SD-WAN Devices JN0-1103 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A logistics company is rolling out SD-WAN to 150 remote sites. The IT team is small and cannot travel to each site. The devices will be shipped directly to each location, and the local staff have no networking expertise. The company wants the devices to be operational with minimal manual intervention. Which configuration and management approach should the team use?

   • AConfigure the devices using a script that runs on a laptop provided to the local staff, who follow a printed guide.
   • BSend a technician to each site to configure the devices using the local management interface.
   • CUse zero-touch provisioning so each device automatically contacts the centralized management platform and downloads its configuration.
   • DPre-configure each device at the central office and ship them with static configurations that match each site's expected settings.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which approach is commonly used to manage SD-WAN devices across multiple branch sites?

   • AManual configuration via a serial console
   • BCentralized management from a single controller
   • CUsing a distributed database for local management
   • DIndividual CLI configuration on each device
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   In a hub-and-spoke SD-WAN design, which device role typically terminates secure tunnels from multiple branch sites and forwards traffic between them?

   • ASpoke
   • BHub
   • CController
   • DGateway
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A government agency uses SD-WAN to connect its headquarters to field offices. The agency must comply with a regulation that requires all data to be encrypted in transit and that different departments' traffic be isolated. The agency also wants to use the public internet for some traffic to reduce costs. Which SD-WAN security design should the architect implement?

   • AUse IPsec tunnels for all traffic and implement segmentation using separate virtual routing and forwarding (VRF) instances for each department.
   • BUse GRE tunnels for all traffic and rely on the underlying MPLS network for security.
   • CUse IPsec tunnels only for traffic that traverses the public internet, and use VLANs for segmentation within each site.
   • DUse SSL/TLS for all traffic and implement segmentation using access control lists on the WAN edge.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which feature allows an SD-WAN device to be automatically configured when it is first connected to the network, without manual intervention?

   • AZero-touch provisioning (ZTP)
   • BSecure Shell (SSH)
   • CSimple Network Management Protocol (SNMP)
   • DDynamic Host Configuration Protocol (DHCP)
   Reveal Solution Discussion Select an answer first