SD-WAN Architecture & Enterprise Infrastructure

1. Which protocol does SD-WAN use for data plane encryption between edge devices?

IPsec with AES-256-GCM

TLS 1.3 only

MD5 hashing

DES encryption

2. What is the primary advantage of SD-WAN's ability to integrate with cloud services directly?

Reduces latency and bandwidth costs by optimizing cloud traffic paths

Eliminates the need for firewalls

Automatically scales network capacity

Provides unlimited bandwidth to cloud providers

3. In SD-WAN, what is the significance of Application Visibility and Control (AVC)?

Identifies and controls applications for optimized routing and security

Encrypts application payloads only

Limits the number of applications per user

Requires additional licensing per application

4. Which SD-WAN component is responsible for managing device templates and feature configurations?

VManage

VBond

VSmart

VEdge

5. What is the purpose of Centralized Data Policy in SD-WAN?

Allows administrators to define forwarding policies from vManage

Encrypts all data at rest on edge devices

Monitors user bandwidth consumption

Automatically backs up configuration files

6. In Cisco SD-WAN, what does the control plane consist of?

VBond, vSmart, and vManage controllers

Only vEdge routers

Firewalls and IPS devices

Switches and access points

7. Which SD-WAN feature enables traffic optimization by prioritizing critical applications?

Application-aware routing and QoS policies

Automatic link aggregation

Encryption algorithms

DNS resolution

8. What is the primary difference between a hub-and-spoke and mesh topology in SD-WAN?

Hub-and-spoke routes through central hub; mesh allows direct site-to-site tunnels

Mesh topology is more expensive than hub-and-spoke

Hub-and-spoke supports more bandwidth than mesh

Mesh topology requires additional vManage licenses

9. In SD-WAN, how does the system handle traffic when multiple paths are available?

Uses policy-based routing and application-aware selection

Always selects the most expensive link

Randomly distributes traffic across paths

Requires manual path selection by administrators

10. What is the role of Path Quality Monitoring (PQM) in SD-WAN?

Measures and reports link quality metrics to make routing decisions

Encrypts all traffic on poor quality links

Blocks users from accessing slow networks

Automatically upgrades link bandwidth

11. In Cisco SD-WAN, what is the primary role of the vManage controller?

Manages configuration, monitoring, and policy distribution

Encrypts all data plane traffic between sites

Routes user traffic through the WAN

Handles real-time packet forwarding decisions

12. In Cisco SD-WAN, what is the purpose of the vBond Orchestrator's NAT traversal function?

Allows edge devices behind NAT to establish direct tunnels

Encrypts all control plane traffic

Routes traffic through the vManage controller

Manages IP address allocation for edge devices

13. What is a key benefit of SD-WAN's multi-path capability?

Allows simultaneous use of MPLS, broadband, and LTE links

Eliminates the need for QoS configuration

Reduces encryption overhead

Simplifies network management

14. Which security mechanism is used to authenticate SD-WAN edge devices?

Pre-shared keys and X.509 certificates

OSPF authentication only

BGP MD5 signatures

Simple password authentication

15. In SD-WAN, what does OMP (Overlay Management Protocol) do?

Manages underlay network topology and routing

Distributes routes, policies, and device status in the overlay

Encrypts all data plane traffic

Authenticates edge devices to controllers

16. What is the purpose of the vSmart Controller in Cisco SD-WAN?

Distributes policy and routing intelligence to edge devices

Encrypts control plane traffic only

Monitors real-time analytics and reporting

Provides authentication for edge routers

17. Which SD-WAN deployment model uses a centralized vManage for all management functions?

On-premises only

Cloud-hosted only

Hybrid cloud

All of the above

18. In a controller-less SD-WAN deployment, how do edge devices discover each other?

Through a central vManage server

Using direct peer-to-peer discovery with DTLS handshakes

Via DNS lookups only

Through static routing protocols

19. What is the main advantage of SD-WAN's application-aware policy routing?

Routes traffic based on application type and business intent