Question 1

When VPNs are grouped to create destination zone, how many zones can a VPN be part of?

Accepted Answer

A)   two
B)   four
C)   one
D)   threeE) A) and C)
F) All of the above

Question 2

A voice packet requires a latency of 50 msec. Which policy is configured to ensure that a voice packet is always sent on the link with less than a 50 msec delay?

Accepted Answer

A)   localized data
B)   centralized control
C)   localized control
D)   centralized dataE) C) and D)
F) A) and C)

Question 3

What are the two advantages of deploying cloud-based Cisco SD-WAN controllers? (Choose two.)

Accepted Answer

A)   centralized control and data plane
B)   infrastructure as a service
C)   management of SLA
D)   centralized raid storage of data
E)   distributed authentication policiesF) A) and E)
G) B) and D)

Question 4

When software is upgraded on a vManage NMS, which two image-adding options store images in a local vManage software repository? (Choose two.)

Accepted Answer

A)   To be downloaded over an ICMP connection
B)   To be downloaded over a SNMP connection
C)   To be downloaded over a control plane connection
D)   To be downloaded over an out-of-band connection
E)   To be downloaded over a SMTP connectionF) C) and D)
G) A) and B)

Question 5

An engineer is deploying centralized wireless solution with a 5508 controller. What is the most AP licenses that can be supported?

Accepted Answer

A)   100
B)   250
C)   1000
D)   500E) C) and D)
F) A) and B)

Question 6

A large retail organization decided to move some of the branch applications to the AWS cloud. How does the network architect extend the in-house Cisco SD-WAN branch to cloud network into AWS?

Accepted Answer

A)   Create virtual instances of vSmart Cloud through the AWS online software store
B)   Create GRE tunnels to AWS from each branch over the Internet
C)   Install the AWS Cloud Router in the main data center and provide the connectivity from each branch
D)   Create virtual WAN Edge devices Cloud through the AWS online software storeE) A) and C)
F) A) and B)

Question 7

What is a benefit of the application-aware firewall?

Accepted Answer

A)   It blocks traffic by MTU of the packet
B)   It blocks encrypted traffic
C)   It blocks traffic by application
D)   It blocks traffic by MAC addressE) A) and D)
F) All of the above

Question 8

How is the scalability of the Manage increased in Cisco SD-WAN Fabric?

Accepted Answer

A)   Increase the bandwidth of the WAN link connected to the vManage
B)   Increase licensing on the vManage
C)   Deploy more than one vManage controllers on different physical server
D)   Deploy multiple vManage controllers in a clusterE) None of the above
F) A) and D)

Question 9

An engineer wants to track tunnel characteristics within a SLA-based policy for convergence. Which policy configuration will achieve this goal?

Accepted Answer

A)   app-route policy
B)   VPN membership policy
C)   control policy
D)   data policyE) A) and B)
F) A) and C)

Question 10

Which command verifies a policy that has been pushed to the vEdge router?

Accepted Answer

A)   vSmart# show running-config policy vSmart# show running-config policy
B)   vEdge# show running-config data policy vEdge# show running-config data policy
C)   vSmart# show running-config apply policy show running-config apply policy
D)   vEdge# show policy from-vsmart show policy from-vsmartE) A) and B)
F) A) and C)

Question 11

Which two products that perform lifecycle management for virtual instances are supported by WAN Edge cloud routers? (Choose two.)

Accepted Answer

A)   AWS
B)   Azure
C)   VMware vCenter
D)   OpenStack
E)   IBM CloudF) A) and E)
G) A) and B)

Question 12

Which two products are used to deploy Cisco WAN Edge Router virtual platforms? (Choose two.)

Accepted Answer

A)   Sun Enterprise M4000 Server running Sun Solaris
B)   Sun SPARC Node running AIX
C)   Cisco UCS
D)   HP ProLiant DL380 Generation 10 running HP-UX
E)   Cisco ENCS 5000 SeriesF) A) and B)
G) A) and C)

Question 13

An engineer is configuring a centralized policy to influence network route advertisement. Which controller delivers this policy to the fabric?

Accepted Answer

A)   vSmart
B)   vBond
C)   vManage
D)   WAN EdgeE) C) and D)
F) B) and C)

Question 14

Refer to the exhibit. An administrator is configuring a policy in addition to an existing hub-and-spoke policy for two sites that should directly communicate with each other. How is this policy configured?

Accepted Answer

A)   mesh
B)   custom control (route and TLO
C)  
C)   hub-and-spoke
D)   import existing topologyE) A) and B)
F) C) and D)

Question 15

Which Cisco SD-WAN WAN Edge platform supports LTE and Wi-Fi?

