Router Deployment (20%)

ENSDWI · 60 questions

• A branch cEdge has Internet transport in VPN 0 and LAN subnets in VPN 10 with OMP running to the fabric. Users need Internet-bound traffic steered centrally while intra-VPN routes stay isolated and service routes redistribute correctly. Which data-plane routing design correctly links the service side to the overlay?
• A national retailer has 60 stores with MPLS color gold and broadband color blue on each WAN Edge, and policy requires gold TLOCs talk only to gold and blue only to blue to honor transport contracts. Adjacencies are forming across colors today. Which restrict configuration on colors limits tunnel formation across colors as required?
• A regional bank connects branch LANs with eBGP to a core switch in VPN 20 and must advertise those LAN prefixes into the SD-WAN overlay. Templates are mandatory, and the WAN Edge must still form OMP peerings over both transports. Which BGP and overlay advertisement design using feature templates should the engineer deploy for service-side BGP?
• A logistics firm must upgrade two SD-WAN Controllers overnight while 300 WAN Edges keep forwarding voice traffic without drops. OMP peering will flap during the upgrade and the team needs forwarding to continue on stale routes briefly. Which OMP graceful-restart and timer configuration preserves forwarding during controller maintenance?
• A university streams commencement video from a source behind its data-center WAN Edge to receivers at 12 campus WAN Edge sites over the SD-WAN overlay. The transport providers do not carry multicast and several campuses sit behind NAT. Which overlay multicast design delivers the stream to all campus receivers?
• A logistics firm ships 40 unconfigured WAN Edge routers to branches with only DHCP internet and no onsite CLI skills. Each router must power on, reach Plug and Play Connect, authenticate, and become fully managed without manual login. Which zero-touch provisioning flow from device boot describes the correct WAN Edge onboarding sequence?
• An MSP must onboard 200 retail WAN Edge routers with reusable VPN, interface, and routing blocks that assemble differently per store size, plus a guided deployment workflow with configuration preview. Which modeling choice best contrasts configuration groups and feature profiles with legacy device templates?
• A small clinic has one WAN Edge with only a single MPLS circuit, while a neighboring admin router on the same LAN has both MPLS and internet transports. The clinic must use the neighbor's internet without adding a circuit. Which TLOC extension design lets a router borrow another router's transport and how is it configured?
• A manufacturer has dual transports at each plant, MPLS for bulk replication and internet for interactive apps, and needs branch routers to prefer internet TLOCs when reaching the cloud gateway. Which TLOC preference configuration steers path selection toward the destination over internet?
• A campus edge runs EIGRP with two distribution switches in VPN 30 and must share campus subnets with remote sites over SD-WAN. The WAN Edge must keep EIGRP adjacency local while making routes visible to OMP peers. Which EIGRP and OMP redistribution design should the engineer configure?
• An oil-field site has no DHCP, no internet, and no Plug and Play Connect reachability, but the engineer onsite can paste CLI via console to bring one WAN Edge online. The router has its certificate and root CA installed. Which manual bootstrap configuration versus ZTP distinction brings the isolated WAN Edge into the overlay?
• A campus WAN Edge runs OSPF to the LAN in VPN 10 and eBGP to a data-center peer in VPN 20, but remote sites receive every LAN prefix including test subnets. The engineer must limit overlay advertisements to production prefixes. Which OMP redistribution control advertises only intended prefixes into the overlay?
• A retailer has dual-transport branches with MPLS and internet TLOCs and a central policy must keep guest Wi-Fi off MPLS during normal operation while allowing failover if internet is down. Centralized data policy already matches guest traffic. Which control in the policy action steers guest traffic to specific transports?
• A regional retailer is opening 40 stores with identical dual-transport WAN Edge routers, and the operations lead wants junior staff to follow guided steps for onboarding and site setup without editing CLI templates. The deployment must use reusable feature profiles and enforce consistency. Which Manager workflow should the lead select to guide onboarding and site configuration?
• A retailer has 400 spokes with full-mesh policy but most stores rarely call each other, and operations wants fewer idle IPsec tunnels to save resources while keeping direct spoke-to-spoke voice optimal when needed. Spokes already have control connections and data-plane reachability. Which on-demand tunnel behavior achieves direct optimal forwarding only when traffic appears?
• A university streams commencement over IPv4 multicast from the data center to 30 campuses. Campuses run PIM on their LANs, WAN links are mixed internet and MPLS, and the design must carry multicast across the overlay without native multicast on transports. Which multicast support combination should the engineer describe to meet all three facts?
• An enterprise has four diverse transports at each data center edge and wants OMP to load-share to a branch prefix over all healthy paths. The engineer sees only one path installed. Which OMP best-path and multipath behavior explains expanded forwarding over equal-cost paths?
• A logistics firm redesigns its network with data center hubs in Frankfurt and Chicago plus 120 spokes. It needs deterministic spoke-to-spoke paths via hubs, no spoke transit, and survival if one hub or its WAN links fail. Which hub deployment design meets the resiliency and path-control requirement?
• A healthcare group shipped 25 unconfigured WAN Edge routers to clinics with only internet access and DHCP, requiring plug-and-play onboarding with no console access and full Manager control afterward. Certificates must be validated and configuration delivered automatically. Which sequence describes the zero-touch provisioning flow from device boot to a fully managed WAN Edge?
• A data center edge must survive a brief SD-WAN Controller outage and software upgrade without dropping existing overlay data flows. Which OMP graceful restart and timer behavior preserves forwarding during short control-plane interruptions?
• A retail chain streams training video from headquarters to 200 stores over the overlay. The design names two data-center edges as replicators, stores act only as receivers, and PIM runs only on store LANs. Which role behavior should the engineer verify to ensure overlay multicast delivery works as designed?
• A branch WAN Edge has MPLS on ge0/0 and broadband on ge0/1, both in VPN 0. MPLS must carry private TLOC with GRE, broadband must carry public TLOC with IPsec, and only HTTPS and SSH may terminate on the broadband interface. Which transport interface configuration meets the encapsulation and service requirement?
• A bank must onboard 60 identical branches with routed ports, VPNs and security policies, allow one site-specific IP per branch, and minimize future change windows. Engineers have tested feature templates in the lab. Which device-template workflow builds reusable configuration and attaches it correctly to devices?
• A clinic edge has patient VLAN 10 needing Internet via SD-WAN overlay and printer VLAN 20 staying local, but users report VLAN 10 cannot reach the fabric while underlay to the ISP is up. Service VPN 10 and transport VPN 0 exist with correct DIA policy. Which underlay-overlay routing linkage most likely restores VLAN 10 forwarding into the fabric?
• A regional clinic deploys a WAN Edge with a connected LAN in VPN 10, a static route to a printer subnet, and OSPF-learned clinical subnets in VPN 10. OMP must share the LAN and printer routes to remotes but withhold OSPF routes until migration completes. Which OMP redistribution control achieves this selective advertisement?
• A bank manages 300 branches with legacy device templates attached per device, and every WAN interface change forces a full template re-push. The team wants modular reusable blocks for system, transport and service VPNs with separate variables. Which configuration approach should the architect choose to replace legacy device templates?
• A bank migration team standardizes 80 branches with feature templates in SD-WAN Manager but needs per-site OSPF timers and a syslog tweak not exposed in any feature template field. Change control requires reusable structured config with rollback via templates. Which template strategy should the engineer choose to deliver the standardized branch configuration?
• A manufacturer has dual transports MPLS and Internet at a hub, both reaching remote Site 10. Engineering wants Internet preferred for bulk replication traffic to that prefix, with MPLS as backup, without changing system-wide defaults for other sites. Which TLOC preference configuration best influences path selection toward that destination?
• A retail chain must onboard 80 stores with no on-site engineers, strict change windows, and two flagship sites needing custom certificates and static addressing for audit. The lead must choose between ZTP with Plug and Play Connect and manual bootstrap for WAN Edge deployment. Which WAN Edge deployment comparison correctly distinguishes manual bootstrap versus ZTP and Plug and Play Connect?
• A manufacturer uses MPLS private color and internet public color on all WAN Edges. Compliance forbids any tunnel that would bridge private MPLS to internet transport via the fabric, but each color must still mesh fully with the same color. Which restrict-attribute design on colors enforces this tunnel separation?
