A large enterprise is implementing SD-Access with multiple VNs. They have a requirement that certain IoT devices in the 'IoT' VN must be able to communicate with a specific server in the 'Corporate' VN, but only on TCP port 443. They also want to prevent all other traffic between these VNs. Which policy configuration should be used?

Place the IoT devices and the server in the same VN and use VLANs to separate them.

Use LISP locator separation to allow communication.

Create an SGT for the IoT devices and an SGT for the server, then define a contract allowing TCP 443 from IoT to server.

Create a VN-to-VN ACL on the border node.

A company is deploying SD-Access and has a mix of older switches that do not support VXLAN. They want to use Cisco DNA Center to automate the deployment. What should they do?

Use the non-VXLAN switches as border nodes only.

Configure them as extended nodes.

Use the non-VXLAN switches as fabric edge nodes with software VXLAN.

Replace the non-VXLAN switches with supported hardware.

A service provider is designing an SD-Access fabric for a large campus with multiple buildings. They want to use a Layer 3 underlay with OSPF. They also want to ensure fast convergence and minimize the number of OSPF areas. Which design should they choose?

Use OSPF with route summarization at the core.

Use a single OSPF area 0 for the entire underlay.

Use OSPF with BFD for fast convergence.

Use multiple OSPF areas with area 0 as backbone.

A multi-national company is deploying SD-Access across multiple sites. They want to use a single fabric for all sites, but they have different security policies per site. They also want to ensure that traffic between sites is encrypted. Which approach should they take?

Use a single fabric with per-site VNs and SGTs, and use IPsec between borders.

Use a single fabric with SGTs only.

Use a single fabric with VXLAN encryption.

Use separate fabrics per site and interconnect them with LISP.

A large enterprise is designing an SD-Access fabric with multiple fabric sites. They want to ensure that the control plane is highly available and can scale to support thousands of endpoints. Which design should they choose?

Use the border nodes as control plane nodes.

Use a single control plane node per fabric site.

Use a dedicated pair of control plane nodes per fabric site.

Use the edge nodes as control plane nodes.

CCIE Enterprise Infrastructure

Domain 2Objective 1

Cisco SD-Access CCIE-ENTERPRISE-INFRASTRUCTURE Practice Questions (Page 4)

Part of the Software-Defined Infrastructure domain, which accounts for 25% of the CCIE-ENTERPRISE-INFRASTRUCTURE exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 7–10 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

6concepts

25%of the exam

Questions 16–20

16expert · hard
A large enterprise is implementing SD-Access with multiple VNs. They have a requirement that certain IoT devices in the 'IoT' VN must be able to communicate with a specific server in the 'Corporate' VN, but only on TCP port 443. They also want to prevent all other traffic between these VNs. Which policy configuration should be used?
Select an answer first
17expert · hard
A company is deploying SD-Access and has a mix of older switches that do not support VXLAN. They want to use Cisco DNA Center to automate the deployment. What should they do?
Select an answer first
18expert · hard
A service provider is designing an SD-Access fabric for a large campus with multiple buildings. They want to use a Layer 3 underlay with OSPF. They also want to ensure fast convergence and minimize the number of OSPF areas. Which design should they choose?
Select an answer first
19expert · hard
A multi-national company is deploying SD-Access across multiple sites. They want to use a single fabric for all sites, but they have different security policies per site. They also want to ensure that traffic between sites is encrypted. Which approach should they take?
Select an answer first
20expert · hard
A large enterprise is designing an SD-Access fabric with multiple fabric sites. They want to ensure that the control plane is highly available and can scale to support thousands of endpoints. Which design should they choose?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCIE-ENTERPRISE-INFRASTRUCTURE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-ENTERPRISE-INFRASTRUCTURE” is a trademark of its owner, used for identification only.