Question 1

How is the scalability of the Manage increased in Cisco SD-WAN Fabric?

Accepted Answer

A)  Increase the bandwidth of the WAN link connected to the vManage 
B)  Increase licensing on the vManage 
C)  Deploy more than one vManage controllers on different physical server 
D)  Deploy multiple vManage controllers in a cluster 
A)  Increase the bandwidth of the WAN link connected to the vManage 
B)  Increase licensing on the vManage 
C)  Deploy more than one vManage controllers on different physical server 
D)  Deploy multiple vManage controllers in a cluster

Question 2

An administrator must configure an ACL for traffic coming in from the service-side VPN on a specific WAN Edge device with circuit ID 123456789. Which policy must be used to configure this ACL?

Accepted Answer

A)  local data policy 
B)  central data policy 
C)  app-aware policy 
D)  central control policy 
A)  local data policy 
B)  central data policy 
C)  app-aware policy 
D)  central control policy

Question 3

Which command verifies a policy that has been pushed to the vEdge router?

Accepted Answer

A)  vSmart# show running-config policy vSmart# show running-config policy 
B)  vEdge# show running-config data policy vEdge# show running-config data policy 
C)  vSmart# show running-config apply policy show running-config apply policy 
D)  vEdge# show policy from-vsmart show policy from-vsmart 
A)  vSmart# show running-config policy vSmart# show running-config policy 
B)  vEdge# show running-config data policy vEdge# show running-config data policy 
C)  vSmart# show running-config apply policy show running-config apply policy 
D)  vEdge# show policy from-vsmart show policy from-vsmart

Question 4

When VPNs are grouped to create destination zone, how many zones can a VPN be part of?

Accepted Answer

A)  two 
B)  four 
C)  one 
D)  three 
A)  two 
B)  four 
C)  one 
D)  three

Question 5

At which layer does the application-aware firewall block applications on a WAN Edge?

Accepted Answer

A)  3 
B)  5 
C)  2 
D)  7 
A)  3 
B)  5 
C)  2 
D)  7

Question 6

Which Cisco SD-WAN WAN Edge platform supports LTE and Wi-Fi?

Accepted Answer

A)  ISR 1101 
B)  ASR 1001 
C)  CSR 1000v 
D)  vEdge 2000 
A)  ISR 1101 
B)  ASR 1001 
C)  CSR 1000v 
D)  vEdge 2000

Question 7

An engineer is deploying centralized wireless solution with a 5508 controller. What is the most AP licenses that can be supported?

Accepted Answer

A)  100 
B)  250 
C)  1000 
D)  500 
A)  100 
B)  250 
C)  1000 
D)  500

Question 8

Which value is verified in the certificates to confirm the identity of the physical WAN Edge device?

Accepted Answer

A)  Serial Number 
B)  OTP 
C)  System-IP 
D)  Chassis-ID 
A)  Serial Number 
B)  OTP 
C)  System-IP 
D)  Chassis-ID

Question 9

A large retail organization decided to move some of the branch applications to the AWS cloud. How does the network architect extend the in-house Cisco SD-WAN branch to cloud network into AWS?

Accepted Answer

A)  Create virtual instances of vSmart Cloud through the AWS online software store 
B)  Create GRE tunnels to AWS from each branch over the Internet 
C)  Install the AWS Cloud Router in the main data center and provide the connectivity from each branch 
D)  Create virtual WAN Edge devices Cloud through the AWS online software store 
A)  Create virtual instances of vSmart Cloud through the AWS online software store 
B)  Create GRE tunnels to AWS from each branch over the Internet 
C)  Install the AWS Cloud Router in the main data center and provide the connectivity from each branch 
D)  Create virtual WAN Edge devices Cloud through the AWS online software store

Question 10

A voice packet requires a latency of 50 msec. Which policy is configured to ensure that a voice packet is always sent on the link with less than a 50 msec delay?

Accepted Answer

A)  localized data 
B)  centralized control 
C)  localized control 
D)  centralized data 
A)  localized data 
B)  centralized control 
C)  localized control 
D)  centralized data

Question 11

Refer to the exhibit. The control connection is failing. Which action resolves the issue?

Accepted Answer

A)  Validate the certificates authenticity on vSmart 
B)  Restore the reachability to the vSmart 
C)  Import vSmart in vManager 
D)  Upload the WAN Edge list on vManage 
A)  Validate the certificates authenticity on vSmart 
B)  Restore the reachability to the vSmart 
C)  Import vSmart in vManager 
D)  Upload the WAN Edge list on vManage

Question 12

Which two requirements must be met for DNS inspection when integrating with Cisco Umbrella? (Choose two.)

