2.1 Design Scalable Meraki Auto VPN Architectures 500-220 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   How does Meraki SD-WAN integrate with Auto VPN to influence path selection?

   • ABy allowing administrators to define policies that steer traffic over specific VPN paths based on application or performance
   • BBy encrypting traffic with a different protocol
   • CBy automatically disabling VPN tunnels when the internet is slow
   • DBy requiring all traffic to use the primary internet uplink
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A service provider is designing Auto VPN for 150 customer sites. The architect plans a hub-and-spoke design with three hubs. Each hub is an MX450 with a 250-peer limit. The architect must also ensure that if one hub fails, its spokes can fail over to another hub. Which spoke-to-hub assignment strategy satisfies both the peer limit and the failover requirement?

   • AAssign 100 spokes to each hub as primary, and configure all spokes with the same secondary hub
   • BAssign all 150 spokes to each hub as primary and secondary
   • CAssign 80 spokes to each hub as primary, with no secondary hub configured
   • DAssign 50 spokes to each hub as primary, and configure each spoke with a secondary hub that has spare peer capacity
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A company is merging two organizations that each use Auto VPN. Organization A uses 10.0.0.0/16 subnets at its sites, and Organization B also uses 10.0.0.0/16 subnets at its sites. The merged company wants to interconnect all sites via Auto VPN. The architect must design the IP addressing plan. Which approach is most appropriate?

   • AConfigure the VPN to use policy-based routing to select the correct site
   • BRe-address all sites in Organization B to use 172.16.0.0/16 subnets
   • CKeep both organizations' subnets and use static routes to differentiate them
   • DUse NAT on the MX at each site to translate the overlapping subnets
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is the purpose of placing a VPN concentrator in a Meraki Auto VPN design?

   • ATo aggregate VPN traffic from multiple sites and provide a central point for inter-site communication
   • BTo provide wireless access for remote users
   • CTo replace the need for a firewall at each site
   • DTo increase the number of LAN ports available at a site
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A non-profit organization with 15 offices is deploying Meraki MX appliances. The IT director wants site-to-site VPN connectivity without the complexity of manually configuring IPsec tunnels on each device. The offices use overlapping RFC 1918 subnets. What is the first design step the architect should take?

   • AConfigure a full mesh topology to bypass the need for unique subnets
   • BUse the MX's built-in NAT to translate overlapping subnets
   • CPlan unique subnets for each office before enabling Auto VPN
   • DEnable Auto VPN and rely on the MX to automatically resolve subnet conflicts
   Reveal Solution Discussion Select an answer first