Share your ENSDWI Experience

Premium questions are enough to pass. There are about 10 new q easy to resolve (questions about policy). One of them is about to complete the policy for west and east. Please notice that one of them is missing and select the one with the opositive priority.
Most of the new questions are for policy.
I passed with premium. Thank you. Good luck!

Hi @Sdwanguy,
can you share this dump with me?

Thanks.

Can someone share the new questions with us, please
below link is for PASSLEADER Dumps that I bought please advise if the new questions is included

https://e1.pcloud.link/publink/show?code=XZIvK8ZnxHxSdN5o5bjQGkaVyPPhzHCnDMk

Anyone here who already took the exam can share some of the new questions that they encountered if you can still remember it?

Q’s and A’s in that PASSLEADER that are different than certprepare. Careful guys. Wrong A’s i think in PASSLEADER.

Passed the exam today. This site is already enough. Thank you certprepare

Thinking to get the premium service of certprep, can I know how many questions in certprep as for now?
Thank you

there is 150Q in preimum

@Batman the premium questions are from this site. You just need to pay for premium member about $19. You do not need to buy anything else to pass. There are a lot of facke person in here trying to sell you material. No need to pay extra. Premium questions are enough to pass.
Good luck!

I took the exam yesterday 18-10-2022 and here is my experience :

– 9 to 10 new questions, I have studied all questions in Premium and PASSLEADER and still faced new questions, they are without any doubt more than 5 new questions. Luckily I barely Passed the exam.

@Hamoze on what topics were the new questions you found in the exam? thx

certprepare!
please update new question!
Thank you

I will take the exam the friday, any advice?

I just pass the exam. I got like 10 new questions, however, questions here are still valid.

– How configure a hub/spoke topology for segment 40.0.0.0/16 in vmanage (graphic examples).
– Which policy configure DC East prefference for East sites and DC West prefference for West sites (you need to add a new tloc prefference configuration in CLI and associate it to west policy).

Is all new questions that I remember now.

Dear All, Do we have Simulations in this exam.

thanks 9tut

any update about exam ?

I passed my exam today and i got easily. All 102 questions is from this wonderful site. Anyway there is some epsilon changes but the whole spirit of the exam is in this site. I got no lab. Thank you to the site’s team.

Hi Guys, just want to ask.

Am I right to expect to receive 3 certification kit for encore, sdwan and ccnp enterprice?

I just received 2 cert (encore and ccnp enterprice only)

Organizations are looking to deploy SD-WAN for what reasons?
A. to take all Routing control from the service provider
B. To create end-to-end SLA for the organization traffic
C. To leverage the service provider SLA for end-to-end traffic
D. To offload all Routing control to the service provider
What are some of the tools or technologies that may be necessary to implement when redundant links are used in branch locations?
A. Administrative distance
B. Preferred path selection
C. Traffic engineering
D. Loop prevention (no aplica por que estamos hablando de Layer 3)
E. Redistribution
Which administratively configured options affect the calculation of loss latency and jitter statistics used for application aware routing
A. App-Route Poll Interval
B. Number of SLA Classes
C. App Route Multiplier
D. BFD Hello Multiplier
E. BFD Hello Interval
F. Number of Tunnels
G. Number of Colors
High availability should be considered on a device and link basis when planning for Cisco SD-WAN.
True
Capítulo 2: Cisco SD WAN Components
The original data packet is encapsulated within the _______ header while traversing the SD-WAN overlay.
A. UDP
B. Outer IP
C. Segmentation
D. Ipsec

vSmart is considered the brains of the SD-WAN fabric and is responsible for the control plane of the network. This responsibility includes _________ and __________.
A. router discovery
B. VPN topologies
C. local data policies (No aplica por que pasan directo desde vManage a Router WAN Edge)
D. centralized data policies
Explanation: vSmart acts as the brains of the fabric and is responsible for multiple aspects of the SD-WAN fabric:
– Implementation of control plane policies
– Centralized data policies
– Service chaining
– VPN topologies
– Security and encryption of the fabric

Both Cisco IOS-XE SD-WAN and Cisco vEdge routers use Zero Touch Provisioning (ZTP) on UDP port 12346 for auto provisioning.

False, Explanation: Cisco vEdge routers use ZTP UDP port 12346, whereas Cisco IOS-XE SD-WAN routers use Plug and Play (PNP).