Accepted Answer

A)  Attach security policy to the device template. 
B)  Create and attach a System feature template with the Umbrella registration credentials. 
C)  Register and configure the vManage public IP and serial number in the Umbrella portal. 
D)  Upload the WAN Edge serial allow list to the Umbrella portal. 
E)  Configure the Umbrella token on the vManage. 
A)  Attach security policy to the device template. 
B)  Create and attach a System feature template with the Umbrella registration credentials. 
C)  Register and configure the vManage public IP and serial number in the Umbrella portal. 
D)  Upload the WAN Edge serial allow list to the Umbrella portal. 
E)  Configure the Umbrella token on the vManage.

Question 13

Which two products are used to deploy Cisco WAN Edge Router virtual platforms? (Choose two.)

Accepted Answer

A)  Sun Enterprise M4000 Server running Sun Solaris 
B)  Sun SPARC Node running AIX 
C)  Cisco UCS 
D)  HP ProLiant DL380 Generation 10 running HP-UX 
E)  Cisco ENCS 5000 Series 
A)  Sun Enterprise M4000 Server running Sun Solaris 
B)  Sun SPARC Node running AIX 
C)  Cisco UCS 
D)  HP ProLiant DL380 Generation 10 running HP-UX 
E)  Cisco ENCS 5000 Series

Question 14

What are the two advantages of deploying cloud-based Cisco SD-WAN controllers? (Choose two.)

Accepted Answer

A)  centralized control and data plane 
B)  infrastructure as a service 
C)  management of SLA 
D)  centralized raid storage of data 
E)  distributed authentication policies 
A)  centralized control and data plane 
B)  infrastructure as a service 
C)  management of SLA 
D)  centralized raid storage of data 
E)  distributed authentication policies

Question 15

Refer to the exhibit. An administrator is configuring a policy in addition to an existing hub-and-spoke policy for two sites that should directly communicate with each other. How is this policy configured?

Accepted Answer

A)  mesh 
B)  custom control (route and TLO
C)  
C)  hub-and-spoke 
D)  import existing topology 
A)  mesh 
B)  custom control (route and TLO
C)  
C)  hub-and-spoke 
D)  import existing topology

Question 16

What is a benefit of the application-aware firewall?

Accepted Answer

A)  It blocks traffic by MTU of the packet 
B)  It blocks encrypted traffic 
C)  It blocks traffic by application 
D)  It blocks traffic by MAC address 
A)  It blocks traffic by MTU of the packet 
B)  It blocks encrypted traffic 
C)  It blocks traffic by application 
D)  It blocks traffic by MAC address

Question 17

When software is upgraded on a vManage NMS, which two image-adding options store images in a local vManage software repository? (Choose two.)

Accepted Answer

A)  To be downloaded over an ICMP connection 
B)  To be downloaded over a SNMP connection 
C)  To be downloaded over a control plane connection 
D)  To be downloaded over an out-of-band connection 
E)  To be downloaded over a SMTP connection 
A)  To be downloaded over an ICMP connection 
B)  To be downloaded over a SNMP connection 
C)  To be downloaded over a control plane connection 
D)  To be downloaded over an out-of-band connection 
E)  To be downloaded over a SMTP connection

Question 18

Which two products that perform lifecycle management for virtual instances are supported by WAN Edge cloud routers? (Choose two.)

Accepted Answer

A)  AWS 
B)  Azure 
C)  VMware vCenter 
D)  OpenStack 
E)  IBM Cloud 
A)  AWS 
B)  Azure 
C)  VMware vCenter 
D)  OpenStack 
E)  IBM Cloud

Question 19

An engineer wants to track tunnel characteristics within a SLA-based policy for convergence. Which policy configuration will achieve this goal?

Accepted Answer

A)  app-route policy 
B)  VPN membership policy 
C)  control policy 
D)  data policy 
A)  app-route policy 
B)  VPN membership policy 
C)  control policy 
D)  data policy

Question 20

An engineer is configuring a centralized policy to influence network route advertisement. Which controller delivers this policy to the fabric?

Accepted Answer

A)  vSmart 
B)  vBond 
C)  vManage 
D)  WAN Edge 
A)  vSmart 
B)  vBond 
C)  vManage 
D)  WAN Edge

Exam 9: Implementing Cisco SD-WAN Solutions (ENSDWI)

How is the scalability of the Manage increased in Cisco SD-WAN Fabric?

An administrator must configure an ACL for traffic coming in from the service-side VPN on a specific WAN Edge device with circuit ID 123456789. Which policy must be used to configure this ACL?

Which command verifies a policy that has been pushed to the vEdge router?

When VPNs are grouped to create destination zone, how many zones can a VPN be part of?

At which layer does the application-aware firewall block applications on a WAN Edge?

