the controller. A,B

Question 4

Which combination of platforms is managed by vManage?

Accepted Answer

A)  ISR4351, ASR1002HX, vEdge2000, vEdge Cloud 
B)  ISR4321, ASR1001, Nexus, ENCS 
C)  ISR4321, ASR1001, ENCS, ISRv 
D)  ISR4351, ASR1009, vEdge2000, CSR1000v 
A)  ISR4351, ASR1002HX, vEdge2000, vEdge Cloud 
B)  ISR4321, ASR1001, Nexus, ENCS 
C)  ISR4321, ASR1001, ENCS, ISRv 
D)  ISR4351, ASR1009, vEdge2000, CSR1000v

Question 5

Which policy is configured to ensure that a voice packet is always sent on the link with less than a 50 msec delay?

Accepted Answer

A)  localized data 
B)  centralized control 
C)  localized control 
D)  centralized data 
A)  localized data 
B)  centralized control 
C)  localized control 
D)  centralized data

Question 6

Which two WAN Edge devices should be deployed in a cloud? (Choose two.)

Accepted Answer

A)  ASR1000v 
B)  vEdge 100wm 
C)  CSR1000v 
D)  vEdge cloud 
E)  vEdge 5000v 
A)  ASR1000v 
B)  vEdge 100wm 
C)  CSR1000v 
D)  vEdge cloud 
E)  vEdge 5000v

Question 7

Which port is used for vBond under controller certificates if no alternate port is configured?

Accepted Answer

A)  12344 
B)  12345 
C)  12347 
D)  12346 
A)  12344 
B)  12345 
C)  12347 
D)  12346

Question 8

Refer to the exhibit. An engineer is troubleshooting an issue where vManage and vSmart have a problem establishing a connection to vBond. Which action fixes the issue?

Accepted Answer

A)  Remove the encapsulation ipsec command under the tunnel interface of vBond Remove the encapsulation ipsec command under the tunnel interface of vBond 
B)  Reconfigure the vbond command on the vBond as vbond 150.5.1.3 local Reconfigure the vbond command on the vBond as vbond 150.5.1.3 local 
C)  Configure the tunnel interface on all three controllers with a color of transport 
D)  Configure encapsulation as IPsec under the tunnel interface of vManage and vSmart 
A)  Remove the encapsulation ipsec command under the tunnel interface of vBond Remove the encapsulation ipsec command under the tunnel interface of vBond 
B)  Reconfigure the vbond command on the vBond as vbond 150.5.1.3 local Reconfigure the vbond command on the vBond as vbond 150.5.1.3 local 
C)  Configure the tunnel interface on all three controllers with a color of transport 
D)  Configure encapsulation as IPsec under the tunnel interface of vManage and vSmart

Question 9

Refer to the exhibit. Which two statements about Cisco Prime Infrastructure are true? (Choose two.)

Accepted Answer

A)  Controllers must be synchronized with Cisco Prime Infrastructure for planning mode to work. 
B)  It shows the map editor feature in Cisco Prime Infrastructure. 
C)  It presents the recommended number of APs for the selected coverage area based on the selections made. 
D)  Planning mode requires a special license in Cisco Prime Infrastructure. 
E)  It shows the planning mode feature in Cisco Prime Infrastructure. 
A)  Controllers must be synchronized with Cisco Prime Infrastructure for planning mode to work. 
B)  It shows the map editor feature in Cisco Prime Infrastructure. 
C)  It presents the recommended number of APs for the selected coverage area based on the selections made. 
D)  Planning mode requires a special license in Cisco Prime Infrastructure. 
E)  It shows the planning mode feature in Cisco Prime Infrastructure.

Question 10

What is a benefit of the application-aware firewall feature in the Cisco SD-WAN solution?

Accepted Answer

A)  application visibility 
B)  control policy enforcement 
C)  application monitoring 
D)  application malware protection 
A)  application visibility 
B)  control policy enforcement 
C)  application monitoring 
D)  application malware protection

Question 11

When a WAN Edge device joins the Cisco SD-WAN overlay, which Cisco SD-WAN component orchestrates the connection between the WAN Edge device and a vSmart controller?

Accepted Answer

A)  vManage 
B)  vBond 
C)  OMP 
D)  APIC-EM 
A)  vManage 
B)  vBond 
C)  OMP 
D)  APIC-EM

Question 12

Where on vManage does an engineer find the details of control node failure?

Accepted Answer

A)  Alarms 
B)  Events 
C)  Audit log 
D)  Network 
A)  Alarms 
B)  Events 
C)  Audit log 
D)  Network

Question 13

Refer to the exhibit. A network administrator is configuring OMP in vManage to advertise all the paths for the same prefix from a site that has two WAN Edge devices. Each WAN Edge device is connected to three ISPs and two private MPLS transports. What is the minimum value for "Number of Paths advertised per Prefix" that should be configured?

Accepted Answer

A)  2 
B)  3 
C)  5 
D)  10 
A)  2 
B)  3 
C)  5 
D)  10

Question 14

If Smart Account Sync is not used, which Cisco SD-WAN component is used to upload an authorized serial number file?

