1.2 Explain the Working Principles of the Cisco Catalyst SD-WAN Solution 350-401 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A multinational company is migrating from a traditional hub-and-spoke WAN to Catalyst SD-WAN. They want to reduce the cost of backhauling internet traffic to the data center and improve performance for cloud-based applications. Which SD-WAN feature directly addresses this requirement?

   • ASecure IPsec tunnels between all sites
   • BDirect internet access (DIA) at branch locations
   • CCentralized policy management
   • DOMP route redistribution
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   During a security audit, an organization wants to ensure that all control plane communications between vSmart and edge devices are encrypted. They also want to verify that the edge devices are authenticated before any routing information is exchanged. Which protocol and authentication method should they verify?

   • ADTLS with certificate-based authentication
   • BTLS with username/password authentication
   • CSSH with key-based authentication
   • DIPsec with pre-shared keys
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   In the Catalyst SD-WAN control plane, what information is exchanged between vSmart controllers and edge devices using OMP?

   • ADevice configuration templates
   • BRouting information and policy
   • CEncrypted user data packets
   • DAuthentication certificates
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A network engineer is troubleshooting a Catalyst SD-WAN deployment where a cEdge router at a branch site cannot establish a control connection to the vSmart controller. The cEdge has a valid certificate, and the vSmart's IP is reachable from the branch. However, the vSmart is behind a NAT device. Which action should the engineer take to resolve the issue?

   • AIncrease the OMP administrative distance on the cEdge.
   • BDisable the firewall on the cEdge router.
   • CConfigure the vSmart to use a public IP address for the control connection.
   • DChange the control protocol from DTLS to IPsec.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   In which deployment scenario might the complexity of Catalyst SD-WAN become a limitation?

   • AA large enterprise with hundreds of sites and multiple transports
   • BA small branch with a single WAN link and no need for advanced policies
   • CA network that requires high availability and failover
   • DA network that needs to support voice and video traffic
   Reveal Solution Discussion Select an answer first