NEW QUESTION 1
Which protocol is configured on tunnels by default to detect loss, latency, jitter, and path failures in Cisco SD-WAN?

• A. TLS
• B. BFD
• C. OMP
• D. BGP

Answer: B

NEW QUESTION 2
Which configuration component is used in a firewall security policy?

• A. numbered sequences of match-action pairs
• B. application match parameters
• C. URL filtering policy
• D. intrusion prevention policy

Answer: A

NEW QUESTION 3
An engineer is configuring a data policy for IPv4 prefixes for a single WAN Edge device on a site with
multiple WAN Edge devices How is this policy added using the policy configuration wizard?

• A. ln vManage NMS, select the configure policies screen, select the localized policy tab and click add policy
• B. In vSmart controller, select the configure policies screen, select the localized policy ta
• C. and click add policy
• D. In vManage NM
• E. select the configure policies screen select the centralized policy tab and click add policy
• F. In vBond orchestrato
• G. select the configure policies screen, select the localized policy ta
• H. and click add policy

Answer: A

NEW QUESTION 4
Which pathway under Monitor > Network > Select Device is used to verify service insertion configuration?

• A. Real Time
• B. System Status
• C. ACL Logs
• D. Events

Answer: A

Explanation:

https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/policies/vedge-20-x/policies-book/service-c

NEW QUESTION 5
Drag and drop the policies from the left onto the correct policy types on the right.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 6
An engineer creates a data policy to prevent communication from the 172.20.21.0/24 network to the 172.20.41.0/24 network. Which configuration accomplishes this task?

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: B

NEW QUESTION 7
REST applications communicate over HTTP or HTTPS to make calls between network devices. Which two HTTPS standard methods are included? (Choose two.)

• A. Array
• B. DELETE
• C. POST
• D. Scalar
• E. Object

Answer: BC

NEW QUESTION 8
Which protocol runs between the vSmart controllers and WAN Edge routers when the vSmart controller acts like a route reflector?

• A. OMP outside the DTLS/TLS control connection
• B. BGP inside the DTLS/TLS
• C. IPsec inside the DTLS/TLS control connection
• D. OMP inside the DTLS/TLS control connection

Answer: D

NEW QUESTION 9
Which actions must be taken to allow certain departments to require firewall protection when interacting with data center network without including other departments? (Choose two.)

• A. Use classification policing and marking
• B. Apply data policies at vEdge.
• C. Deploy a service-chained firewall service per VPN
• D. The regional hub advertises the availability of the firewall service
• E. Advertise lo vSmart controllers

Answer: CD

NEW QUESTION 10
Which policy is configured to ensure that a voice packet is always sent on the link with less than a 50 msec delay?

• A. localized data policy
• B. localized control policy
• C. centralized data policy
• D. centralized control policy

Answer: C

NEW QUESTION 11
Which type of certificate is installed on vManage for a user to access vManage via a web browser?

• A. SD-AVC Certificate
• B. WAN Edge Certificate
• C. Controller Certificate
• D. Web Server Certificate

Answer: D

NEW QUESTION 12
Which two services are critical for zero touch provisioning on-boarding? (Choose two)

• A. SNMP
• B. DNS
• C. DHCP
• D. AAA
• E. EMAIL

Answer: BC

NEW QUESTION 13
Refer to the exhibit.

The control connection is failing. Which action resolves the issue?

• A. import vSmart in vManager
• B. Validate the certificates authenticity on vSmart
• C. Upload the WAN Edge list on vManage.
• D. Restore the reachability to the vSmart

Answer: D

Explanation:
https://www.cisco.com/c/en/us/support/docs/routers/sd-wan/214509-troubleshoot-control-connections.html

NEW QUESTION 14
Which two metrics must a cloud Edge router use to pick the optimal path for a SaaS application reachable via a gateway site? (Choose two.)

• A. HTTP loss and latency metrics to the SaaS application
• B. ICMP loss and latency metrics to the SaaS application
• C. BFD loss and latency metrics to the gateway site
• D. BFD loss and latency metrics to the SaaS application
• E. HTTP loss and latency metrics to the gateway site

Answer: AC

Explanation:
-The gateway vEdge uses HTTP to obtain SaaS application performance information - The client vEdge will use BFD over the IPSec tunnel to the gateway site to obtain client>gateway path performance information
https://www.cisco.com/c/dam/en/us/td/docs/solutions/CVD/SDWAN/CVD-SD-WAN-Cloud-onRamp-for-SaaS

NEW QUESTION 15
How is the software managed in Cisco SD-WAN?

• A. Software images must be uploaded to vManage through HTTP or FTP
• B. Software downgrades are unsupported for vManage
• C. Software images must be transferred through VPN 512 or VPN 0 of vManage
• D. Software upgrade operation in the group must include vManag
• E. vBond, and vSmart.

Answer: A

NEW QUESTION 16
Which policy blocks TLOCs from remotes and allows TLOCs from the data center to form hub-and-spoke peering?

• A. localized control policy
• B. localized data policy
• C. centralized data policy
• D. centralized control policy

Answer: C

Explanation:

NEW QUESTION 17
......