Accepted Answer

A)   ISR 1101
B)   ASR 1001
C)   CSR 1000v
D)   vEdge 2000E) None of the above
F) C) and D)

Question 16

Refer to the exhibit. The control connection is failing. Which action resolves the issue?

Accepted Answer

A)   Validate the certificates authenticity on vSmart
B)   Restore the reachability to the vSmart
C)   Import vSmart in vManager
D)   Upload the WAN Edge list on vManageE) None of the above
F) A) and B)

Question 17

At which layer does the application-aware firewall block applications on a WAN Edge?

Accepted Answer

A)   3
B)   5
C)   2
D)   7E) All of the above
F) A) and B)

Question 18

Which two requirements must be met for DNS inspection when integrating with Cisco Umbrella? (Choose two.)

Accepted Answer

A)   Attach security policy to the device template.
B)   Create and attach a System feature template with the Umbrella registration credentials.
C)   Register and configure the vManage public IP and serial number in the Umbrella portal.
D)   Upload the WAN Edge serial allow list to the Umbrella portal.
E)   Configure the Umbrella token on the vManage.F) D) and E)
G) C) and D)

Question 19

An administrator must configure an ACL for traffic coming in from the service-side VPN on a specific WAN Edge device with circuit ID 123456789. Which policy must be used to configure this ACL?

Accepted Answer

A)   local data policy
B)   central data policy
C)   app-aware policy
D)   central control policyE) C) and D)
F) A) and D)

Question 20

Which value is verified in the certificates to confirm the identity of the physical WAN Edge device?

Accepted Answer

A)   Serial Number
B)   OTP
C)   System-IP
D)   Chassis-IDE) All of the above
F) C) and D)

Exam 9: Implementing Cisco SD-WAN Solutions (ENSDWI)

At which layer does the application-aware firewall block applications on a WAN Edge?

Correct AnswerverifiedShow Answer

Which command verifies a policy that has been pushed to the vEdge router?

Correct AnswerverifiedShow Answer

An administrator must configure an ACL for traffic coming in from the service-side VPN on a specific WAN Edge device with circuit ID 123456789. Which policy must be used to configure this ACL?

Correct AnswerverifiedShow Answer

What are the two advantages of deploying cloud-based Cisco SD-WAN controllers? (Choose two.)

Correct AnswerverifiedShow Answer

An engineer is configuring a centralized policy to influence network route advertisement. Which controller delivers this policy to the fabric?

Correct AnswerverifiedShow Answer

Refer to the exhibit. An administrator is configuring a policy in addition to an existing hub-and-spoke policy for two sites that should directly communicate with each other. How is this policy configured?

Correct AnswerverifiedShow Answer

Refer to the exhibit. The control connection is failing. Which action resolves the issue?

Correct AnswerverifiedShow Answer

An engineer is deploying centralized wireless solution with a 5508 controller. What is the most AP licenses that can be supported?

Correct AnswerverifiedShow Answer

Which two products that perform lifecycle management for virtual instances are supported by WAN Edge cloud routers? (Choose two.)

Correct AnswerverifiedShow Answer

Which Cisco SD-WAN WAN Edge platform supports LTE and Wi-Fi?

Correct AnswerverifiedShow Answer

A large retail organization decided to move some of the branch applications to the AWS cloud. How does the network architect extend the in-house Cisco SD-WAN branch to cloud network into AWS?

Correct AnswerverifiedShow Answer

Which value is verified in the certificates to confirm the identity of the physical WAN Edge device?

Correct AnswerverifiedShow Answer

An engineer wants to track tunnel characteristics within a SLA-based policy for convergence. Which policy configuration will achieve this goal?

Correct AnswerverifiedShow Answer

A voice packet requires a latency of 50 msec. Which policy is configured to ensure that a voice packet is always sent on the link with less than a 50 msec delay?

Correct AnswerverifiedShow Answer

Which two requirements must be met for DNS inspection when integrating with Cisco Umbrella? (Choose two.)

Correct AnswerverifiedShow Answer

Which two products are used to deploy Cisco WAN Edge Router virtual platforms? (Choose two.)

Correct AnswerverifiedShow Answer

What is a benefit of the application-aware firewall?

Correct AnswerverifiedShow Answer

How is the scalability of the Manage increased in Cisco SD-WAN Fabric?

Correct AnswerverifiedShow Answer

When software is upgraded on a vManage NMS, which two image-adding options store images in a local vManage software repository? (Choose two.)

Correct AnswerverifiedShow Answer

When VPNs are grouped to create destination zone, how many zones can a VPN be part of?

Correct AnswerverifiedShow Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified