A startup ordered 15 WAN Edge routers and purchased cloud-hosted controllers for a new overlay with company domain cisco-start.example. The deployment must pass authentication and allow zero-touch onboarding. Which prerequisite set must the engineer gather before onboarding the cloud overlay?
Select an answer to reveal the explanation.
Short Explanation
You'll breeze through zero-touch onboarding when you've got your serials, org name, certificates, Smart Account, and PnP connectivity ready for authentication. It's like packing your passport and boarding pass before you head to the airport.
Full Explanation
The correct prerequisite set succeeds because cloud-hosted overlay onboarding depends on cryptographic trust plus automated claiming, so valid serials bound to the Smart Account, matching organization name and domain, signed certificates for controller and edge authentication, and reachable Plug-and-Play connectivity together satisfy both authentication and zero-touch requirements. An approach centered on public DNS entries for discovery is operationally sound for many VPN and controller designs and helps reachability, yet it fails the authentication concept here because without certificates DTLS and TLS sessions between edge routers and cloud controllers cannot be mutually validated regardless of name resolution. An approach centered on local admin credentials for device access is standard for management and recovery, yet it fails the zero-touch provisioning concept because claiming and license synchronization require the devices to be associated to the Smart Account in the Plug-and-Play portal, which credentials alone cannot replace. An approach centered on planned system IPs for overlay addressing is essential for later routing and OMP operation, yet it fails the cloud claiming concept because the portal authorizes onboarding by organization name matching the enterprise account, so omission prevents serials from attaching to the correct overlay. For exams, distinguish reachability and addressing prerequisites from identity and trust prerequisites, since cloud questions often add plausible management details to hide a missing certificate, account, or organization binding. As a practical check, verify serials in the Plug-and-Play portal under the exact organization, confirm certificate status and expiry, and test portal connectivity from the edge network before shipping devices to site.