A network administrator is deploying SD-Access using DNA Center. They have created a fabric site and are now provisioning the edge nodes. They want to ensure that the edge nodes are configured with the correct VN and SGT settings. Which step should they take?

Use the 'Device Inventory' page to configure VNs and SGTs.

Use the 'Network Settings' page to configure VNs and SGTs.

Use the 'Fabric Provisioning' workflow to assign VNs and SGTs to the edge nodes.

Use the 'Policy' page to configure VNs and SGTs.

A hospital is deploying SD-Access with two physical sites connected via a WAN. They want to provide a consistent fabric experience across both sites, but they have limited WAN bandwidth and want to avoid stretching L2. Which fabric design should be recommended?

Deploy a single fabric with a single border at the main site and use VXLAN over the WAN.

Deploy a single fabric with borders at each site and use LISP for inter-site routing.

Deploy two separate fabrics and interconnect them via a Layer 3 handoff at the borders.

Deploy two fabrics and use a Layer 2 handoff between them to allow seamless roaming.

A company is deploying SD-Access using Cisco DNA Center. They have already designed the underlay and are ready to onboard devices. The network team wants to automate the process as much as possible. Which workflow should they follow in DNA Center?

Manually configure each device with the underlay and then add them to DNA Center.

Use DNA Center's Plug and Play (PnP) to onboard devices, then assign them to fabric roles.

Use DNA Center's SD-Access Fabric Automation to automatically configure the underlay and overlay.

Use DNA Center to create the fabric sites first, then manually configure the devices.

A financial services firm is implementing SD-Access and needs to connect their fabric to an existing data center that hosts shared services such as Active Directory and DHCP. The shared services are in a legacy VLAN. The firm wants to avoid changing the data center infrastructure. Which border handoff option should be used?

Layer 3 handoff with SVI and routing protocol.

Layer 2 handoff with VXLAN to the data center.

Layer 3 handoff with VRF-lite to the data center.

Layer 2 handoff with a VLAN to the data center.

A manufacturing company is deploying SD-Access to separate IT and OT traffic. They want to ensure that OT devices can only communicate with the OT controller and not with each other. Which segmentation approach should be used?

Create two Virtual Networks (VNs) and use SGTs to enforce micro-segmentation within the OT VN.

Use ACLs on the edge nodes to filter OT traffic.

Create a single VN and use VLANs to separate OT devices.

Use SGTs only, without VNs, to separate IT and OT.

CCIE Enterprise Infrastructure

Domain 2Objective 1

Cisco SD-Access CCIE-ENTERPRISE-INFRASTRUCTURE Practice Questions (Page 9)

Part of the Software-Defined Infrastructure domain, which accounts for 25% of the CCIE-ENTERPRISE-INFRASTRUCTURE exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 7–10 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

6concepts

25%of the exam

Questions 41–45

41application · medium
A network administrator is deploying SD-Access using DNA Center. They have created a fabric site and are now provisioning the edge nodes. They want to ensure that the edge nodes are configured with the correct VN and SGT settings. Which step should they take?
Select an answer first
42application · hard
A hospital is deploying SD-Access with two physical sites connected via a WAN. They want to provide a consistent fabric experience across both sites, but they have limited WAN bandwidth and want to avoid stretching L2. Which fabric design should be recommended?
Select an answer first
43application · medium
A company is deploying SD-Access using Cisco DNA Center. They have already designed the underlay and are ready to onboard devices. The network team wants to automate the process as much as possible. Which workflow should they follow in DNA Center?
Select an answer first
44application · medium
A financial services firm is implementing SD-Access and needs to connect their fabric to an existing data center that hosts shared services such as Active Directory and DHCP. The shared services are in a legacy VLAN. The firm wants to avoid changing the data center infrastructure. Which border handoff option should be used?
Select an answer first
45application · medium
A manufacturing company is deploying SD-Access to separate IT and OT traffic. They want to ensure that OT devices can only communicate with the OT controller and not with each other. Which segmentation approach should be used?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCIE-ENTERPRISE-INFRASTRUCTURE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-ENTERPRISE-INFRASTRUCTURE” is a trademark of its owner, used for identification only.