• A bank is consolidating two data centers and four regional hubs serving 300 branches that need deterministic exit, sub-second failover, and localized policy without full mesh complexity. Architects debate hub roles, redundancy, and peering. Which data center and regional hub deployment consideration correctly applies hub-and-spoke and resiliency for WAN Edge deployment?
• A small clinic has one router with only a private MPLS circuit and a neighboring warehouse router with MPLS plus internet. The clinic must use the warehouse internet for DIA without adding a circuit. Which TLOC-extension design lets the clinic borrow transport correctly?
• A logistics site has MPLS, Internet, and LTE transports. Dispatch traffic must use MPLS primarily with LTE as backup, while guest traffic must use Internet only. Centralized data policy already matches the apps. Which TLOC list design best steers traffic to the specific transports?
• A school district has two WAN Edge routers sharing one LAN gateway address for 300 classroom devices, requiring subsecond failover if the primary access switch link or router fails. Templates must keep both routers consistent. Which VRRP design should the engineer implement on the service side for LAN redundancy?
• A retail chain must onboard 120 stores quickly with consistent WAN, LAN and security settings, but junior staff make CLI errors and skip steps. The lead wants guided tasks with validation and reusable site variables. Which Manager capability should the lead use to streamline repeatable onboarding?
• A data-center Edge receives the same 10.50.0.0/16 prefix from two branches over different transports with identical OMP attributes and loss, latency, and weight. Users expect load sharing while preserving deterministic best-path behavior for unequal paths. Which OMP best-path and multipath outcome applies?
• A retail chain uses 80 spoke stores with dual transports behind a regional hub. Full-mesh tunnels overload small routers, but occasional store-to-store voice needs direct paths. The design requires tunnels to appear only when spoke-to-spoke traffic arrives. Which on-demand tunnel behavior should the engineer configure to meet direct spoke communication?
• A new retail branch receives a factory-default WAN Edge router with its serial added to Plug and Play Connect and DHCP on Internet transport. The branch needs automatic authentication, controller discovery, certificate enrollment and template attachment with no staging. Which ZTP sequence provisions the router from boot to fully managed state?
• A bank must onboard 40 WAN Edge routers with common VPN, routing and security settings plus per-site TLOC colors. The engineer built system, VPN and interface feature templates in SD-WAN Manager and needs consistent push with site variables. Which device template workflow should the engineer perform to complete centralized provisioning correctly?
• A regional bank maintains OMP peering between WAN Edges and two SD-WAN Controllers during a planned controller upgrade, needs forwarding to continue briefly if OMP drops, and wants predictable reconvergence. Which OMP graceful-restart and timer behavior best supports this OMP requirement?
• A new manufacturing site has dual transports for Internet and MPLS, must build IPsec tunnels on each uplink, identify each path correctly, and permit SSH and NTP inbound only on the MPLS interface. Which transport interface configuration correctly implements color, tunnel interface, encapsulation and allowed services?
• A campus edge connects to an OSPF area 0 LAN in VPN 10 with two equal paths and must advertise only the 10.10.0.0/16 summary into the SD-WAN overlay for remote sites. OSPF adjacency is up but remote branches see every /24 instead of the summary. Which OSPF and OMP redistribution control fixes this service-side route advertisement?
• A regional hospital group runs a central records hub with fiber and LTE TLOCs in VPN 20 advertising patient-imaging prefixes. Clinics must send imaging uploads to the fiber TLOC for throughput, fail over automatically to LTE if fiber is unreachable, and require no extra routing policy on clinic routers. Which TLOC preference configuration on the hub best controls path selection toward the destination?
• A mining site has no Internet or DNS for ZTP, strict change control forbids Plug and Play Connect, and a field tech has a console cable plus a USB with certificates. The router must join controllers manually with verifiable bootstrap and minimal exposure. Which bootstrap method contrasts correctly with ZTP and Plug and Play Connect for this offline site?
• A retailer’s operations team uses standardized feature templates in SD-WAN Manager but needs a one-off banner and OSPF cost tweak on ten stores without rebuilding templates. Changes must survive reattaches and stay visible for audit. Which template strategy should the engineer choose to deliver device-specific customization correctly?
