Question 1

Which two services are critical for zero touch provisioning on-boarding? (Choose two.)

Accepted Answer

A)  EMAIL 
B)  SNMP 
C)  AAA 
D)  DHCP 
E)  DNS 
A)  EMAIL 
B)  SNMP 
C)  AAA 
D)  DHCP 
E)  DNS

Question 2

Which two prerequisites must be met before the Cloud onRamp for IaaS is initiated on vManage to expand to the AWS cloud? (Choose two.)

Accepted Answer

A)  Attach an OSPF feature template to the AWS cloud Edge router template. 
B)  Attach the "AmazonCreateVPC" and "AmazonProvisionEC2" permission policy to the IAM account. 
C)  Subscribe to the SD-WAN Edge router AMI in the AWS account. 
D)  Attach a device template to the cloud WAN Edge router to be deployed in the AWS. 
E)  Preprovision the transit VPC in the AWS region. 
A)  Attach an OSPF feature template to the AWS cloud Edge router template. 
B)  Attach the "AmazonCreateVPC" and "AmazonProvisionEC2" permission policy to the IAM account. 
C)  Subscribe to the SD-WAN Edge router AMI in the AWS account. 
D)  Attach a device template to the cloud WAN Edge router to be deployed in the AWS. 
E)  Preprovision the transit VPC in the AWS region.

Question 3

Scenario: You have been asked by your customer to help resolve issues in their routed network. Their network engineer has deployed HSRP. On closer inspection HSRP doesn't appear to be operating properly and it appears there are other network problems as well. You are to provide solutions to all the network problems.           Examine the configuration on R4. The routing table shows no entries for 172.16.10.0/24 and 172.16.20.0/24.  Identify which of the following is the issue preventing route entries being installed on R4 routing table?

Accepted Answer

A)  HSRP issue between R4 and R2 
B)  This is an OSPF issue between R4 and R2 
C)  This is a DHCP issue between R4 and R2 
D)  The distribute-list configured on R4 is blocking route entries 
E)  The ACL configured on R4 is blocking inbound traffic on the interface connected to R2 
A)  HSRP issue between R4 and R2 
B)  This is an OSPF issue between R4 and R2 
C)  This is a DHCP issue between R4 and R2 
D)  The distribute-list configured on R4 is blocking route entries 
E)  The ACL configured on R4 is blocking inbound traffic on the interface connected to R2

Question 4

Two sites have one WAN Edge each. Each WAN Edge has two public TLOCs with no restrict configured. There is full reachability between the TLOCs. How many data tunnels are formed on each WAN Edge router?

Accepted Answer

A)  6 
B)  2 
C)  4 
D)  8 
A)  6 
B)  2 
C)  4 
D)  8

Question 5

Which component of the Cisco SD-WAN control plane architecture facilitates the storage of certificates and configurations for network components?

Accepted Answer

A)  vSmart 
B)  WAN Edge 
C)  vManage 
D)  vBond 
A)  vSmart 
B)  WAN Edge 
C)  vManage 
D)  vBond

Question 6

Which component is responsible for routing protocols such as BGP and OSPF in a Cisco SD-WAN solution?

Accepted Answer

A)  vSmart Controller 
B)  WAN Edge Router 
C)  vManage 
D)  vBond Orchestrator 
A)  vSmart Controller 
B)  WAN Edge Router 
C)  vManage 
D)  vBond Orchestrator

Question 7

An organization wants to use the Cisco SD-WAN regionalized service-chaining feature to optimize cost and user experience with applications in the network, which allows branch routers to analyze and steer traffic toward the required network function. Which feature meets this requirement?

Accepted Answer

A)  Cloud onRamp for Colocation 
B)  Cloud onRamp for IaaS 
C)  Cloud Services Platform 
D)  VNF Service Chaining 
A)  Cloud onRamp for Colocation 
B)  Cloud onRamp for IaaS 
C)  Cloud Services Platform 
D)  VNF Service Chaining

Question 8

Which plane assists in the automatic onboarding of the SD-WAN routers into the SD-WAN overlay?

Accepted Answer

A)  data 
B)  orchestration 
C)  management 
D)  control 
A)  data 
B)  orchestration 
C)  management 
D)  control

Question 9

Scenario: You have been asked by your customer to help resolve issues in their routed network. Their network engineer has deployed HSRP. On closer inspection HSRP doesn't appear to be operating properly and it appears there are other network problems as well. You are to provide solutions to all the network problems.           You examine the configuration on R5 and discover that no routes are being learned from R4. Which issue prevents the route entries from being installed in the routing table?

Accepted Answer

A)  HSRP issue between R5 and R4 
B)  There is an OSPF issue between R5and R4 
C)  There is a DHCP issue between R5 and R4 
D)  The distribute-list configured on R5 is blocking route entries 
E)  The ACL configured on R5 is blocking traffic for the subnets advertised from R4. 
A)  HSRP issue between R5 and R4 
B)  There is an OSPF issue between R5and R4 
C)  There is a DHCP issue between R5 and R4 
D)  The distribute-list configured on R5 is blocking route entries 
E)  The ACL configured on R5 is blocking traffic for the subnets advertised from R4.

