answers to sdwan exp

Prévia do material em texto

<p>If ECV-3 connects a service provider's BGP gateway router, which type of peer router should you configure it to be?</p><p>PE-router</p><p>Branch router</p><p>What is the default action for traffic flowing between two different security zones?</p><p>Deny</p><p>Permit</p><p>A manual route policy can be used if you have specific traffic you want to drop.</p><p>TRUE</p><p>FALSE</p><p>Which interface must you disconnect in order to manage an EdgeConnect using a loopback interface?</p><p>mgmt1</p><p>wan1</p><p>wan0</p><p>mgmt0</p><p>The Routing Segmentation (VRF) feature is enabled by default.</p><p>TRUE</p><p>FALSE</p><p>What does the Harden FW Mode setting mean?</p><p>Only DHCP, DNS and Cloud Portal connections are permitted as passthrough.</p><p>Only passthrough traffic to another EdgeConnect will be allowed blocking everything else.</p><p>No traffic of any kind is permitted unless the EdgeConnect is licensed.</p><p>Each Business Intent Overlay has its own independent IP SLA related to reachability for local internet breakout.</p><p>TRUE</p><p>FALSE</p><p>Which of these is a default destination for the global IP SLA rule that all BIOs use for local internet breakout?</p><p>sp-ipsla.silverpeak.cloud</p><p>www.silver-peak.com</p><p>portal.silverpeak.cloud</p><p>Whenever a hub readvertises a route it learns from a spoke in its local region to a hub in ANOTHER region, the hub adds 100 to the Subnet Sharing metric.</p><p>TRUE</p><p>FALSE</p><p>Which of the following are true statements regarding policy maps? (Select 2 answers.)</p><p>The default policy in any policy map has the lowest priority.</p><p>Only one policy map can be active at a time.</p><p>Multiple active policy maps can be simultaneously used by an appliance.</p><p>The highest numbered policy map entries are always matched first.</p><p>The preconfigured Security Zones are Default, Trust, and Untrust.</p><p>FALSE</p><p>TRUE</p><p>EC-1 and EC-2 are an EdgeHA pair. The wan0 interface of EC-1 connects to an MPLS service provider. The wan0 of EC-2 connects to an internet service provider. When local internet breakout traffic enters the LAN interface of EC-1, at which points does NAT occur? (Select 2 answers.)</p><p>The HA interface of EC-2.</p><p>The HA interface of EC-1.</p><p>The wan0 interface of EC-1.</p><p>The wan0 interface of EC-2.</p><p>Whenever a hub readvertises a route it learns from a spoke in its local region to a hub in ANOTHER region, the hub adds 100 to the Subnet Sharing metric.</p><p>TRUE</p><p>FALSE</p><p> When you have disabled regional routing, hubs automatically readvertise routes they learn from the spokes in their local region to other hubs in the SAME region.</p><p>· FALSE​​</p><p> For an EdgeHA pair, which feature can attract LAN traffic to the preferred EdgeConnect appliances? (Select 2 answers.)</p><p>· NAT</p><p>· VRRP​​</p><p> An LACP group appears on the Deployment page as a bonded interface, like blan0 or bwan1.</p><p>· TRUE​​</p><p> EdgeConnect can use Subnet Sharing or iBGP to share route prefixes at the same time.</p><p>· TRUE​​</p><p> Business Intent Overlays are considered transparent and do NOT have to be considered as part of security policy configuration.</p><p>· FALSE​​</p><p> Which of these statements about loopback interfaces are true?</p><p>· They can have the same label but not be in the same firewall zone​​</p><p> Which of the following are true when configuring Routing Segmentation (VRF)?</p><p>· The default firewall zone behavior does not change​​</p><p> When the first device using OSPF on an Ethernet network becomes active, which interface state does it have?</p><p>· Designated Router (DR)​</p><p>How many active Subnet Sharing route maps does an EdgeConnect support?