The tunnels from the WAN Edge routers to the vBond(s) are which type of tunnels?
A. DTLS, permanent
B. IPsec, permanent
C. IPsec, temporary
D. DTLS, temporary

WAN Edge routers must maintain control connections via OMP to how many vSmarts to maintain an accurate routing table?
One (Un solo Router en un solo transporte forma conexiones al vSmart)
All
Two
Three

Explanation: All vSmarts in the overlay form OMP connections and share all information. As a result, WAN Edge routers must only maintain OMP control connection to a single vSmart and can have control connections to a maximum of three vSmarts.

A vManage cluster must be deployed with an odd number of instances.

False
True

Explanation: Un cluster de SD-WAN debe implementarse con un mínimo de 3 nodos, lo cual es un numero impar, odd number. To deploy vManage in a cluster, a minimum of three instances must be used. This is to avoid split-brain scenario. If a larger cluster is required, it must be an odd number of instances.

How does the Cisco SD-WAN architecture differ from traditional WAN technologies?

A. Distributed architecture
B. Topology dependence
C. Single pane of glass
D. Increased scale with centralized control plane
E. Reduced uptime in branch locations

All WAN routers form control connections to vManage across _______ transport(s).
A. all
B. zero
C. one
D. two
Explanation: Only a single control connection is built from a WAN edge router to vManage.
The VPN label maps traffic to the correct service-side VPN interface and is carried across the SD-WAN fabric in the __________.
A. outer IP header
B. IPsec header
C. segmentation header
D. inner packet
Explanation: The segmentation header carries the VPN label across the SD-WAN fabric via encapsulation utilizing RFC 4023.
Capitulo 3:
What routes are, by default, advertised into OMP?
Internal OSPF
Connected
Explanation: By default, static routes, connected routes, OSPF inter-area, and OSPF intra-area routes are advertised into OMP. Any other routes (OSPF external routes, BGP, LISP, ISIS, and EIGRP routes) must be manually configured to be advertised into OMP.
A TLOC route advertisement allows path selection to be defined by setting preference, _______, and ________.
service
site-id
weight
tags

If using a NAT and a public color, which IPs and port attributes will be used for data plane connectivity?
Pre-NAT
Post-NAT

Explanation: When using private-to-private colors, it is assumed that there is no NAT between the two, so private (pre-NAT) information is used. When communicating with a public color, NAT may be involved, so the public (post-NAT) attributes are used.

By default, a public TLOC will establish tunnels to all other TLOCs

By default, a TLOC will establish a tunnel to all other TLOCs in the environment, regardless of the color. This can be configured via a centralized control policy to build to specific sites or TLOCs.

Service routes are defined in a feature template and must declare the service ID and the _____

VPN ID
weight
preference
service rules

Device templates support multiple different device types.
Falso
Explanation: Device templates are specific to certain device types. Separate device templates will need to be used for different product versions.
Which automatic provisioning method uses HTTPS for communication?
Plug And Play
Which things must a device have for automatic provisioning to be successful?
Connectivity to ZTP or PNP server
Be able to resolve ZTP/PNP domain name
IP address and DNS server via DHCP

What methods can be used to construct device templates?

Feature templates
CLI templates

Preguntas capítulo 5: introducción a SD-WAN Policies

To limit routing information for only the guest VPN, a network administrator should configure?
A. application-aware routing policy
B. centralized data policy
C. control policy
D. VPN membership policy

Explanation:
The centralized policy is a combination of the control and data policies, these policies are:
• control policy
• VPN membership policy
• centralized data policy
• Application-Aware routing policy,
• Cflowd policy.

VPN membership policy limits the distribution of information about VPNs to other sites.

The centralized data policy may override the AAR forwarding decision.

False
True

Explanation: The centralized data policy is performed after the application-aware routing policy and can override the AAR forwarding decision.

Local policies can be used to manipulate ________ and _________ for a single site.

underlay routing
control plane
LAN routing
data plane

Explanation: A local policy can manipulate the control plane by use of route policies to filter or manipulate routes exchanged. A data plane can be influenced by using QoS, ACLs, and the security policy.