Question 10

Which document must you use to verify the NEC standards for a Cisco 8510 Wireless Controller?

Accepted Answer

A)  Installation Guide 
B)  Deployment Guide 
C)  Safety Guide 
D)  Hardware Guide 
A)  Installation Guide 
B)  Deployment Guide 
C)  Safety Guide 
D)  Hardware Guide

Question 11

Which software security feature is supported by the Cisco ISR 4451 router?

Accepted Answer

A)  IPsec/GRE cloud proxy 
B)  reverse proxy 
C)  Enterprise Firewall with Application Awareness 
D)  Cloud Express service 
A)  IPsec/GRE cloud proxy 
B)  reverse proxy 
C)  Enterprise Firewall with Application Awareness 
D)  Cloud Express service

Question 12

Refer to the exhibit.   A network engineer must configure a WLAN on a Cisco IOS-XE controller to support corporate devices (using VLAN 30) and BYOD (using VLAN 40) on the same secure SSID. The security team has built an ISE deployment to be used for VLAN assignment and to restrict access based on policy and posture compliance. Given the existing WLAN configuration, which configuration change must be made?

Accepted Answer

A)  remove ip dhcp required remove ip dhcp required 
B)  Add aaa-override Add aaa-override 
C)  Remove nac Remove nac 
D)  Add mac-filtering default mac-filtering default 
A)  remove ip dhcp required remove ip dhcp required 
B)  Add aaa-override Add aaa-override 
C)  Remove nac Remove nac 
D)  Add mac-filtering default mac-filtering default

Question 13

How many mobility peers can a Cisco Catalyst 3850-MC node have?

Accepted Answer

A)  8 
B)  2 
C)  6 
D)  16 
E)  4 
A)  8 
B)  2 
C)  6 
D)  16 
E)  4

Question 14

Access points at branch sites for a company are in FlexConnect mode and perform local switching, but they authenticate to the central RADIUS at headquarters. VPN connections to the headquarters have gone down, but each branch site has a local authentication server. Which three features on the wireless controller can be configured to maintain network operations if this situation reoccurs? (Choose three.)

Accepted Answer

A)  Put APs in FlexConnect Group for Remote Branches. 
B)  Set Branch RADIUS as Primary. 
C)  Put APs in AP Group Per Branch. 
D)  Put APs in FlexConnect Group Per Branch. 
E)  Set Branch RADIUS as Secondary.
F) Set HQ RADIUS as Primary. 
A)  Put APs in FlexConnect Group for Remote Branches. 
B)  Set Branch RADIUS as Primary. 
C)  Put APs in AP Group Per Branch. 
D)  Put APs in FlexConnect Group Per Branch. 
E)  Set Branch RADIUS as Secondary.
F) Set HQ RADIUS as Primary.

Question 15

Which protocol is used to measure loss, latency, jitter, and liveliness of the tunnel between WAN Edge router peers?

Accepted Answer

A)  OMP 
B)  NetFlow 
C)  BFD 
D)  IP SLA 
A)  OMP 
B)  NetFlow 
C)  BFD 
D)  IP SLA

Question 16

Which feature template configures OMP?

Accepted Answer

A)    
B)    
C)    
D)    
A)    
B)    
C)    
D)

Question 17

An engineer is troubleshooting a certificate issue on vEdge. Which command is used to verify the validity of the certificates?

Accepted Answer

A)  show control local-properties 
B)  show control summary 
C)  show certificate installed 
D)  show certificate status 
A)  show control local-properties 
B)  show control summary 
C)  show certificate installed 
D)  show certificate status

Question 18

Which secure connection should be used to access the REST APIs through the Cisco vManage web server?

Accepted Answer

A)  authenticated DTLS 
B)  authenticated HTTPS 
C)  JSON Inspector interface 
D)  HTTP inspector interface 
A)  authenticated DTLS 
B)  authenticated HTTPS 
C)  JSON Inspector interface 
D)  HTTP inspector interface

Question 19

Refer to the exhibit. An engineer is troubleshooting a control connection issue. What does "connect" mean in this show control connections output?

Accepted Answer

A)  Control connection is down 
B)  Control connection is up 
C)  Control connection attempt is in progress 
D)  Control connection is connected 
A)  Control connection is down 
B)  Control connection is up 
C)  Control connection attempt is in progress 
D)  Control connection is connected

Question 20

Which two best practices should be considered when a customer wants to purchase and implement Voice over Wireless for Cisco 7925 IP Phones? (Choose two.)

Accepted Answer

A)  Enable lower data rates for 2.4-GHz data WLAN and higher data rates for phones. 
B)  Use a separate Cisco Wireless Lan Controller. 
C)  Enable 802.1x and Cisco Centralized Key Management for phone authentication. 
D)  Use dedicated Access Points only for Voice over Wireless. 
E)  Set data for 2.4 GHz and voice for 5 GHz using separate SSIDs. 
A)  Enable lower data rates for 2.4-GHz data WLAN and higher data rates for phones. 
B)  Use a separate Cisco Wireless Lan Controller. 
C)  Enable 802.1x and Cisco Centralized Key Management for phone authentication. 
D)  Use dedicated Access Points only for Voice over Wireless. 
E)  Set data for 2.4 GHz and voice for 5 GHz using separate SSIDs.

