Question 1

Which command verifies a policy that has been pushed to the vEdge router?
A) vSmart# show running-config policy vSmart# show running-config policy
B) vEdge# show running-config data policy vEdge# show running-config data policy
C) vSmart# show running-config apply policy show running-config apply policy
D) vEdge# show policy from-vsmart show policy from-vsmart

Accepted Answer

The command "vEdge# show policy from-vsmart" is used to verify the policy that has been pushed to the vEdge router from the vSmart controller.

Question 2

Which type of route advertisement of OMP can be verified?
A) Origin, TLOC, and VPN
B) Origin, TLOC, and service
C) OMP, VPN, and origin
D) OMP, TLOC, and service

Accepted Answer

The answer of Which type of route advertisement of OMP...

Question 3

Refer to the exhibit. Which binding is created using the tloc-extension command?
A) between ge 0/2.101 of port-type transport and ge 0/0 of port-type service
B) between ge 0/2.101 of port-type service and ge 0/0 of port-type service
C) between ge 0/2.101 of port-type service and ge 0/0 of port-type transport
D) between ge 0/2.101 of port-type transport and ge 0/0 of port-type transport

Accepted Answer

The answer of  Refer to the exhibit. Which binding...

Question 4

Which command displays BFD session summary information per TLOC on vEdge routers?
A) show bfd tloc-summary-list
B) show bfd history
C) show bfd summary
D) show bfd sessions

Accepted Answer

The command "show bfd tloc-summary-list" is used to display BFD session summary information per TLOC on vEdge routers.

Question 5

Which on-the-box security feature is supported by the Cisco ISR 4451 SD-WAN device and not on vEdge?
A) IPsec/GRE cloud proxy
B) reverse proxy
C) Enterprise Firewall with Application Awareness
D) Cloud Express service

Accepted Answer

The Cisco ISR 4451 supports an Enterprise Firewall with Application Awareness, which is a feature not available on vEdge devices.

Question 6

On which device is a service FW address configured to insert firewall service at the hub?
A) vSmart at the branch
B) vEdge at the branch
C) vEdge at the hub
D) vSmart at the hub

Accepted Answer

The service FW address is configured on the vEdge at the hub to insert firewall services, as the vEdge is responsible for data plane operations and service insertion.

Question 7

An engineer is configuring a centralized policy to influence network route advertisement. Which controller delivers this policy to the fabric?
A) vSmart
B) vBond
C) vManage
D) WAN Edge

Accepted Answer

vSmart is responsible for distributing centralized policies in a network fabric, including route advertisement policies.

Question 8

What is a benefit of the application-aware firewall?
A) It blocks traffic by MTU of the packet
B) It blocks encrypted traffic
C) It blocks traffic by application
D) It blocks traffic by MAC address

Accepted Answer

An application-aware firewall can identify and control traffic based on the application generating it, allowing for more granular security policies.

Question 9

Which configuration changes the packet loss priority from low to high?
A) 
B) 
C) 
D)

Accepted Answer

The answer of Which configuration changes the packet loss priority...

Question 10

A voice packet requires a latency of 50 msec. Which policy is configured to ensure that a voice packet is always sent on the link with less than a 50 msec delay?
A) localized data
B) centralized control
C) localized control
D) centralized data

Accepted Answer

The answer of A voice packet requires a latency of...

Question 11

Refer to the exhibit. Which configuration change is needed to configure the tloc-extention on Branch1-Edge1?
A) 
B) 
C) 
D)

Accepted Answer

The answer of  Refer to the exhibit. Which configuration...

Question 12

Which two WAN Edge devices should be deployed in a cloud? (Choose two.)
A) ASR1000v
B) vEdge 100wm
C) CSR1000v
D) vEdge cloud
E) vEdge 5000v

Accepted Answer

The answer of Which two WAN Edge devices should be...

Question 13

Which device information is required on PNP/ZTP to support the zero touch onboarding process?
A) serial and chassis numbers
B) interface IP address
C) public DNS entry
D) system IP address

Accepted Answer

The serial and chassis numbers are typically used to uniquely identify the device during the zero-touch provisioning (ZTP) process.