Accepted Answer

A)  WAN Edge 
B)  vSmart 
C)  vBond 
D)  vManage 
A)  WAN Edge 
B)  vSmart 
C)  vBond 
D)  vManage

Question 15

Refer to the exhibit. Which QoS treatment results from this configuration after the access list acl-guest is applied inbound on the vpn1 interface?

Accepted Answer

A)  A TCP packet sourcing from 172.16.10.1 and destined to 172.16.20.1 is dropped 
B)  A UDP packet sourcing from 172.16.20.1 and destined to 172.16.10.1 is accepted 
C)  A UDP packet sourcing from 172.16.10.1 and destined to 172.16.20.1 is dropped 
D)  A TCP packet sourcing from 172.16.20.1 and destined to 172.16.10.1 is accepted 
A)  A TCP packet sourcing from 172.16.10.1 and destined to 172.16.20.1 is dropped 
B)  A UDP packet sourcing from 172.16.20.1 and destined to 172.16.10.1 is accepted 
C)  A UDP packet sourcing from 172.16.10.1 and destined to 172.16.20.1 is dropped 
D)  A TCP packet sourcing from 172.16.20.1 and destined to 172.16.10.1 is accepted

Question 16

An engineer wants to change the configuration of the certificate authorization mode from manual to automated. Which GUI selection will accomplish this?

Accepted Answer

A)  Maintenance > Security 
B)  Configuration > Certificates 
C)  Administration > Settings 
D)  Tools > Operational Commands 
A)  Maintenance > Security 
B)  Configuration > Certificates 
C)  Administration > Settings 
D)  Tools > Operational Commands

Question 17

A customer must upgrade the Cisco SD-WAN devices and controllers from version 19.2 to version 20.3. The devices include WAN Edge Cloud, vManage, vSmart, and vBond. Which types of image files are needed for this upgrade?

Accepted Answer

A)  one file for vManage and one file for all other devices with extension .bin 
B)  one file for vManage, one for vSmart, and one for vBond + WAN Edge Cloud with extension .bin 
C)  one file for vManage and one file for all other devices with extension tar.gz 
D)  one file for vManage, one for vSmart, and one for vBond + WAN Edge Cloud with extension tar.gz 
A)  one file for vManage and one file for all other devices with extension .bin 
B)  one file for vManage, one for vSmart, and one for vBond + WAN Edge Cloud with extension .bin 
C)  one file for vManage and one file for all other devices with extension tar.gz 
D)  one file for vManage, one for vSmart, and one for vBond + WAN Edge Cloud with extension tar.gz

Question 18

An engineer is tasked to improve throughput for connection-oriented traffic by decreasing round-trip latency. Which configuration will achieve this goal?

Accepted Answer

A)  turn off "Enable TCP Optimization" 
B)  turn on "Enhance ECMP Keying" 
C)  turn on "Enable TCP Optimization" 
D)  turn off "Enhance ECMP Keying" 
A)  turn off "Enable TCP Optimization" 
B)  turn on "Enhance ECMP Keying" 
C)  turn on "Enable TCP Optimization" 
D)  turn off "Enhance ECMP Keying"

Question 19

Refer to the exhibit. An engineer is troubleshooting tear down of control connections even though a valid CertificateSerialNumber is entered. Which two actions resolve the issue? (Choose two.)

Accepted Answer

A)  Enter a valid product ID (model) on the PNP portal 
B)  Match the serial number file between the controllers 
C)  Remove the duplicate IP in the network 
D)  Restore network reachability for the controller 
E)  Enter a valid serial number on the controllers for a given device 
A)  Enter a valid product ID (model) on the PNP portal 
B)  Match the serial number file between the controllers 
C)  Remove the duplicate IP in the network 
D)  Restore network reachability for the controller 
E)  Enter a valid serial number on the controllers for a given device

Question 20

Which two options describe best practices that must be completed after a wireless installation is finished? (Choose two.)

Accepted Answer

A)  Make sure that there are no spaces between the devices on the rack that the Wireless Lan Controller is installed. 
B)  Consult with the customer to ensure that the IT staff has a complete set of design and installation documents. 
C)  Make sure the customer is aware that they should consider purchasing a support contract immediately after the installation is complete. 
D)  Spend time with the customer to show them the controller GUI and inform them how they can reach the Cisco TAC if they have any problems. 
E)  Test all the customer's wireless devices and applications to ensure they are working properly. 
A)  Make sure that there are no spaces between the devices on the rack that the Wireless Lan Controller is installed. 
B)  Consult with the customer to ensure that the IT staff has a complete set of design and installation documents. 
C)  Make sure the customer is aware that they should consider purchasing a support contract immediately after the installation is complete. 
D)  Spend time with the customer to show them the controller GUI and inform them how they can reach the Cisco TAC if they have any problems. 
E)  Test all the customer's wireless devices and applications to ensure they are working properly.

Exam 9: Implementing Cisco SD-WAN Solutions (ENSDWI)

Which on-the-box security feature is supported by the Cisco ISR 4451 SD-WAN device and not on vEdge?

When VPNs are grouped to create destination zone in Zone-Based Firewall, how many zones can a single VPN be part of?