Exam 9: Implementing Cisco SD-WAN Solutions (ENSDWI)

Which two services are critical for zero touch provisioning on-boarding? (Choose two.)

Which two prerequisites must be met before the Cloud onRamp for IaaS is initiated on vManage to expand to the AWS cloud? (Choose two.)

Two sites have one WAN Edge each. Each WAN Edge has two public TLOCs with no restrict configured. There is full reachability between the TLOCs. How many data tunnels are formed on each WAN Edge router?

Which component of the Cisco SD-WAN control plane architecture facilitates the storage of certificates and configurations for network components?

Which component is responsible for routing protocols such as BGP and OSPF in a Cisco SD-WAN solution?

An organization wants to use the Cisco SD-WAN regionalized service-chaining feature to optimize cost and user experience with applications in the network, which allows branch routers to analyze and steer traffic toward the required network function. Which feature meets this requirement?

Which plane assists in the automatic onboarding of the SD-WAN routers into the SD-WAN overlay?

Which document must you use to verify the NEC standards for a Cisco 8510 Wireless Controller?

Which software security feature is supported by the Cisco ISR 4451 router?

How many mobility peers can a Cisco Catalyst 3850-MC node have?

Which protocol is used to measure loss, latency, jitter, and liveliness of the tunnel between WAN Edge router peers?

Which feature template configures OMP?

An engineer is troubleshooting a certificate issue on vEdge. Which command is used to verify the validity of the certificates?

Which secure connection should be used to access the REST APIs through the Cisco vManage web server?

Refer to the exhibit. An engineer is troubleshooting a control connection issue. What does "connect" mean in this show control connections output?

Which two best practices should be considered when a customer wants to purchase and implement Voice over Wireless for Cisco 7925 IP Phones? (Choose two.)

Supporting Cisco Data Center System Devices (DCTECH)

Cisco Certified Technician Routing & Switching (RSTECH)

Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)

Cisco Certified Network Associate (CCNA)

Managing Industrial Networks with Cisco Networking Technologies (IMINS)

DevNet Associate (DEVASC)

Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR)

Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)

Designing Cisco Enterprise Networks (ENSLD)

Designing Cisco Enterprise Wireless Networks (300-425 ENWLSD)

Implementing Cisco Enterprise Wireless Networks (300-430 ENWLSI)

Automating Cisco Enterprise Solutions (ENAUTO)

Implementing Cisco Service Provider Advanced Routing Solutions (SPRI)

Implementing Cisco Service Provider VPN Services (SPVI)

Designing Cisco Data Center Infrastructure (DCID)

Troubleshooting Cisco Data Center Infrastructure (DCIT)

Implementing Cisco Application Centric Infrastructure (DCACI)

Configuring Cisco MDS 9000 Series Switches (DCSAN)

Implementing Cisco Application Centric Infrastructure - Advanced

Automating Cisco Data Center Solutions (DCAUTO)

Securing Networks with Cisco Firepower (300-710 SNCF)

Implementing and Configuring Cisco Identity Services Engine (300-715 SISE)

Securing Email with Cisco Email Security Appliance (300-720 SESA)

Securing the Web with Cisco Web Security Appliance (300-725 SWSA)

Implementing Secure Solutions with Virtual Private Networks (SVPN 300-730)

Automating Cisco Security Solutions (SAUTO)

Implementing Cisco Collaboration Applications (CLICA)

Implementing Cisco Advanced Call Control and Mobility Services (CLASSM)

Implementing Cisco Collaboration Cloud and Edge Solutions

Implementing Cisco Collaboration Conferencing

Automating Cisco Collaboration Solutions (CLAUTO)

Implementing DevOps Solutions and Practices using Cisco Platforms (DEVOPS)

Developing Solutions Using Cisco IoT and Edge Platforms (DEVIOT)

Developing Applications for Cisco Webex and Webex Devices (DEVWBX)

Performing CyberOps Using Core Security Technologies (CBRCOR)

Implementing Cisco Enterprise Network Core Technologies (ENCOR)

Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR)

Implementing and Operating Cisco Data Center Core Technologies (DCCOR)

Implementing and Operating Cisco Security Core Technologies

Implementing Cisco Collaboration Core Technologies (CLCOR)

Developing Applications using Cisco Core Platforms and APIs (DEVCOR)

CCDE Design Written

Deploying Cisco Unified Contact Center Express

Cisco Meraki Solutions Specialist

Securing Cisco Networks with Sourcefire FireAMP Endpoints

Designing Cisco Unified Contact Center Enterprise (UCCED)

Implementing and Supporting Cisco Unified Contact Center Enterprise (UCCEIS)

Cisco Collaboration SaaS Authorization Exam

Cisco Security Architecture for System Engineers

Adopting The Cisco Business Architecture Approach (DTBAA)

Cisco Customer Success Manager (CSM)

Mastering The Cisco Business Architecture Discipline (DTBAD)

Filters