NEW QUESTION 1
Which IP address must be reachable by a WAN Edge device for the ZIP process to work?

• A. 10.1.1.1
• B. 4.4 4.4
• C. 172.16.1.1
• D. 8.8.8.8

Answer: D

NEW QUESTION 2
Refer to the exhibit.

Which shaping-rate does the engineer use to shape traffic at 9 Mbps?

• A. 9
• B. 9000
• C. 90000
• D. 9000000

Answer: B

Explanation:
https://www.cisco.com/c/en/us/td/docs/routers/sdwan/command/sdwan-cr-book/config-cmd.html#wp421715213

NEW QUESTION 3
What must an engineer conewef when decoying an SD-WAN on-pfemlses architecture based on ESXi hypervisor?

• A. Cisco must provision the backup and snapshots platform lor ihe SD-WAN arctoecture
• B. The managed service provider must provision controllars with their appropriate cerHwcatsi
• C. The IT team a required to provision the SO-WAN controllers and Is responsAte lor backups and disaster recovery implementation
• D. The IT team will be given access by Cisco to a vManage for configuration If templates and policies coeigmalim

Answer: C

NEW QUESTION 4
What is an attribute of TLOC’?

• A. encryption
• B. local preference
• C. tag
• D. service

Answer: C

NEW QUESTION 5
An engineer is configuring the branch office with a 172.16.0.0/16 subnet to use DIA for Internet traffic. All other traffic must flow to the central site or branches using the MPLS circuit Which configuration meets the requirement?
A)

B)

C)

D)

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: C

NEW QUESTION 6
An organization wants to discover, monitor, and track the applications running on the WAN Edge device on the LAN Which configuration achieves this goal?
A)

B)

C)

D)

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: D

NEW QUESTION 7
Which secure tunnel type should be used to connect one WAN Edge router to other WAN Edge routers?

• A. TLS
• B. DTLS
• C. SSL VPN
• D. IPsec

Answer: D

NEW QUESTION 8
Which protocol is used to measure jitter, loss, and latency on SD-WAN overlay tunnels?

• A. QoE
• B. OMP
• C. BGP
• D. BFD

Answer: D

NEW QUESTION 9
Which type of policy must be applied on a WAN Edge application-aware firewall to control traffic between two or more VPNs?

• A. service-insertion policy
• B. data policy
• C. firewall policy
• D. control policy

Answer: C

NEW QUESTION 10
What are two benefits of installing Cisco SD-WAN controllers on cloud-hosted services? (Choose two.)

• A. utilizes well-known cloud services such as Azur
• B. AW
• C. and GCP
• D. accelerates Cisco SD-WAN deployment
• E. allows integration of the WAN Edge devices In the cloud
• F. installs the controllers in two cloud regions in a primary and backup setup
• G. automatically Implements zone-based firewalling on the controllers

Answer: BD

NEW QUESTION 11
Which two actions are necessary to set the Controller Certificate Authorization mode to indicate a root certificate? (Choose two)

• A. Select the Controller Certificate Authorization mode that is recommended by Cisco
• B. Change the organization name of the Cisco SO-WAN fabric.
• C. Upload an SSL certificate to vManape,
• D. Select a private certificate signing authority instead of a public certificate signing authority
• E. Select a validity period from the drop-down menu

Answer: CD

NEW QUESTION 12
A network engineer must configure all branches to communicate with each other through the Service Chain Firewall located at the headquarters site. Which configuration allows the engineer to accomplish this task?
A)

B)

C)

D)

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: B

NEW QUESTION 13
A vEdge platform is sending VRRP advertisement messages every 10 seconds. Which value configures the router back to the default timer?

• A. 2 seconds
• B. 3 seconds
• C. 1 second
• D. 5 seconds

Answer: C

NEW QUESTION 14
A WAN Edge device has several service VPNs with no routing protocol configured in the service VPNs The device must be configured so that all connected routes are visible in OMP for VPN 10 Which configuration meets the requirement?
A)

B)

C)

D)

• A. Option A
• B. Option B
• C. Option B
• D. Option C

Answer: D

NEW QUESTION 15
Refer to exhibit.

An engineer is troubleshooting tear down of control connections even though a valid Certificate Serial Number is entered Which two actions resolve the Issue? (Choose two)

• A. Enter a valid serial number on the controllers for a given device
• B. Remove the duplicate IP in the network.
• C. Enter a valid product ID (model) on the PNP portal
• D. Match the serial number file between the controllers
• E. Restore network reachability for the controller

Answer: CD

Explanation:
https://community.cisco.com/t5/networking-documents/sd-wan-routers-troubleshoot-control-connections/ta-p/38

NEW QUESTION 16
When the VPN membership policy is being controlled at the vSmart controller, which policy disallows VPN 1 at sites 20 and 30?
A)

B)

C)

D)

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: C

NEW QUESTION 17
......