CCNP Software-Defined Wide Area Network (SD-WAN) Practice Exam

These questions are part of the practice quiz. Start practicing

• Which component provides centralized management and orchestration through a GUI interface?
• Which SD-WAN component authenticates WAN Edge devices before they join the overlay fabric?
• Which capability enables centralized segmentation of traffic into isolated VPNs?
• What is meant by app-aware policy in SD-WAN and how does it impact user experience?
• Which component authenticates WAN Edge devices before allowing them into the overlay fabric?
• Which component authenticates and facilitates device bootstrap in Cisco SD-WAN?
• A Cisco SD-WAN WAN Edge router loses all control connections after a certificate renewal. Which issue is the most likely cause?
• Which transport protocol is used to secure the SD-WAN overlay across the Internet?
• What are the prerequisites for Zero-Touch Provisioning to provision a new edge?
• How is TLS handshake and certificate trust managed across many SD-WAN devices?
• What is OMP used for in SD-WAN?
• Which Cisco SD-WAN feature continuously measures latency, loss, and jitter across WAN transports?
• WAN Edge devices show stable vBond and vSmart connections but no OMP routes are exchanged. What is the most likely cause?
• Which Cisco SD-WAN feature simplifies branch deployment through automated controller discovery and onboarding?
• How would you verify that a vEdge is enrolled correctly with vManage and that its tunnels are up?
• Which controller distributes centralized policies and orchestrates route advertisements between WAN Edge devices?
• Which Cisco SD-WAN capability allows centralized management of application-aware QoS policies?
• Which policy construct controls centralized route advertisement and acceptance behavior?
• Which component propagates routing information and central policies to WAN Edge devices?
• What is the role of Threat Monitoring in SD-WAN?
• What are vEdge devices and how do they differ from vEdge Cloud?
• What is the role of TLS certificates in SD-WAN device authentication, and what should be checked during renewal?
• Which Cisco SD-WAN feature accelerates branch deployment by automatic controller discovery and onboarding?
• Which Cisco SD-WAN policy type dynamically selects paths based on application SLA metrics?
• In Cisco SD-WAN, which component distributes TLOC routes and OMP updates between WAN Edge routers?
• Which of the following is a valid SD-WAN policy type?
• Which tunnel health monitoring mechanism measures latency, loss, and jitter between WAN Edge devices?
• Which practice helps avoid NAT double translation in an SD-WAN deployment?
• What is the process to add a new site to an existing SD-WAN fabric using vManage?
• How does software updates/upgrades work in Cisco SD-WAN using vManage, and what considerations should you plan?
• Which policy type applies application-aware traffic engineering decisions?
• In the SD-WAN bootstrap process, which component authenticates devices and provides initial coordination?
• Which component distributes control-plane policies and routing information to SD-WAN edges?
• Which IPsec mode is used to encapsulate SD-WAN data plane tunnels?
• Which capability automatically provisions new branch devices with minimal manual intervention?
• Explain how vManage dashboards and analytics help monitor SD-WAN health and performance.
• Which Cisco SD-WAN transport preference feature dynamically reroutes applications when SLA thresholds are exceeded?
• What is a recommended mitigation to prevent single points of failure in the SD-WAN management plane?
• Which Cisco SD-WAN component distributes centralized routing and policy information to WAN Edge routers?
• Which Cisco SD-WAN component is primarily responsible for authenticating and establishing control plane connections between WAN Edges and controllers?
• In path selection for SD-WAN, which factor is NOT typically considered?
• Which topology is typically more scalable for many sites due to direct tunnels between sites?
• Which forwarding mechanism is used to monitor tunnel health and enable rapid failover?
• Which component provides a GUI-based management plane interface to configure, provision, and monitor the SD-WAN fabric?
• What is the role of NAT in SD-WAN, and how is NAT traversal typically handled for Internet-bound traffic?
• Which Cisco SD-WAN feature provides application identification-based policy enforcement within overlay VPNs?