</p><p>2</p><p>10</p><p>1</p><p>You enable BFD for an OSPF area.</p><p>FALSE</p><p>TRUE</p><p>A manual route policy can be used if you want certain traffic to use a specific tunnel.</p><p>FALSE</p><p>TRUE</p><p>Which EdgeConnect interfaces support OSPF? (Select 2 answers.)</p><p>WAN</p><p>LAN</p><p>Managment</p><p>You can configure a static route on an EdgeConnect to only apply to LAN-to-WAN traffic.</p><p>TRUE .</p><p>What is the default action for traffic flowing between two different security zones?</p><p>Deny .</p><p>EC-1 and EC-2 are an EdgeHA pair. The wan0 interface of EC-1 connects to an MPLS service provider. The wan0 of EC-2 connects to an internet service provider. How do the two appliances use these WAN interfaces?</p><p>Each EdgeConnect can use the WAN interfaces of both appliances .</p><p>What does the Find Preferred Route feature identify regarding a destination?</p><p>The route an EdgeConnect uses .</p><p>The preconfigured Security Zones are Default, Trust, and Untrust.</p><p>FALSE .</p><p>When using BGP, an EdgeConnect appliance still requires a local router to forward traffic.</p><p>TRUE .</p><p>Which of the following are true for PC-A connected to lan0 (in Segment-A) to ping PC-B connected to lan0.111 (in Segment-B) on the same appliance? (Select 2 answers.)</p><p>The appropriate prefixes need to be redistributed between the different routing segments.</p><p>A security policy is needed if they are both in the default firewall zone .</p><p>EdgeConnect cannot propagate the AS Path between appliances via Subnet Sharing.</p><p>TRUE .</p><p>What is the goal of Routing Segmentation (VRF)?</p><p>To keep devices and flows separated by routing domains for data security .</p><p>Which statement best describes an EdgeConnect route map?</p><p>They can set the route metric for redistributed routes .</p><p>EC-1 and EC-2 are an EdgeHA pair. The wan0 interface of EC-1 connects to an MPLS service provider. The wan0 of EC-2 connects to an internet service provider. When local internet breakout traffic enters the LAN interface of EC-1, at which points does NAT occur? (Select 2 answers.)</p><p>The wan0 interface of EC-1.</p><p>The wan0 interface of EC-2 .</p><p>All the appliances in a network can simultaneously change to a new IPsec encryption key on a predetermined schedule.</p><p>TRUE .</p><p>Which of these is a type of IP SLA monitor?</p><p>VRRP .</p><p>Subnet Sharing can redistribute routes into which protocol?</p><p>OSPF .</p><p>In which policy map can you configure manual policies?</p><p>QoS policy map .</p><p> You have enabled regional routing. Devices in region A and region B are part of the CriticalApps overlay. The overlay uses a Regional Hub & Spoke topology. Hub A in region A learns a route from a spoke in the same region. Which of these statements is true?</p><p>· The spokes in region B learn the route from hubs in region B with a metric of 100 .</p><p> An EdgeConnect appliance with the FW Mode of Harden on a WAN interface requires an IPsec tunnel to subnet share to another EdgeConnect appliance via that interface.</p><p>· TRUE .</p><p> Which of these statements is a recommended best practice for BGP?</p><p>· Assign a different AS number to all of your EdgeConnect appliances that are at different sites .</p><p> It is necessary to define which interfaces on an EdgeConnect appliance participate in OSPF.</p><p>· TRUE .</p><p> You can manage an EdgeConnect appliance using an orchestrated loopback interface.</p><p>· TRUE .</p><p> WAN-side redirection is always required when you deploy an EdgeConnect out-of-path and have enabled Subnet Sharing.</p><p>· TRUE .</p><p> Which of these are types of EdgeConnect policies? (Select 2 answers.)</p><p>· FEC policies</p><p>· Optimization policies .</p>