Question 14

Which configuration step is taken on vManage after WAN Edge list is uploaded to support the on-boarding process before the device comes online?
A) Verify the device certificate
B) Enable the ZTP process
C) Set the device as valid
D) Send the list to controllers

Accepted Answer

The step taken on vManage after uploading the WAN Edge list is to set the device as valid, which allows the device to be recognized and onboarded when it comes online.

Question 15

Which feature builds transport redundancy by using the cross link between two redundant WAN Edge routers?
A) TLOC extension
B) quality of service
C) zero-touch provisioning
D) OMP

Accepted Answer

TLOC extension is a feature that allows for transport redundancy by enabling a cross link between two redundant WAN Edge routers, ensuring continuous connectivity even if one transport link fails.

Question 16

Two sites have one WAN Edge each. Each WAN Edge has two public TLOCs with no restrict configured. There is full reachability between the TLOCs. How many data tunnels are formed on each Edge router?
A) 6
B) 2
C) 4
D) 8

Accepted Answer

The answer of Two sites have one WAN Edge each....

Question 17

Refer to the exhibit. Which QoS treatment results from this configuration after the access list acl-guest is applied inbound on the vpn1 interface?
A) A TCP packet sourcing from 172.16.10.1 and destined to 172.16.20.1 is dropped
B) A UDP packet sourcing from 172.16.20.1 and destined to 172.16.10.1 is accepted
C) A UDP packet sourcing from 172.16.10.1 and destined to 172.16.20.1 is dropped
D) A TCP packet sourcing from 172.16.20.1 and destined to 172.16.10.1 is accepted

Accepted Answer

The answer of  Refer to the exhibit. Which QoS...

Question 18

An engineer wants to track tunnel characteristics within a SLA-based policy for convergence. Which policy configuration will achieve this goal?
A) app-route policy
B) VPN membership policy
C) control policy
D) data policy

Accepted Answer

The answer of An engineer wants to track tunnel characteristics...

Question 19

Which command on a WAN Edge device displays the information about the colors present in the fabric that are learned from vSmart via OMP?
A) show omp peers
B) show omp route
C) show omp sessions
D) show omp tlocs

Accepted Answer

The command "show omp tlocs" on a WAN Edge device displays information about the TLOCs (Transport Locators), which includes the colors learned from vSmart via OMP (Overlay Management Protocol).

Question 20

Which value is verified in the certificates to confirm the identity of the physical WAN Edge device?
A) Serial Number
B) OTP
C) System-IP
D) Chassis-ID

Accepted Answer

The Serial Number is used to verify the identity of the physical WAN Edge device in certificates.

Exam 9: Implementing Cisco SD-WAN Solutions (ENSDWI)

Which command verifies a policy that has been pushed to the vEdge router?

Which type of route advertisement of OMP can be verified?

Refer to the exhibit. Which binding is created using the tloc-extension command?

Which command displays BFD session summary information per TLOC on vEdge routers?

Which on-the-box security feature is supported by the Cisco ISR 4451 SD-WAN device and not on vEdge?

On which device is a service FW address configured to insert firewall service at the hub?

An engineer is configuring a centralized policy to influence network route advertisement. Which controller delivers this policy to the fabric?

What is a benefit of the application-aware firewall?

Which configuration changes the packet loss priority from low to high?

A voice packet requires a latency of 50 msec. Which policy is configured to ensure that a voice packet is always sent on the link with less than a 50 msec delay?

Refer to the exhibit. Which configuration change is needed to configure the tloc-extention on Branch1-Edge1?

Which two WAN Edge devices should be deployed in a cloud? (Choose two.)

Which device information is required on PNP/ZTP to support the zero touch onboarding process?

Which configuration step is taken on vManage after WAN Edge list is uploaded to support the on-boarding process before the device comes online?

Which feature builds transport redundancy by using the cross link between two redundant WAN Edge routers?

Two sites have one WAN Edge each. Each WAN Edge has two public TLOCs with no restrict configured. There is full reachability between the TLOCs. How many data tunnels are formed on each Edge router?

Refer to the exhibit. Which QoS treatment results from this configuration after the access list acl-guest is applied inbound on the vpn1 interface?

An engineer wants to track tunnel characteristics within a SLA-based policy for convergence. Which policy configuration will achieve this goal?

Which command on a WAN Edge device displays the information about the colors present in the fabric that are learned from vSmart via OMP?

Which value is verified in the certificates to confirm the identity of the physical WAN Edge device?