Management and Operations (10%)

ENSDWI · 30 questions

• A regional bank is upgrading 40 WAN Edge routers from SD-WAN Manager during a short maintenance window. The change plan requires automatic recovery if a router loses control connectivity after activation and proof that images were staged before reboot. Which software image management behavior should the engineer verify to meet the upgrade safeguard?
• A hospital must centralize logins with its existing RADIUS servers, requiring SD-WAN Manager GUI users to authenticate externally and 100 clinic WAN Edges to authenticate CLI admins externally with local fallback. Auditors demand separate handling for management versus device access. Which external AAA design for the Manager and for WAN Edges satisfies both needs?
• A NOC manages 150 WAN Edges from SD-WAN Manager and must forward critical tunnel-down and certificate alarms to Splunk via webhook and to PagerDuty via email, while avoiding alert storms during ISP flaps. Which alarm and notification configuration meets centralized monitoring and dampening needs?
• You support a retail SD-WAN fabric with 80 WAN Edge routers managed by SD-WAN Manager. Leadership wants an emailed weekly availability summary without manual logins, while the NOC needs immediate notice of tunnel and BFD failures during business hours. Which monitoring and reporting design satisfies both periodic and real-time visibility needs?
• A bank plans a weekend fabric upgrade from 20.9 to 20.12 across redundant Manager, Validator, Controllers, and 80 WAN Edges with no maintenance window for rollback failures. Compatibility and control-plane stability are mandatory. Which software upgrade sequence from SD-WAN Manager should the change plan enforce?
• A service provider must give its NOC read-only visibility, its senior engineers full configuration rights, and its customer tenants access only to their own VPN data while logging every change. The platform is SD-WAN Manager with multiple organizations sharing controllers. Which user-group and role-based access design enforces the tenancy requirement?
• A healthcare company manages its SD-WAN Manager cluster with 40 operators who already use corporate Okta with MFA. Security requires centralized deprovisioning on job change, no local password vault, and full browser login to the Manager UI without per-device CLI accounts. Which external authentication approach best meets the centralized UI login requirement?
• A logistics firm with 120 WAN Edges schedules a Manager-initiated upgrade from 20.9 to 20.12 overnight. The change window is short, WAN links are unstable, and leadership requires automatic recovery if edges lose contact after the new image boots. Which rollback behavior should the engineer explain to satisfy the recovery requirement?
• A bank NOC needs critical SD-WAN alarms in its Splunk collector and on-call mailbox with severity filtering, but engineers currently log into the GUI to spot outages and miss after-hours events. Audit requires centralized retention and no missed critical faults. Which alarm and forwarding design centralizes critical event visibility for this NOC workflow?
• A university SD-WAN team needstiered Manager access where NOC staff monitor alarms only, senior engineers change policies, and auditors view reports without edits. The solution must enforce least privilege and track actions. Which capability describes user groups and role-based access control in the Manager?
• A NOC developer must poll SD-WAN Manager for alarms every five minutes from a Python service without storing admin passwords, and POST requests fail after login succeeds. The script uses HTTPS to port 8443. Which REST API authentication approach establishes the session token and CSRF protection?
• A managed services team must email weekly application-health and monthly audit summaries to different customers without manual exports. Which reporting capability in SD-WAN Manager automates recurring delivery for these operational needs?
• A NOC engineer builds a Python monitor that polls SD-WAN Manager alarms every five minutes. Security requires authenticated HTTPS calls with protection against cross-site request forgery on POST operations. Which authentication sequence enables the Manager REST API monitoring session correctly?
• A managed service provider monitors 600 WAN Edge routers from a NOC dashboard and needs hourly serial-to-site inventory, interface statistics and tunnel health without manual clicks in SD-WAN Manager. Scripting must scale with pagination and filtering. Which REST API monitoring approach should the automation engineer select for efficient bulk collection?
• A healthcare company uses SD-WAN Manager with three teams: helpdesk needs read-only monitoring, network engineers need policy and template changes, and auditors need reports without configuration rights. A shared admin account violates compliance. Which access control should the administrator configure to enforce least privilege?
