A large enterprise is deploying SD-Access across multiple sites. They have a mix of older switches that do not support VXLAN and newer switches that do. They want to use the older switches as edge nodes and the newer switches as border and control plane nodes. Which underlay design should they use to accommodate this?

Use a traditional Layer 3 underlay with OSPF and enable VXLAN only on the newer switches.

Use a Layer 3 underlay with IS-IS and configure the older switches as edge nodes with VXLAN encapsulation.

Use a Layer 2 underlay with MSTP and VXLAN on the newer switches.

Use a mixed underlay with OSPF for the older switches and IS-IS for the newer switches.

A company is troubleshooting an SD-Access fabric where endpoints in the same Virtual Network cannot communicate with each other. The endpoints are in different subnets. The network team suspects a policy issue. Which configuration should they verify?

Verify that the border has a route to the external network.

Verify that the VXLAN VNI is correctly configured on the edge nodes.

Verify that the SGTs are correctly assigned and that the policy allows communication between the SGTs.

Verify that the LISP map-cache is populated on the edge nodes.

A service provider is designing an SD-Access fabric for a customer with multiple sites. The customer wants to have a single fabric domain but with localized control plane and border functions to reduce WAN traffic. Which design should be used?

Deploy separate fabrics for each site and interconnect them via LISP.

Deploy a single control plane node at the main site and borders at each site.

Deploy a single border at the main site and control plane nodes at each site.

Deploy control plane nodes at each site and borders at each site, all in the same fabric.

A network administrator is deploying SD-Access using DNA Center. They have onboarded all devices and created the fabric site. However, when they try to provision the edge nodes, they receive an error that the device is not supported. What is the most likely cause?

The device does not have the correct license.

The device is not assigned to the fabric site.

The device is not reachable from DNA Center.

The device does not have the correct IOS XE version for SD-Access.

A company is implementing SD-Access and wants to connect their fabric to a legacy data center that does not support VXLAN or LISP. They need to provide access to shared services in the data center. They also want to enforce SGT-based policy for traffic to the shared services. Which handoff option should they use?

Layer 2 handoff with SGT propagation via SXP.

Layer 3 handoff with static routes and no SGT propagation.

Layer 2 handoff with VXLAN to the data center.

Layer 3 handoff with SGT propagation via SXP.

CCIE Enterprise Infrastructure

Domain 2Objective 1

Cisco SD-Access CCIE-ENTERPRISE-INFRASTRUCTURE Practice Questions (Page 7)

Part of the Software-Defined Infrastructure domain, which accounts for 25% of the CCIE-ENTERPRISE-INFRASTRUCTURE exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 7–10 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

6concepts

25%of the exam

Questions 31–35

31expert · hard
A large enterprise is deploying SD-Access across multiple sites. They have a mix of older switches that do not support VXLAN and newer switches that do. They want to use the older switches as edge nodes and the newer switches as border and control plane nodes. Which underlay design should they use to accommodate this?
Select an answer first
32expert · hard
A company is troubleshooting an SD-Access fabric where endpoints in the same Virtual Network cannot communicate with each other. The endpoints are in different subnets. The network team suspects a policy issue. Which configuration should they verify?
Select an answer first
33expert · hard
A service provider is designing an SD-Access fabric for a customer with multiple sites. The customer wants to have a single fabric domain but with localized control plane and border functions to reduce WAN traffic. Which design should be used?
Select an answer first
34expert · medium
A network administrator is deploying SD-Access using DNA Center. They have onboarded all devices and created the fabric site. However, when they try to provision the edge nodes, they receive an error that the device is not supported. What is the most likely cause?
Select an answer first
35expert · hard
A company is implementing SD-Access and wants to connect their fabric to a legacy data center that does not support VXLAN or LISP. They need to provide access to shared services in the data center. They also want to enforce SGT-based policy for traffic to the shared services. Which handoff option should they use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCIE-ENTERPRISE-INFRASTRUCTURE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-ENTERPRISE-INFRASTRUCTURE” is a trademark of its owner, used for identification only.

Cisco SD-Access CCIE-ENTERPRISE-INFRASTRUCTURE Practice Questions (Page 7)

Questions 31–35

A company is troubleshooting an SD-Access fabric where endpoints in the same Virtual Network cannot communicate with each other. The endpoints are in different subnets. The network team suspects a policy issue. Which configuration should they verify?

A service provider is designing an SD-Access fabric for a customer with multiple sites. The customer wants to have a single fabric domain but with localized control plane and border functions to reduce WAN traffic. Which design should be used?

A network administrator is deploying SD-Access using DNA Center. They have onboarded all devices and created the fabric site. However, when they try to provision the edge nodes, they receive an error that the device is not supported. What is the most likely cause?

Keep studying — Software-Defined Infrastructure