• In the SD-WAN policy framework, which policy governs routing decisions and distribution of routes?
• What are typical performance metrics collected by SD-WAN monitors?
• Which of the following statements about OMP is true?
• Which SD-WAN feature is primarily associated with rerouting applications based on SLA thresholds?
• Data policy governs which aspects of traffic in the SD-WAN overlay?
• Why must NAT rules be consistent across edges in SD-WAN when using multi-path connectivity?
• How does SD-WAN support multi-cloud connectivity (Azure/AWS/GCP) and what components are involved?
• What steps would you take to debug an SD-WAN tunnel that shows high latency but low packet loss?
• What does a Performance SLA (P SLA) define in SD-WAN, and how is it measured?
• How does a Cisco SD-WAN device bootstrap using vBond during first-time enrollment?
• Which policy type directly influences data-plane traffic forwarding decisions?
• Which OMP route type advertises transport locators in Cisco SD-WAN?
• Which protocol is used to secure control-plane connections in the Cisco SD-WAN fabric?
• Which Cisco SD-WAN overlay protocol advertises routes, policies, and TLOC reachability between edge devices and controllers?
• A Cisco SD-WAN edge router successfully establishes DTLS control connections but fails to form OMP adjacencies. Which issue is the most likely cause?
• Which tunnel protocol secures overlay traffic between WAN Edge devices?
• How does SD-WAN handle SaaS traffic differently from Internet traffic?
• Which policy category controls route advertisement and path preference decisions?
• In a Cisco SD-WAN deployment, data traffic is blackholed due to a missing or incorrect data policy affecting service VPN traffic. What is the most likely cause?
• Which Cisco SD-WAN feature dynamically reroutes traffic when packet loss exceeds SLA thresholds?
• Which OMP route type advertises transport locators?
• Which component authenticates WAN Edge devices and orchestrates secure controller connectivity?
• In SD-WAN topology, which statement best describes hub-and-spoke versus partial-mesh topology?
• Which Cisco SD-WAN feature centralizes governance of network policies across the SD-WAN fabric?
• Which SD-WAN component provides centralized provisioning, policy, and visibility through a web-based interface?
• During initial WAN Edge onboarding, what is the primary role of the vBond orchestrator?
• Which Cisco SD-WAN feature segments traffic into isolated VPNs across the overlay fabric?
• Which controller provides centralized policy distribution and route control?
• Which component is responsible for applying data/control policies to classify and route application flows in SD-WAN?
• Which capability prioritizes business-critical applications over preferred WAN transports based on SLA metrics?
• Which Cisco SD-WAN component manages the overall fabric configuration and provides a GUI for administrators?
• Which component pushes and enforces centralized policies across the SD-WAN fabric?
• Which Cisco SD-WAN policy type directly manipulates data-plane forwarding behavior based on applications and SLA metrics?
• Which policy type directly influences traffic forwarding behavior on WAN Edge routers?
• What is the most common cause for a WAN Edge to lose all control connections after a certificate renewal?
• Which component is the central policy and route controller in the SD-WAN fabric?
• Which capability automatically identifies SaaS application performance metrics across WAN transports?
• In vManage, what are the main policy types used for traffic engineering?
• Which Cisco SD-WAN feature enables centralized configuration management through reusable templates?
• Which of the following is a typical failure mode when a vSmart or vBond becomes unavailable?
• Which Cisco SD-WAN overlay protocol exchanges routing, policy, and topology information between controllers and WAN Edge devices?
• How does the SD-WAN management plane ensure resiliency in a large deployment?
• Which overlay transport protocol carries encrypted control and data traffic between WAN Edge devices?
• Why is OMP adjacency important in the SD-WAN control plane?
• Which Cisco SD-WAN feature dynamically reroutes application traffic when SLA thresholds are exceeded?
• Which statement describes underlay redundancy planning considerations in SD-WAN deployment?