• A healthcare network must centralize SD-WAN Manager logins for 40 NOC operators, enforce per-command authorization for CLI users, and offer single sign-on for helpdesk staff using the corporate identity provider. Auditors require distinct protocols for each need. Which external authentication mapping correctly applies RADIUS, TACACS+, and SAML SSO for Manager authentication, monitoring, and reporting access?
• A NOC lead inherits a 200-site fabric with complaints about slow SAP, flapping tunnels and missing edge routers. She opens SD-WAN Manager needing device health, tunnel loss/jitter, and per-application scores in separate views. Which monitoring dashboard combination gives each required visibility?
• An operations team managing 500 SD-WAN sites needs weekly executive summaries of application usage, tunnel health, and security events without manual dashboard exports. Audit also requires archived copies for review. Which reporting capability in SD-WAN Manager meets these needs?
• A university must integrate SD-WAN Manager logins and WAN Edge admin logins with campus RADIUS and TACACS+ servers, preserving local fallback if external servers fail. Auditors require command authorization for network operators. Which external AAA design should the engineer configure to cover Manager and WAN Edge access?
• A NOC team managing 200 WAN Edges reports voice complaints, needs to isolate whether the issue is device health, specific tunnel performance, or application behavior, and wants a quick triage path. Which SD-WAN Manager monitoring dashboard sequence best delivers device, tunnel and application views?
• A university with 60 helpdesk staff needs role-based Manager access, seamless login for faculty using campus identity, and full command accounting for network changes with existing Cisco ISE. Auditors require centralized credentials, MFA-capable SSO, and per-command logs. Which external authentication combination on SD-WAN Manager satisfies these monitoring and access needs?
• A network operations team must upgrade 80 WAN Edges to 20.12.1 during a weekend window using SD-WAN Manager with minimal downtime and easy rollback. Images are ready but not yet staged, and policy requires setting the new version as default only after verified boot. Which software image management sequence from the Manager meets this upgrade requirement?
• An MSP manages 500 WAN Edge routers and needs nightly inventory, tunnel statistics and alarm history exported to its dashboard without manual clicks in SD-WAN Manager. Scripts must scale and reuse authentication efficiently. Which REST API monitoring approach should the engineer implement to satisfy bulk automation needs?
• A NOC developer automates SD-WAN Manager alarms retrieval, must authenticate programmatically, maintain session state across calls, and include forgery protection headers on writes. Which Manager REST API authentication sequence best satisfies this API monitoring requirement?
• A NOC team using SD-WAN Manager must triage a regional voice issue affecting three sites, needing to check device health, then tunnel loss and jitter, then confirm which applications consume bandwidth. The lead wants the fastest native workflow. Which monitoring dashboard sequence from the Manager answers this operational triage need?
• A managed service provider with 400 WAN Edge devices needs nightly inventory, tunnel health, and alarm summaries for customer reports without manual clicks in the GUI. Which REST API monitoring approach should you use for device inventory, statistics and bulk monitoring?
• A healthcare network with 120 WAN Edge routers must forward critical SD-WAN alarms to a central syslog server and SNMP manager, with email alerts for severity-critical events and no flood of minor alarms. Operators use SD-WAN Manager for visibility. Which alarm and notification configuration meets the forwarding requirement?
• An enterprise must upgrade a fabric with clustered SD-WAN Manager, two Validators, two Controllers, and 80 WAN Edges, requiring minimal downtime and rollback safety with image distribution verified first. Which software upgrade sequence should the operations lead approve for safe image management from the Manager?
• A power utility with 80 WAN Edges must centralize logins for audits: network admins need role-based GUI access to the management platform with an external server, and field techs need external logins to routers with local fallback during WAN outages. Which AAA design covers external AAA for the Manager and for WAN Edges?
• A university network team stages five new WAN Edges for dormitory buildings and must standardize them on a tested release. Images must be held centrally, pushed only to those devices, applied without an unplanned reboot, and retained as the boot version. Which software image management sequence should the administrator follow in SD-WAN Manager?