A company is deploying SD-Access using Cisco DNA Center. They have already onboarded all switches and created a fabric site. They are now ready to provision the fabric nodes. Which step should be performed first?

Assign fabric roles to the switches (edge, border, control plane).

Configure the underlay routing protocol on all switches.

Define SGTs and policy contracts.

Create Virtual Networks (VNs) and assign VLANs.

An enterprise is connecting their SD-Access fabric to an existing MPLS WAN. They need to advertise a few subnets from the fabric to the WAN and also import a default route. Which border handoff method should be used?

Layer 3 handoff with static routes

Layer 2 handoff with VLAN trunking

A retail chain is implementing SD-Access to separate point-of-sale (POS) devices from guest Wi-Fi. They want to ensure that POS devices can only communicate with the payment server, while guests can only access the internet. Which two mechanisms should be combined to achieve this?

Use VLANs and ACLs on the access switches.

Create two Virtual Networks (VNs) and use SGTs for policy.

Use a firewall between the POS and guest networks.

A manufacturing plant is deploying SD-Access with a small IT team. They want to minimize the number of devices to manage while ensuring high availability. Which fabric design should they choose?

Use only border nodes and no edge nodes.

Collapsed fabric with edge and control plane on the same switches.

Separate control plane nodes for scalability.

Deploy a three-tier hierarchy with core, distribution, and access.

CCIE Enterprise Infrastructure

Domain 2Objective 1

Cisco SD-Access CCIE-ENTERPRISE-INFRASTRUCTURE Practice Questions (Page 5)

Part of the Software-Defined Infrastructure domain, which accounts for 25% of the CCIE-ENTERPRISE-INFRASTRUCTURE exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 7–10 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

6concepts

25%of the exam

Questions 21–25

21application · medium
A university is implementing SD-Access to segment student, faculty, and IoT traffic. They want to use VXLAN for data plane encapsulation and LISP for control plane. Which additional technology is required to enforce micro-segmentation between IoT devices on the same VLAN?
Select an answer first
22application · medium
A company is deploying SD-Access using Cisco DNA Center. They have already onboarded all switches and created a fabric site. They are now ready to provision the fabric nodes. Which step should be performed first?
Select an answer first
23application · medium
An enterprise is connecting their SD-Access fabric to an existing MPLS WAN. They need to advertise a few subnets from the fabric to the WAN and also import a default route. Which border handoff method should be used?
Select an answer first
24application · medium
A retail chain is implementing SD-Access to separate point-of-sale (POS) devices from guest Wi-Fi. They want to ensure that POS devices can only communicate with the payment server, while guests can only access the internet. Which two mechanisms should be combined to achieve this?
Select an answer first
25application · medium
A manufacturing plant is deploying SD-Access with a small IT team. They want to minimize the number of devices to manage while ensuring high availability. Which fabric design should they choose?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCIE-ENTERPRISE-INFRASTRUCTURE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-ENTERPRISE-INFRASTRUCTURE” is a trademark of its owner, used for identification only.