An engineer is configuring a new mobility anchor for a WLAN on the CLI with the config wlan mobility anchor add 3 10.10.10.10 command, but the command is failing. Which two conditions must be met to be able to enter this command? (Choose two.)

Which combination of platforms is managed by vManage?

Which policy is configured to ensure that a voice packet is always sent on the link with less than a 50 msec delay?

Which two WAN Edge devices should be deployed in a cloud? (Choose two.)

Which port is used for vBond under controller certificates if no alternate port is configured?

Refer to the exhibit. An engineer is troubleshooting an issue where vManage and vSmart have a problem establishing a connection to vBond. Which action fixes the issue?

Refer to the exhibit. Which two statements about Cisco Prime Infrastructure are true? (Choose two.)

What is a benefit of the application-aware firewall feature in the Cisco SD-WAN solution?

When a WAN Edge device joins the Cisco SD-WAN overlay, which Cisco SD-WAN component orchestrates the connection between the WAN Edge device and a vSmart controller?

Where on vManage does an engineer find the details of control node failure?

If Smart Account Sync is not used, which Cisco SD-WAN component is used to upload an authorized serial number file?

Refer to the exhibit. Which QoS treatment results from this configuration after the access list acl-guest is applied inbound on the vpn1 interface?

An engineer wants to change the configuration of the certificate authorization mode from manual to automated. Which GUI selection will accomplish this?

A customer must upgrade the Cisco SD-WAN devices and controllers from version 19.2 to version 20.3. The devices include WAN Edge Cloud, vManage, vSmart, and vBond. Which types of image files are needed for this upgrade?

An engineer is tasked to improve throughput for connection-oriented traffic by decreasing round-trip latency. Which configuration will achieve this goal?

Refer to the exhibit. An engineer is troubleshooting tear down of control connections even though a valid CertificateSerialNumber is entered. Which two actions resolve the issue? (Choose two.)

Which two options describe best practices that must be completed after a wireless installation is finished? (Choose two.)

Supporting Cisco Data Center System Devices (DCTECH)

Cisco Certified Technician Routing & Switching (RSTECH)

Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)

Cisco Certified Network Associate (CCNA)

Managing Industrial Networks with Cisco Networking Technologies (IMINS)

DevNet Associate (DEVASC)

Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR)

Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)

Designing Cisco Enterprise Networks (ENSLD)

Designing Cisco Enterprise Wireless Networks (300-425 ENWLSD)

Implementing Cisco Enterprise Wireless Networks (300-430 ENWLSI)

Automating Cisco Enterprise Solutions (ENAUTO)

Implementing Cisco Service Provider Advanced Routing Solutions (SPRI)

Implementing Cisco Service Provider VPN Services (SPVI)

Designing Cisco Data Center Infrastructure (DCID)

Troubleshooting Cisco Data Center Infrastructure (DCIT)

Implementing Cisco Application Centric Infrastructure (DCACI)

Configuring Cisco MDS 9000 Series Switches (DCSAN)

Implementing Cisco Application Centric Infrastructure - Advanced

Automating Cisco Data Center Solutions (DCAUTO)

Securing Networks with Cisco Firepower (300-710 SNCF)

Implementing and Configuring Cisco Identity Services Engine (300-715 SISE)

Securing Email with Cisco Email Security Appliance (300-720 SESA)

Securing the Web with Cisco Web Security Appliance (300-725 SWSA)

Implementing Secure Solutions with Virtual Private Networks (SVPN 300-730)

Automating Cisco Security Solutions (SAUTO)

Implementing Cisco Collaboration Applications (CLICA)

Implementing Cisco Advanced Call Control and Mobility Services (CLASSM)

Implementing Cisco Collaboration Cloud and Edge Solutions

Implementing Cisco Collaboration Conferencing

Automating Cisco Collaboration Solutions (CLAUTO)

Implementing DevOps Solutions and Practices using Cisco Platforms (DEVOPS)

Developing Solutions Using Cisco IoT and Edge Platforms (DEVIOT)

Developing Applications for Cisco Webex and Webex Devices (DEVWBX)

Performing CyberOps Using Core Security Technologies (CBRCOR)

Implementing Cisco Enterprise Network Core Technologies (ENCOR)

Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR)

Implementing and Operating Cisco Data Center Core Technologies (DCCOR)

Implementing and Operating Cisco Security Core Technologies

Implementing Cisco Collaboration Core Technologies (CLCOR)

Developing Applications using Cisco Core Platforms and APIs (DEVCOR)

CCDE Design Written

Deploying Cisco Unified Contact Center Express

Cisco Meraki Solutions Specialist

Securing Cisco Networks with Sourcefire FireAMP Endpoints

Designing Cisco Unified Contact Center Enterprise (UCCED)

Implementing and Supporting Cisco Unified Contact Center Enterprise (UCCEIS)

Cisco Collaboration SaaS Authorization Exam

Cisco Security Architecture for System Engineers

Adopting The Cisco Business Architecture Approach (DTBAA)

Cisco Customer Success Manager (CSM)

Mastering The Cisco Business Architecture Discipline (DTBAD)

Filters