A network architect is designing a Catalyst SD-WAN deployment for a large enterprise with 1,000 branches. The architect wants to ensure high availability of the control plane. Which design consideration is most important?

Use only cEdge routers to reduce complexity.

Deploy multiple vSmart controllers in a cluster to handle the OMP load.

Deploy a single vBond orchestrator to simplify management.

Configure all branches to connect directly to vManage.

A branch router has two TLOCs: one via MPLS and one via LTE. The MPLS link is experiencing high jitter, and the LTE link is stable. The router is forwarding voice traffic over the MPLS link. What should the engineer configure to ensure voice traffic uses the LTE link?

Use static routes for voice traffic over LTE.

Disable the MPLS TLOC entirely.

Increase the administrative distance of the MPLS TLOC.

Configure a policy that sets a lower preference for the MPLS TLOC for voice traffic.

A network engineer is configuring a new vEdge router to join an existing Catalyst SD-WAN fabric. The vEdge has been provisioned with the vBond address and a certificate. What is the first step the vEdge performs after booting?

It downloads the full routing table from vManage.

It sends a registration request to the vBond orchestrator.

It establishes a BGP session with the nearest vSmart.

It establishes an IPsec tunnel to the vSmart controller.

A small business with a limited IT budget is considering Catalyst SD-WAN. They have only two sites and a single WAN link each. The owner is concerned about the cost and complexity of the solution. What is the most significant limitation they should consider?

The complexity of configuring OMP and policies

The need for multiple vSmart controllers for redundancy

The licensing cost and hardware investment may outweigh the benefits for a small network

The lack of support for IPsec encryption

CiscoCertified Network Professional Enterprise

Domain 1Objective 2

1.2 Explain the Working Principles of the Cisco Catalyst SD-WAN Solution 350-401 Practice Questions (Page 5)

Part of the 1.0 Architecture domain, which accounts for 15% of the 350-401 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 2–3 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

6concepts

15%of the exam

Questions 21–25

21expert · hard
A network architect is designing a Catalyst SD-WAN deployment for a large enterprise with 1,000 branches. The architect wants to ensure high availability of the control plane. Which design consideration is most important?
Select an answer first
22expert · hard
A branch router has two TLOCs: one via MPLS and one via LTE. The MPLS link is experiencing high jitter, and the LTE link is stable. The router is forwarding voice traffic over the MPLS link. What should the engineer configure to ensure voice traffic uses the LTE link?
Select an answer first
23application · medium
A network engineer is configuring a new vEdge router to join an existing Catalyst SD-WAN fabric. The vEdge has been provisioned with the vBond address and a certificate. What is the first step the vEdge performs after booting?
Select an answer first
24application · medium
A small business with a limited IT budget is considering Catalyst SD-WAN. They have only two sites and a single WAN link each. The owner is concerned about the cost and complexity of the solution. What is the most significant limitation they should consider?
Select an answer first
25foundation · easy
In the Cisco Catalyst SD-WAN control plane, which component is responsible for orchestrating the initial authentication and onboarding of vEdge and cEdge routers, and for distributing the list of vSmart controllers to those devices?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-401

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-401” is a trademark of its owner, used for identification only.