The ______ and _____ list can be used in a control policy to prefer a route to a specific site.

site
TLOC
color
data prefix

The site list can be a single, multiple, or a range of site IDs. It is used to identify a site or sites for matching criteria. Like a prefix list, a data prefix list matches specific routes when dealing with data policies.

The centralized data policy can set up Direct Internet Access for specific applications.

A. centralized data policy
B. control policy
C. application-aware routing policy
D. VPN membership policy

Explanation: The centralized data policy is used for service insertion and can provide a good implementation of DIA.

Which types of policies are applied to the vSmarts and enforced on the WAN Edges?

Localized data policies
Security policies
Application-Aware Routing policies
VPN membership policies
Topology policies

Explanation:
Application-Aware Routing policies are applied to the vSmarts and enforced on the WAN Edge Security policies and localized data policies are applied to and enforced on the WAN Edge routers.
VPN membership and topology policies are applied to and enforced on the vSmarts.

Which command is a valid command to enable the vBond persona?

vbond 209.200.165.227 enable
vbond 209.200.165.227 local
feature vbond

Which attributes are verified when authenticating the certificate?

Trust of certificate
Organization name
Certificate serial number
Common name
City

Which configurations are required when deploying vSmart?

allow-service netconf
Centralized policy
Local policy
tunnel-interface in VPN 0

Which command is used to allow Netconf through the inherent firewall on the vSmart controller?

A. allow-service netconf
B. enable-service netconf
C. feature netconf
D. permit netconf any any

What deployment methods are supported for Cisco SD-WAN controllers?

A. Oracle
B. KVM
C. ESXI
D. Local laptop

Which options are available for Certificate Authorities?

A. Symantec
B. Local password
C. Pre-shared-key
D. Cisco Managed CA

Explanation:
Options for a CA include Microsoft Certificate Services, Open SSL, Cisco ISE, Cisco Managed CA, Symantec, and an enterprise CA.

What options should not be chosen for Certificate Authorities?

A. Enterprise CA
B. pre-shared-key
C. OpenSSL
D. local password

Explanation:
Options for a CA include Microsoft Certificate Services, Open SSL, Cisco ISE, Cisco Managed CA, Symantec, and an enterprise CA.

What are the main certificate deployment options?

A. Manual enrollment with Symantec/DigiCert/Cisco PKI
B. Enterprise CA
C. Automatic enrollment with Symantec/DigiCert/Cisco PKI
D. Self-signed certificates
E. SSH private/public keys

Explanation:
The Cisco SD-WAN solution supports three main certificate deployment models. These include automatic enrollment with either Symantec, DigiCert, or Cisco PKI; manual enrollment with either Symantec, DigiCert, or Cisco PKI; and Enterprise CA.

When dealing with NAT, a data plane will not be successful with what NAT type?

A. Public/symmetric
B. Symmetric/symmetric
C. Full cone/full cone
D. Full cone/symmetric

If the vBond controller is behind a NAT, it must have a 1:1 static NAT.

A. True
B. False

Centralized control policies that leak routes must always be applied in the outbound direction.

A. True
B. False

Explanation: Control policies that are used to leak routes must always be applied in the inbound direction.

When parts of the world should communicate in a full-mesh environment, but communication to any other part of the world should go through a data center, this is referred to as a __________.

A. hybrid mesh
B. partial mesh
C. full mesh
D. regional mesh

Explanation: A regional mesh network is one in which all sites within a specific region communicate in a full mesh. Any communication to another region should traverse through a data center.

What is the default setting of the default action in a centralized control policy?

A. Deny
B. Permit
C. Reject
D. Accept
E. There is no default action; one must be configured manually.

Explanation: The only two answers that apply to centralized control policies are Accept and Reject. “Deny” is an action in a centralized data policy. The default setting of the default action in a centralized control policy is Reject.

OMP Route Preference values can be configured via feature templates and device templates.

False
True

Explanation: TLOC Preference values, not OMP Route Preference values, can be configured via feature and device templates.

Which of the following are configuration options for a TLOC list?

System IP
Encapsulation
Site ID
VPN
Color
Weight
Preference
Prefix

Explanation: System IP, Color, and Encapsulation are the three elements that uniquely define a TLOC. Additionally, a TLOC list will also allow the configuration of Weight and Preference. The other attributes cannot be defined as part of a TLOC list.

Which of the following features are able to interoperate between Viptela OS platforms and XE-SD-WAN platforms?