Which Cisco SD-WAN WAN Edge platform supports LTE and Wi-Fi?

An engineer is deploying centralized wireless solution with a 5508 controller. What is the most AP licenses that can be supported?

Which value is verified in the certificates to confirm the identity of the physical WAN Edge device?

A large retail organization decided to move some of the branch applications to the AWS cloud. How does the network architect extend the in-house Cisco SD-WAN branch to cloud network into AWS?

A voice packet requires a latency of 50 msec. Which policy is configured to ensure that a voice packet is always sent on the link with less than a 50 msec delay?

Refer to the exhibit. The control connection is failing. Which action resolves the issue?

Which two requirements must be met for DNS inspection when integrating with Cisco Umbrella? (Choose two.)

Which two products are used to deploy Cisco WAN Edge Router virtual platforms? (Choose two.)

What are the two advantages of deploying cloud-based Cisco SD-WAN controllers? (Choose two.)

Refer to the exhibit. An administrator is configuring a policy in addition to an existing hub-and-spoke policy for two sites that should directly communicate with each other. How is this policy configured?

What is a benefit of the application-aware firewall?

When software is upgraded on a vManage NMS, which two image-adding options store images in a local vManage software repository? (Choose two.)

Which two products that perform lifecycle management for virtual instances are supported by WAN Edge cloud routers? (Choose two.)

An engineer wants to track tunnel characteristics within a SLA-based policy for convergence. Which policy configuration will achieve this goal?

An engineer is configuring a centralized policy to influence network route advertisement. Which controller delivers this policy to the fabric?

Supporting Cisco Data Center System Devices (DCTECH)

Cisco Certified Technician Routing & Switching (RSTECH)

Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)

Cisco Certified Network Associate (CCNA)

Managing Industrial Networks with Cisco Networking Technologies (IMINS)

DevNet Associate (DEVASC)

Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR)

Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)

Designing Cisco Enterprise Networks (ENSLD)

Designing Cisco Enterprise Wireless Networks (300-425 ENWLSD)

Implementing Cisco Enterprise Wireless Networks (300-430 ENWLSI)

Automating Cisco Enterprise Solutions (ENAUTO)

Implementing Cisco Service Provider Advanced Routing Solutions (SPRI)

Implementing Cisco Service Provider VPN Services (SPVI)

Designing Cisco Data Center Infrastructure (DCID)

Troubleshooting Cisco Data Center Infrastructure (DCIT)

Implementing Cisco Application Centric Infrastructure (DCACI)

Configuring Cisco MDS 9000 Series Switches (DCSAN)

Implementing Cisco Application Centric Infrastructure - Advanced

Automating Cisco Data Center Solutions (DCAUTO)

Securing Networks with Cisco Firepower (300-710 SNCF)

Implementing and Configuring Cisco Identity Services Engine (300-715 SISE)

Securing Email with Cisco Email Security Appliance (300-720 SESA)

Securing the Web with Cisco Web Security Appliance (300-725 SWSA)

Implementing Secure Solutions with Virtual Private Networks (SVPN 300-730)

Automating Cisco Security Solutions (SAUTO)

Implementing Cisco Collaboration Applications (CLICA)

Implementing Cisco Advanced Call Control and Mobility Services (CLASSM)

Implementing Cisco Collaboration Cloud and Edge Solutions

Implementing Cisco Collaboration Conferencing

Automating Cisco Collaboration Solutions (CLAUTO)

Implementing DevOps Solutions and Practices using Cisco Platforms (DEVOPS)

Developing Solutions Using Cisco IoT and Edge Platforms (DEVIOT)

Developing Applications for Cisco Webex and Webex Devices (DEVWBX)

Performing CyberOps Using Core Security Technologies (CBRCOR)

Implementing Cisco Enterprise Network Core Technologies (ENCOR)

Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR)

Implementing and Operating Cisco Data Center Core Technologies (DCCOR)

Implementing and Operating Cisco Security Core Technologies

Implementing Cisco Collaboration Core Technologies (CLCOR)

Developing Applications using Cisco Core Platforms and APIs (DEVCOR)

CCDE Design Written

Deploying Cisco Unified Contact Center Express

Cisco Meraki Solutions Specialist

Securing Cisco Networks with Sourcefire FireAMP Endpoints

Designing Cisco Unified Contact Center Enterprise (UCCED)

Implementing and Supporting Cisco Unified Contact Center Enterprise (UCCEIS)

Cisco Collaboration SaaS Authorization Exam

Cisco Security Architecture for System Engineers

Adopting The Cisco Business Architecture Approach (DTBAA)

Cisco Customer Success Manager (CSM)

Mastering The Cisco Business Architecture Discipline (DTBAD)

Filters