• Describe the typical end-to-end sequence for deploying a new SD-WAN branch, from design to operation?
• What is the purpose of a VPN in Cisco SD-WAN, and how are data-plane tunnels established?
• What is the role of vManage in policy management for SD-WAN?
• Which statement best describes cloud gateway connections in the SD-WAN context?
• Which component provides centralized GUI-based management, monitoring, and orchestration?
• What is the recommended HA architecture for vEdge devices, and how is failover achieved?
• What is the most likely cause for data traffic to be blackholed when the data policy is misconfigured, despite OMP routes being present?
• Which SD-WAN component handles the control plane and fabric orchestration?
• Explain the role of vBond in Cisco SD-WAN bootstrap and certificate-based enrollment.
• Describe how QoS is implemented in Cisco SD-WAN and how it differs from traditional WAN QoS.
• Which policy type is described as centralized data policy in SD-WAN?
• Which protocol enables WAN Edge devices to learn remote sites and establish overlay tunnels?
• Which Cisco SD-WAN feature provides application-level visibility to enforce SLA-based routing decisions?
• Which policy type is applied locally on WAN Edge devices rather than centrally through vSmart?
• How does SD-WAN fabric support public cloud integration with AWS, Azure, and GCP using gateways or direct connect?
• Which Cisco SD-WAN component handles control-plane signaling and distribution of policies across the fabric?
• Which Cisco SD-WAN feature segments traffic into isolated VPN instances identified by VPN IDs?
• Which protocol is used between WAN Edge routers and vSmart controllers to exchange overlay routing information?
• What is application-aware routing in SD-WAN and how is it achieved?
• How does a Cisco SD-WAN device establish a control plane tunnel with vSmart, and what security is used?
• A branch WAN Edge device shows OMP routes as received but traffic to remote VPNs fails intermittently only for specific prefixes. Which root cause is most likely?
• Which component provides GUI-based management, monitoring, and orchestration of the SD-WAN fabric?
• Which statement accurately describes TLS usage in the SD-WAN control plane?
• Which Cisco SD-WAN feature coordinates centralized templates for consistent device onboarding and policy application?
• Which SD-WAN component handles the edge device in the fabric, enabling data-plane operations?
• Which protocol distributes reachability routes within the SD-WAN overlay?
• Which Cisco SD-WAN protocol detects WAN path liveliness and measures latency, jitter, and packet loss?
• How would you verify and validate a new Cloud onRamp for SaaS deployment in an existing SD-WAN fabric?
• In Cisco SD-WAN, OMP routes are present on vSmart but absent from WAN Edge routing tables. Which issue is the most likely cause?
• In SD-WAN, which management components orchestrate cloud-bound traffic policies for multi-cloud connectivity?
• What is dynamic path selection in SD-WAN and what metrics influence path choice?
• What is the typical certificate-based enrollment flow for vEdge devices?
• Which SLA metric is most likely triggering a failover policy when voice traffic is intermittently rerouted from MPLS to broadband despite acceptable latency values?
• What is Overlay Management Protocol (OMP) and which components use it?
• Describe the role of a Template in vManage and differentiate between Device Template and Feature Template.
• Which Cisco SD-WAN component handles centralized policy processing?
• Which protocol is used by vSmart and vBond to distribute VPN reachability, routing, and policy information to SD-WAN edges?
• How does OMP contribute to VPN reachability, and what should you check on the edge to verify OMP adjacency?
• Which statement best describes the role of OMP in Cisco SD-WAN?
• How does SD-WAN enable zero-touch provisioning (ZTP) for new edge devices?
• Which policy is processed locally on a WAN Edge router rather than centrally by vSmart?
• Which capability accelerates onboarding by preconfiguring devices and simplifying policy distribution during deployment?
• Define the SD-WAN overlay and explain how it differs from the underlay.
• Which Cisco SD-WAN transport location type commonly represents MPLS, broadband internet, or LTE WAN connectivity?