Forward Error Correction and packet duplication
Forward Error Correction
None of these answers is correct
TCP optimization
Packet duplication

Explanation: While both Viptela OS platforms and XE-SD-WAN platforms support Forward Error Correction, packet duplication, and TCP optimization, the implementations of these features are different between Viptela OS and XE-SD-WAN. As such, the features are not able to interoperate.

It is recommended to ______ private IP addresses for guest networks because they cannot be reached across the Direct Internet Access circuit.

inspect
pass
default
drop

To verify that service insertion is working properly for a cloud-based firewall, the network administrator may choose to use which command(s)?

show policy data firewall
show policy data-policy filter
show policy service-insertion
show policy cloud firewall

Explanation: Using show policy data-policy filter, a network administrator can see the data policy and any configured counters incrementing to ensure traffic is matching the proper sequence rules.

When configured, FEC is enabled for all traffic.

False
True

Explanation: Forward Error Correction sends five packets for every four packets in the FEC block and operates with an XOR operation. FEC can be configured in FEC-always or FEC-adaptive and can be matched for only specific applications or traffic.

To verify that service insertion is working properly for a cloud-based firewall, the network administrator may choose to use which command(s)?

show policy service-insertion
show policy data-policy filter
show policy data firewall
show policy service-path

Explanation: Using show policy data-policy filter, a network administrator can see the data policy and any configured counters incrementing to ensure traffic is matching the proper sequence rules. Using show policy service-path, the next-hop of the specified application will be shown.

When packet duplication is used, which field indicates the total number of unique packets that have been received?

PKTDUP RX THIS
PKTDUP RX OTHER
PKTDUP RX
PKTDUP TX OTHER
PKTDUP TX

Explanation:
(PKTDUP RX THIS) Total number of unique packets received por enlace principal + bkp
(PKTDUP RX) Received over the original path
(PKTDUP RX OTHER) Received over the backup path

What VPN will nat use-vpn move traffic into?

VPN 512
Service VPN
VPN 0
global table

Explanation: When performing an action for Direct Cloud Access, the configuration nat use-vpn 0 is required to route that traffic into VPN 0 for local egress. All traffic matching this sequence is sent to VPN 0.

When the TLOC specified in the LOCAL-TLOC action is not available, then the traffic that was matched in the data policy sequence is blackholed.

True
False

Explanation: The local-tloc command sets the preference for the outbound interface to be used when forwarding traffic. In the event that the TLOC specified in the LOCAL-TLOC policy is unavailable, traffic will fall back to the routing table.

Offloading all Internet traffic for a guest network at a branch is referred to as what?

Internet offload
Direct Cloud Access
Direct Internet Access
Internet backhaul

When packet duplication is configured, which tunnel is used to send the duplicated packets?

The same tunnel that the original packets were sent down
The least utilized tunnel to the same destination
The tunnel that is currently experiencing the least amount of packet loss
The tunnel that is configured in the policy

To send YouTube traffic across public-internet TLOC at all times and use MPLS TLOC only if public-internet is down, the centralized data policy would be configured with what command?

prefer
use nat-vpn
set local-tloc
tloc-list

Explanation: The set local-tloc configuration forces traffic to use the TLOC(s) specified if the TLOC is up. If the TLOC goes down, traffic resorts to any other TLOC available. If the desire is to only allow traffic across the chosen TLOC and drop traffic if that TLOC is down, then use of tloc-list should be chosen.

Which of the following applications would not be chosen for Direct Cloud Access?

Google Apps
Salesforce
Office 365
YouTube

Explanation: Direct Cloud Access is utilized for applications that are trusted or are deemed lower risk and include Office 365, Google Apps, and Salesforce.com. All other Internet traffic would be backhauled through a data center for standard inspection.

To ensure that Facebook traffic traverses the biz-internet TLOC, a network administrator may choose to configure which data policy setting?

tloc-list
set local-tloc
prefer
use nat-vpn

Explanation: The set local-tloc configuration will enforce traffic to use the TLOC(s) specified as long as the TLOC is up. If the TLOC goes down, traffic will resort to any other TLOC available. If the desire is to only allow traffic across the chosen TLOC and drop traffic if that TLOC is down, then use of tloc-list should be chosen.

In a vSmart configuration, how many data policies can applied per site?