• A campus adds SD-WAN with OSPF on the service side and OMP in the overlay. LAN subnets must be advertised into the fabric, remote site prefixes must be injected back to OSPF, and transport interfaces must stay isolated from service routes. Which underlay and overlay interaction should the engineer configure to achieve correct routing exchange?
• A distribution site connects to an eBGP peer AS 65020 in VPN 20 and must advertise its three local aggregates (172.16.0.0/16, 172.17.0.0/16 and 172.18.0.0/16) to remote branches via the overlay while preventing a 192.168.99.0/24 management prefix from leaving the site. BGP is established but all routes appear remotely. Which BGP and overlay advertisement control meets this site requirement?
• A retail chain has 60 stores and two hubs, each with an MPLS interface using color mpls and a broadband interface using color biz-internet. Compliance requires that MPLS TLOCs never form data-plane tunnels to any other color, while broadband TLOCs may tunnel to any color they can reach. Which configuration meets this requirement with no additional policy?
• A logistics firm has dual transports at each branch, MPLS for voice and broadband Internet for bulk data, but video conferencing flaps when both TLOCs are equal cost. Which TLOC list design should you apply in policy to steer traffic to specific transports?
• Two WAN Edges serve a hospital access LAN from the same service VPN and subnet. Nurses require one stable gateway IP during a router reload, with fast failover and consistent service-VPN routing. Which VRRP template design provides LAN redundancy for this service-side requirement?
• A campus WAN Edge connects to legacy EIGRP switches in VPN 10, must advertise three campus subnets to remote sites, and must prevent routing loops when learning OMP routes back. Which configuration approach should the engineer implement to redistribute EIGRP service-side routes into OMP?
• A national retailer is consolidating two data centers as regional hubs for 300 stores in a hub-and-spoke design, requiring continued store-to-DC access if one DC fails and no store-to-store transit through a single point. Budget allows dual routers per DC but not full mesh. Which data center and regional hub deployment approach satisfies resiliency for this hub-and-spoke requirement?
• A logistics firm runs OSPF and connected subnets at 60 sites and must advertise only selected branch prefixes into the SD-WAN overlay while preventing core loopback prefixes from entering OMP. OMP is enabled with default behavior on all Edges. Which control for redistribution into OMP satisfies the selective advertisement requirement?
• A retail store has one router with LTE and a second router with wired broadband only 2 meters away, but pulling a second carrier into both routers is too costly. The engineer wants the LTE-less router to use its neighbor for path diversity. Which TLOC extension design correctly shares transport between the collocated routers?
• A 400-site retail fabric runs full mesh-capable transports, but constant IPsec to every spoke wastes resources and 95% of store-to-store traffic is occasional inventory lookup. The engineer wants tunnels only when needed. Which on-demand tunnel behavior correctly triggers dynamic spoke-to-spoke data-plane tunnels?
• An e-commerce company has four equal-cost MPLS and internet transports at large data centers and needs active-active load sharing across all healthy paths, with fast failover if one degrades. OMP has selected multiple equal paths to key prefixes. Which OMP best-path selection and equal-cost multipath behavior enables the load-sharing requirement?
• A branch WAN Edge has two ISP links that must be distinguished as biz-internet and public-internet colors, carry IPsec with GRE fallback, and allow only HTTPS and SSH for management from the overlay. The engineer must configure the transport interfaces correctly. Which transport interface configuration on the WAN Edge router fulfills this color, encapsulation, and service requirement?
• A university streams lectures to three campuses, sources sit behind service VPNs, the overlay traverses the Internet, and RPT must avoid flooding all sites. Which multicast support approach should the engineer implement in the Cisco SD-WAN fabric?
• A campus edge router connects OSPF Area 0 on the LAN to service VPN 10, with several campus subnets that must appear in OMP for remote branches while preserving OSPF metric type. Which OSPF and redistribution configuration integrates the campus into the overlay?
• A university deploying 80 identical branch routers as WAN Edges needs reusable interface and VPN settings, needs per-site system values, and must minimize per-device CLI. Which template workflow should you use for building a device template from feature templates and attaching it to devices?