A company is connecting their SD-Access fabric to a legacy data center that does not support VXLAN. They need to extend a few VLANs from the fabric to the data center for legacy servers. Which border handoff option should be used?

Layer 2 handoff using VXLAN to the data center.

Layer 2 handoff using VLAN trunking.

Layer 3 handoff with static routes.

An organization is deploying SD-Access and wants to use Cisco DNA Center to automate the underlay. They have already onboarded the switches and assigned IP addresses. What is the next step in the fabric deployment workflow?

Create a fabric site and assign devices to it.

Define the underlay routing protocol.

Set up border handoff to the WAN.

A service provider is offering SD-Access as a managed service to multiple tenants. They need to ensure that each tenant's traffic is isolated and that policy can be applied per tenant. Which overlay architecture should be used?

Use a single VN with SGTs only.

Use a single VN with different VLANs per tenant.

Use a separate VN per tenant with unique VRF and SGTs.

A retail chain is deploying SD-Access across 50 stores. Each store has a pair of access switches and a pair of distribution switches. The underlay must support the fabric control plane and data plane without relying on a separate routing protocol. The network team wants to minimize the number of routing adjacencies and simplify configuration. Which underlay design should be used?

Use IS-IS as the underlay with a single level and enable VXLAN for data plane encapsulation.

Use OSPF with a single area and enable LISP on all fabric devices.

Use static routing for the underlay and BGP EVPN for the overlay control plane.

Use EIGRP as the underlay and rely on VXLAN for both control and data plane.

A healthcare organization is deploying SD-Access. They need to ensure that only authorized medical devices can communicate with the electronic health records (EHR) system. They also want to prevent medical devices from communicating with each other. Which policy enforcement mechanism should they use?

Use VNs to separate each medical device.

Use VLANs to isolate each medical device.

Use ACLs on the edge nodes to filter traffic.

Use SGTs and create a policy that allows only the EHR system to communicate with medical devices.

CCIE Enterprise Infrastructure

Domain 2Objective 1

Cisco SD-Access CCIE-ENTERPRISE-INFRASTRUCTURE Practice Questions (Page 6)

Part of the Software-Defined Infrastructure domain, which accounts for 25% of the CCIE-ENTERPRISE-INFRASTRUCTURE exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 7–10 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

6concepts

25%of the exam

Questions 26–30

26application · medium
A company is connecting their SD-Access fabric to a legacy data center that does not support VXLAN. They need to extend a few VLANs from the fabric to the data center for legacy servers. Which border handoff option should be used?
Select an answer first
27application · medium
An organization is deploying SD-Access and wants to use Cisco DNA Center to automate the underlay. They have already onboarded the switches and assigned IP addresses. What is the next step in the fabric deployment workflow?
Select an answer first
28application · medium
A service provider is offering SD-Access as a managed service to multiple tenants. They need to ensure that each tenant's traffic is isolated and that policy can be applied per tenant. Which overlay architecture should be used?
Select an answer first
29application · medium
A retail chain is deploying SD-Access across 50 stores. Each store has a pair of access switches and a pair of distribution switches. The underlay must support the fabric control plane and data plane without relying on a separate routing protocol. The network team wants to minimize the number of routing adjacencies and simplify configuration. Which underlay design should be used?
Select an answer first
30application · medium
A healthcare organization is deploying SD-Access. They need to ensure that only authorized medical devices can communicate with the electronic health records (EHR) system. They also want to prevent medical devices from communicating with each other. Which policy enforcement mechanism should they use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCIE-ENTERPRISE-INFRASTRUCTURE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-ENTERPRISE-INFRASTRUCTURE” is a trademark of its owner, used for identification only.

Cisco SD-Access CCIE-ENTERPRISE-INFRASTRUCTURE Practice Questions (Page 6)

Questions 26–30

A company is connecting their SD-Access fabric to a legacy data center that does not support VXLAN. They need to extend a few VLANs from the fabric to the data center for legacy servers. Which border handoff option should be used?

An organization is deploying SD-Access and wants to use Cisco DNA Center to automate the underlay. They have already onboarded the switches and assigned IP addresses. What is the next step in the fabric deployment workflow?

A service provider is offering SD-Access as a managed service to multiple tenants. They need to ensure that each tenant's traffic is isolated and that policy can be applied per tenant. Which overlay architecture should be used?

Keep studying — Software-Defined Infrastructure