Two: Each site gets a data policy that is applied to traffic that is originating from the LAN and a second policy that is applied to the traffic that originates from the WAN.
Zero: Data policies are not applied in a vSmart configuration.
One: Each site gets one and only one data policy.
As many as necessary, but never more than two per VPN per site.

Explanation: In the vSmart configuration, there is only a single data policy that is configured per site ID per direction. That single policy will include sub-policies per VPN, but there are only two policies that are applied per site ID.

Offloading specific applications on corporate network is referred to as what?

Internet backhaul
Direct Internet Access
Internet offload
Direct Cloud Access

Explanation: Limiting Internet offload for only certain applications is referred to as Direct Cloud Access. These applications are trusted or are deemed lower risk and include Office 365, Google Apps, and Salesforce.com. All other Internet traffic is backhauled through a data center for standard inspection.

How many different SLA classes can be configured in a vSmart policy?

4
256
6
2
8
Unlimited

Explanation: As of version 19.2, a single vSmart policy can have a maximum of eight different SLA classes configured.

How many different SLA classes can be applied to a single WAN Edge router?

8
4
256
Unlimited
2

Explanation: As of version 19.2, a single WAN Edge router can only have four different SLA classes applied.

With the AAR policy, administrators can set SLAs for ____________.

all traffic
noncritical traffic
business-critical traffic
scavenger traffic

Explanation: Use of the AAR policy allows SLAs to be set for different traffic classes. This allows that traffic class to prioritize one path over another and fail over to the secondary transport should the SLA be exceeded.

Where are App-Route policies applied and enforced?

Applied on the WAN Edge; enforced on the vSmart
Applied on the vSmart; enforced on the WAN Edge
Applied on the vSmart; enforced on the vSmart
Applied on the WAN Edge; enforced on the WAN Edge

App-aware routing policies are applied to what list(s)?

Site lists
Color lists
SLA list
TLOC list

When configured, the “Strict” option in an AAR policy will drop the traffic if the preferred color(s) fails to meet the SLA Class requirements.

True
False

Explanation: When configured, the Strict option will drop traffic when all available colors fail to meet the requirements of the SLA class, not only the colors specified in the Preferred Colors field.

To verify which SLAs are compliant based on the AAR policy, a network administrator would use which methods?

show app-route path
show policy aar
simulate flows
show app-route stats

Explanation: Using the show app-route stats, the SLA classes that are compliant to a particular tunnel will be shown, allowing for a network administrator to know what traffic will be forwarded across that tunnel. This can also be shown in the vManage GUI using simulate flows.

What is the maximum number of App-Route Poll Intervals that can be used for tunnel performance calculations?

6
8
2
16
4

Explanation: The maximum (and default) number of App-Route Poll Intervals that can be used for tunnel performance calculations is six. This value is configured using the App-Route Poll Interval Multiplier.

When applying the AAR policy, the administrator applies the policy in which direction?

From-service
From-tunnel
AAR policy is applied automatically in both directions
AAR policy is not applied directionally

Explanation: The AAR policy is not applied directionally because it only affects traffic going out the WAN interface.

When configured, FEC is enabled for all traffic.

True
False

Explanation: Forward Error Correction sends five packets for every four packets in the FEC block and operates with an XOR operation. FEC can be configured in FEC-always or FEC-adaptive and can be matched for only specific applications or traffic.

o ensure that Facebook traffic traverses the biz-internet TLOC, a network administrator may choose to configure which data policy setting?

use nat-vpn
tloc-list
set local-tloc
prefer

Explanation: The set local-tloc configuration will enforce traffic to use the TLOC(s) specified as long as the TLOC is up. If the TLOC goes down, traffic will resort to any other TLOC available. If the desire is to only allow traffic across the chosen TLOC and drop traffic if that TLOC is down, then use of tloc-list should be chosen.

Only queue 0 can be configured as a low-latency queue, and this is enabled by default.

False
True

Explanation: Queue 0 is the low-latency queue that includes OMP traffic. No other queue can be configured as a low-latency queue.

What are the types of localized policies that can be applied to the WAN Edge router?

Cflowd policies
Data policies
Application-aware routing policies
Control policies

Explanation: Localized policies are a combination of local data policies and local control policies. Localized control policies are used to manipulate the control plane along with routing advertisements from the service-side LAN. Localized data policies consist of any local ACLs or QoS configurations. In both cases, the localized policy is applied only to the router or set of routers configured in the device template.