• Which SD-WAN tunnel protocol secures overlay traffic between WAN Edge devices?
• Which tunnel protocol is automatically established between WAN Edge routers in Cisco SD-WAN fabrics?
• During standard SD-WAN bootstrap, which component initially authenticates the edge device before enrollment?
• What are the essential considerations for license management in a Cisco SD-WAN deployment?
• Which transport color is commonly assigned to private MPLS circuits?
• What information does OMP distribute from vSmart to edge devices in an SD-WAN fabric?
• In Cisco SD-WAN, what is the difference between a Control Policy and a Data Policy?
• A WAN Edge router displays control connections as up, but application-aware routing policies are not taking effect. Which component is most likely unreachable?
• Which metrics are used to evaluate Cloud onRamp effectiveness after a SaaS cutover?
• Which SD-WAN component distributes centralized policies and orchestrates route advertisements between WAN Edge devices?
• Which Cisco SD-WAN feature identifies applications dynamically for policy enforcement and SLA decisions?
• Which Cisco SD-WAN component acts as the management plane for configuration and monitoring of the fabric?
• In SD-WAN SaaS deployments, what is the purpose of a Cloud onRamp?
• How does SD-WAN support hub-and-spoke versus partial-mesh topologies, and what are the trade-offs?
• Which Cisco SD-WAN overlay routing protocol exchanges routes and policy information between controllers and edge devices?
• Which component authenticates and coordinates WAN Edge devices joining the SD-WAN fabric?
• Which component orchestrates centralized configuration deployment through templates and policies?
• What is a key DIA consideration when enabling Direct Internet Access in SD-WAN?
• Which metric is commonly used to assess per-link performance in SD-WAN monitors?
• Which component is typically deployed at customer sites as the WAN edge device?
• Which Cisco SD-WAN feature automatically steers traffic away from degraded WAN circuits using SLA measurements?
• What is the purpose of security policies in SD-WAN regarding VPNs and tenants?
• Which is a commonly cited cause of SD-WAN tunnel flaps?
• How is data secured in transit in Cisco SD-WAN, including control and data planes?
• Which Cisco SD-WAN component authenticates WAN Edge devices before they join the overlay fabric?
• Which Cisco SD-WAN policy type manipulates OMP route advertisement and acceptance behavior?
• Direct Internet Access (DIA) in SD-WAN enables which of the following?
• Which SD-WAN transport color is commonly assigned to private MPLS circuits?
• What is the purpose of VPN segmentation in Cisco SD-WAN?
• Which element provides security policy enforcement at the edge in Cisco SD-WAN?
• What is the role of vBond in the SD-WAN fabric provisioning process?
• What types of performance metrics should be monitored after SD-WAN tunnel deployment?
• In the SD-WAN PKI, which entity issues the CA-signed certificates used by devices to join the fabric?
• Which Cisco SD-WAN component authenticates WAN Edge devices and facilitates orchestration-plane connectivity?
• What is Cloud onRamp for SaaS in Cisco SD-WAN and how does it improve SaaS access?
• If OMP routes exist on vSmart but are not installed on WAN Edge due to policy, what action would resolve the issue?
• Which component represents the WAN Edge device in the SD-WAN architecture?
• What ensures devices enroll securely with the SD-WAN manager during bootstrap?
• Which Cisco SD-WAN component is responsible for centralized policy distribution and control-plane route propagation between WAN Edge devices?
• Path Selection criteria in SD-WAN typically includes which of the following?
• In a data policy scenario, traffic is correctly routed via the preferred transport but is not NATed at one site. What is the most likely cause?
• Which statement describes Zero-Touch Provisioning (ZTP) in SD-WAN and its prerequisites?
• Which policy type is applied locally on individual WAN Edge routers rather than centrally through vSmart?
• Which Cisco SD-WAN feature enables centralized application-aware security policy enforcement across WAN Edge routers?