Software Defined Infrastructure

CCIE · 75 questions

• A fire district is building Cisco SD-Access and must ensure every fabric edge can reach every other fabric node’s underlay IP before any overlay VN comes up. What underlay design requirement does that statement describe?
• A police records bureau will fabric-enable a small annex and must choose between controller LAN automation and a hand-built underlay. Which statement best captures the trade-off?
• A municipal hospital campus must explain to leadership why both LISP and VXLAN appear in the SD-Access fabric story. Which division of roles is accurate?
• A community college district wants payment kiosks micro-segmented inside the SD-Access fabric using scalable group tags. What role do SGTs play in that design?
• A regional planning commission can build one campus fabric now or plan multi-site fabrics tied together later for sister cities. Which design distinction matters most for that choice?
• A 911 PSAP must inventory campus switches in Catalyst Center with working credentials before those devices can be assigned fabric roles. Why is discovery and inventory a prerequisite?
• An election office is assigning SD-Access fabric roles on a county campus. Which mapping of roles to purposes is correct?
• A tax assessor needs to add a new closet switch to an existing SD-Access fabric without rebuilding the campus underlay from scratch. What approach aligns with incremental fabric expansion?
• A building permits desk onboards wired PCs into SD-Access so each authenticates into the correct virtual network based on identity and port assignment. What is the essential onboarding outcome?
• A fleet garage must hand fabric traffic to a traditional non-fabric data center. Which border approach correctly describes an IP transit handoff?
• A wastewater plant must extend one legacy process VLAN into the SD-Access fabric for a phased migration. Which border approach fits that use case while still requiring careful flood-domain planning?
• A stormwater bureau wants OT/SCADA endpoints kept out of the same routed fabric space as office users. Which SD-Access construct provides that macro segmentation?
• A public health clinic places clinicians and guest kiosks in the same Virtual Network but must still block kiosk-to-EHR traffic unless policy allows it. Which fabric capability provides that micro-segmentation?
• An animal-control HQ wants fabric edges to enforce Scalable Group Tags that reflect how each endpoint authenticated. Which companion platform normally classifies those endpoints into SGTs for the fabric to consume?
• After a stadium event, a museums-and-culture department’s wireless clients fail to roam cleanly inside the SD-Access fabric. Which Catalyst Center capability should operators use first to inspect network and client health in context?
• County IT sees intermittent overlay drops for fabric clients while underlay pings between edges succeed at small sizes. Which Assurance-driven conclusion best links those symptoms?
• City public-works needs SD-Access at a small town-hall footprint where collapsing fabric roles onto fewer platforms is acceptable. Which design pattern matches that constraint?
• A municipal library consortium wants LISP map-server/map-resolver services to survive a single control-plane node failure. What redundancy approach aligns with SD-Access fabric design?
• A township board asks why user VLANs in SD-Access terminate at the fabric edge instead of spanning through the campus core. What is the correct explanation?
• A transit authority must offer shared DNS and DHCP to endpoints in multiple Virtual Networks. Which border-oriented pattern addresses that shared-services reachability?
• A water utility wants wireless SSIDs to land clients into the same Virtual Networks and policies used by wired users. What fabric wireless integration concept should guide WLC placement and SSID mapping?
• A school district wants day-0 underlay configuration landed automatically on new access switches before they become fabric edges. Which approach matches that SD-Access operational goal?
• A parks department onboards contractor tablets into the fabric and must ensure they cannot reach finance servers. Which policy approach best expresses that least-privilege intent?
• An emergency-management office operates two city SD-Access fabrics and wants site-to-site fabric connectivity without hair-pinning all inter-site traffic through the data center. Which transit approach targets that goal?
• Before cutover, county courts must confirm the campus underlay can carry fabric overlay traffic. Which MTU validation focus is most appropriate for SD-Access VXLAN encapsulation?
• A city clerk’s office is expanding SD-Access and must onboard badge-authenticated wired PCs first. Which blueprint check best confirms the wired host-onboarding path before wireless expansion?
• An airport authority is designing the civic data-center handoff from SD-Access and must distinguish border responsibilities. Which statement correctly contrasts internal and external border roles at a conceptual level?
• A port authority’s operators struggle to reason about routing tables and policy after dozens of near-duplicate Virtual Networks were created. What VN design hygiene should leadership enforce?
• During a helpdesk escalation, a housing authority needs one laptop’s fabric path and authentication trail quickly. Which Assurance capability best matches that request?
• A sanitation department runs two SD-Access fabrics that may merge later. Which planning practice best reduces renumbering chaos at merge time?
• A fire district is building the SD-Access underlay and wants a stable IGP. Which prefix policy correctly reflects underlay design intent?
• A police records bureau depends on group-based policy across fabric hops. What must remain true for Scalable Group Tag information as traffic traverses the fabric?
• A municipal hospital campus is bringing up SD-Access and wants a safe build order. Which sequencing best matches common fabric deployment practice?
• A community-college host cannot reach a shared service in another VN even though underlay ping between locators works. Which overlay troubleshooting focus is most appropriate?
• A regional planning commission is drowning in per-IP extended ACLs for municipal apps and wants a more scalable SD-Access alternative. Which approach best replaces that ACL sprawl?
• A 911 PSAP fabric edge shows different VN bindings than Catalyst Center inventory after a weekend of CLI troubleshooting. What should the municipal network team treat as the authoritative fabric inventory source?
• An election office SD-Access fabric must hand off traffic to a traditional WAN edge that is not fabric-aware. Which border design provides IP connectivity without requiring the WAN edge to understand fabric overlays?