A single list object can be used in both a centralized policy and a localized policy.

True
False

Explanation: False. As centralized policies are applied to the vSmart, and localized policies are applied to the WAN Edge routers, the configurations are completely independent and will use different lists.

Most dual router sites require two device templates to allow for all routing to prefer Router A over Router B.

False
True

Explanation: It is not possible to set a metric as a variable in the localized control policy. For dual router sites, two local control policies must be built, which requires two device templates to be created.

When updating a localized control policy, the configuration is applied to ________.

nothing until the policy is activated
all WAN Edge routers attached to the device template where the local policy is called
all vSmarts
all WAN Edge routers

To send YouTube traffic across public-internet TLOC at all times and never use another TLOC even if public-internet is down, the centralized data policy would be configured with what command?

set local-tloc
use nat-vpn
prefer
tloc-list (modo estricto que no permite conmutar a otro tloc en caso de estados down)

Explanation: The set local-tloc configuration forces traffic to use the TLOC(s) specified as long as the TLOC is up. If the TLOC goes down, traffic resorts to any other TLOC available.

If the desire is to only allow traffic across the chosen TLOC and drop traffic if that TLOC is down, use of tloc-list should be chosen.

Si lo que deseo es forzar que el tráfico de YouTube salga por solo un tloc sin conmutar a otro TLOC de respaldo en el caso de que el TLOC principal caiga, la opción que se debe ocupar es tloc-list al interior de la política centralizada de datos.

Si deseo que se ocupe un TLOC y cuando no este disponible se conmute a otro tloc disponible, la opción set local-tloc debe utilizarse al interior de la política.

Using the command show policy counters allows you to see which packets are blocked by an access list.

True
False

Explanation: To validate which packets are blocked by an access list, the correct command is show policy access-list-counters.

Local control policies are used to manipulate which attributes?

Administrative distance
Cost
Next-hop
Local-preference

Explanation: Local control policies manipulate OSPF cost, BGP local-preference, and EIGRP delay to make the LAN neighbor prefer one WAN Edge router over the other.

Local control policies are used to manipulate which attributes?

Weight
Local-preference
Cost
Delay

Explanation: Local control policies are used to manipulate OSPF cost, BGP local-preference, and EIGRP delay to make the LAN neighbor prefer one WAN Edge router over the other.

Which of the following are part of the localized policy QoS configuration on a WAN Edge router?

qos-map
class-map
qos-scheduler
shaper

Explanation: While shapers are part of QoS, they are configured under the interface configuration and are not part of the localized policy configuration. Class-maps are used to map the forwarding classes to hardware queues. qos-schedulers are used to configure the forwarding parameters of each traffic class. qos-maps are used to tie all of the schedulers together into a single policy.

It is possible to configure a route-policy to a BGP neighbor prior to the local policy being configured.

True
False

Explanation: The local policy needs to be created prior to applying a route policy to a BGP neighbor. If the route policy is called in the BGP template prior to being configured in the local policy, the template push fails.

Hi User, where did you find these questions?

NEW QUESTION:

Refer to the exhibit. An enterprise has hub and spoke topology where it has several VPNs. An engineer must allow users in VPN91 to reach users in VPN92 and
VPN10 to reach VPN91 and VPN92. Which configuration meets these requirements?

@certprepare can you please add new question??

Hi, @certprepare theres new questions on the exam ?

@certprepare,

cuando actualizará el fichero de preguntas?

Gracias.

Thanks John, i used the same to pass, it’s valid for 2022

I passed! I think, it said i passed the exam but i am still waiting for the final evaluation and score report. It was really stressful and i had to make adjustments to where i sat last minute by request of the proctor and had to go through the check-in twice.
I used John dump above all the questions came from it

Hi, Has anyone passed exam recently ?

Hello, passed exam today. About 80% of questions are available in the premium section of certprepare. Make sure you study policies and tloc extensions. Questions available here are enough to pass.

Dear
Certprepare.com!

Would you please update new Question!
I have to take Exam as soon as possible after update new question.

Hi certprepare,
Please update new question in premium. 80% qiestion valid is not very safe for us.
Thanks!