Cisco SD-WAN CCIE-ENTERPRISE-INFRASTRUCTURE Practice Questions (Page 4)

Questions 16–20

1. 16expert · medium

   A service provider is offering SD-WAN as a managed service to multiple customers. They want to use a single vManage cluster to manage all customers, but isolate each customer's configuration and policies. Which approach should they use?

   • AUse different device templates for each customer.
   • BDeploy separate vManage clusters for each customer.
   • CUse multi-tenancy in vManage with separate tenant partitions and role-based access control.
   • DUse different VPNs to isolate customers.
   Reveal Solution Discussion Select an answer first
2. 17expert · medium

   A company has a hub-and-spoke SD-WAN topology. They want to enforce that all internet-bound traffic from branches goes through the hub for security inspection. However, they also want to allow direct internet access for Office 365 traffic to reduce latency. Which policy combination should be used?

   • AA centralized data policy that matches Office 365 and allows direct internet, and a centralized control policy that advertises a default route from the hub with a higher TLOC preference.
   • BA localized data policy on the branch that sends all traffic to the hub, and a centralized data policy for Office 365.
   • CA centralized control policy that sets the TLOC preference for the hub, and a localized data policy to allow Office 365.
   • DUse a VPN membership list to restrict internet access to the hub.
   Reveal Solution Discussion Select an answer first
4. 18expert · medium

   A network team is migrating from a legacy WAN to SD-WAN. They have 50 branch routers with different hardware models. They want to use templates to standardize configuration but need to accommodate hardware-specific interface names. Which approach should they take?

   • ACreate separate device templates for each hardware model, using feature templates for common configuration.
   • BManually configure each router and skip templates.
   • CUse a single device template with variables for interface names.
   • DUse CLI templates with hardware-specific commands.
   Reveal Solution Discussion Select an answer first
5. 19expert · medium

   A company has two MPLS circuits from different providers at each branch. They want to use both circuits for load balancing, but they also want to ensure that if one provider has a failure, the other can carry all traffic. Which design should they implement?

   • AConfigure both circuits as TLOCs with equal TLOC preference and use OMP ECMP for load balancing.
   • BConfigure a single TLOC with two physical interfaces.
   • CConfigure one circuit as primary and the other as backup using TLOC preference.
   • DUse a centralized data policy to load-balance traffic between the two circuits.
   Reveal Solution Discussion Select an answer first
6. 20expert · medium

   A branch router has a local server that should only be accessible from a specific remote site. The network team wants to enforce this using SD-WAN policies. Which policy should be applied?

   • AA localized data policy on the branch router that denies traffic from other sites.
   • BA centralized data policy that matches traffic from the allowed site and permits it, and drops all other traffic.
   • CUse a VPN membership list to restrict the server's VPN to the allowed site.
   • DA centralized control policy that filters the route advertisement of the server's prefix to only the allowed site.
   Reveal Solution Discussion Select an answer first