• A tax assessor’s SD-Access design must isolate a new third-party appraisal SaaS VRF-style tenancy from staff while still tagging fine-grained roles inside the staff network. When is a new Virtual Network (VN) warranted instead of only adding an SGT inside an existing VN?
• After a mass firmware upgrade weekend, a building permits desk wants to know whether fabric sites recovered cleanly. Which Catalyst Center capability best summarizes post-change site and device health for operators?
• A fleet garage auditor asks for evidence of SD-Access segmentation intent without receiving live ISE policy tree exports. What documentation artifact best captures VN and SGT design for civic compliance?
• A wastewater plant wants dual underlays from each civic site so SCADA can prefer a private MPLS path while guest and SaaS can use public Internet. In Cisco SD-WAN design terms, what should planners assign to distinguish those transports?
• A stormwater bureau is deploying Cisco SD-WAN controllers. Which role assignment correctly matches the control and management plane functions?
• A public health clinic network must onboard a remote library WAN Edge into the SD-WAN overlay. Which onboarding requirement is essential for trust and inventory before the Edge joins?
• An animal control HQ has a WAN Edge behind NAT that cannot present a public TLOC the way a directly addressed Edge can. Which SD-WAN construct helps that constrained attachment still participate in the overlay?
• A museums and culture department asks what OMP contributes in Cisco SD-WAN. Which statement best describes OMP’s role?
• County IT redistributes service-side BGP prefixes into OMP at a regional SD-WAN hub. What concern should engineers prioritize?
• A city public-works team wants repeatable WAN Edge builds across many yards instead of unique CLI pastes. Which SD-WAN configuration approach best supports that scale?
• A municipal library consortium needs voice queues to survive last-mile congestion on each WAN Edge. Which policy scope applies QoS scheduling and queuing on the box locally?
• A township board wants SCADA traffic to prefer MPLS while guest traffic prefers Internet across the SD-WAN overlay. Which policy type primarily influences that overlay pathing from the controllers?
• A transit authority wants Microsoft Teams traffic to move off a transport when loss or latency SLAs are breached. Which SD-WAN feature measures underlay performance and can shift application traffic accordingly?
• A water utility wants audit-sensitive spoke-to-spoke flows forced through a hub while camera streams may use direct tunnels. Which SD-WAN capability expresses those different topology intents?
• A school district wants SaaS and general Internet to exit locally at each branch while private district apps still go to the hub. Which SD-WAN pattern enables that local Internet exit?
• A parks department sees overlay brownouts that correlate with one transport color flapping BFD while vSmart control connections stay up. What is the most accurate first troubleshooting framing?
• An emergency-management office wants MPLS and broadband both forwarding with preference rather than leaving broadband cold until MPLS dies. Which dual-transport approach matches that intent?
• County courts need consistent SD-WAN configs for many fire-station platform models. How should feature templates be used?
• A city clerk’s office is scaling vSmart controllers and needs a clear data-plane versus control-plane boundary. Which statement is correct?
• An airport authority brings up a new WAN Edge and must reach the SD-WAN controllers for the first time. Which controller’s primary role is initial authentication and orchestrating discovery of the other controllers?
• A port authority wants one operational surface for SD-WAN templates, policies, and monitoring. Which component is that single pane of glass?
• A housing authority engineer sees suboptimal SD-WAN paths and inspects OMP routes. Which attributes are most relevant when diagnosing why one path wins over another?
• A sanitation department must ensure WAN Edge to controller sessions cannot be trivially spoofed or read on the underlay. Which control-plane security property should they verify?
• A fire district designs Cisco SD-WAN so transport underlays stay separate from departmental overlay routing. Which model correctly separates those planes?
• A police records bureau needs shared directory services reachable from multiple service VPNs at the hub without merging those VRFs site-wide. Which approach fits Cisco SD-WAN intent?
• A municipal hospital campus must choose where SD-WAN policy decisions are authored versus where they are applied on the Edge. Which statement is accurate?
• A community college district wants to migrate classic DMVPN spokes to SD-WAN Edges without a single cutover for every campus. Which migration approach best matches that goal?
• A regional planning commission needs civic multicast streams to traverse the SD-WAN overlay where design requires it. What should planners treat as a first-order design consideration?
• A 911 PSAP places SD-WAN controllers so Internet-transported Edges can reach them securely. What reachability design principle should lead?
• An election office wants one device template to onboard many firehouse Edges. Which elements are typically supplied as device-specific variables?
• A tax assessor tunes Application-Aware Routing so path switches follow underlay quality. Which telemetry inputs typically drive those AAR decisions on transport colors?
• A building permits desk contrasts SD-WAN control policy with data policy. Which distinction is correct?
• A fleet garage needs a temporary construction-trailer subnet restricted on one Edge without rewriting the district-wide centralized policy. Which mechanism fits?
• A wastewater plant wants a rural clinic’s traffic to prefer a regional hub as its primary exit. Which SD-WAN construct commonly steers that preference?
• A stormwater bureau must renew Edge certificates before expiry. What operational risk does letting Edge certificates expire typically create?
• A public health clinic network maps each underlay attachment for policy matching. What construct identifies those transport attachments in Cisco SD-WAN policy?
• An animal control HQ uses vManage to find sites with a degraded underlay path. Which operational signal commonly highlights that condition for a transport color?
• A museums and culture department needs transit between SD-Access fabric sites across the metro region. How does SD-WAN commonly fit that design?