Skip to content
AvailabilitySign inBook a DemoStart free lab
Topic: SD-WANSwitch
All CCNP topics

1.0 Architecture

SD-WAN Practice Questions

Cisco SD-WAN control components, OMP route types, and TLOC identification.

One solved question, so you can see how these are marked

In a Cisco SD-WAN overlay network, which component is responsible for orchestrating initial device onboarding, NAT traversal, and secure authentication between control components?

vBond

The vBond orchestrator performs initial authentication, coordinates NAT traversal, and informs vEdge/cEdge routers about the IP addresses of the vManage and vSmart controllers.

Every question in the set below is marked like this. The answers stay hidden until you pick one.

All 14 SD-WAN questions in this set

Answers and explanations appear when you work through the set above.

  1. In Cisco SD-WAN, which route type carries advertised subnets, LAN interfaces, and static routes learned from local edge routers?

    • TLOC Routes
    • Service Routes
    • OMP Routes
    • BGP VPNv4 Routes

  2. A Cisco SD-WAN Transport Location (TLOC) is uniquely identified by which combination of attributes?

    • System IP, Color, and Encapsulation
    • System IP, Site ID, and Device ID
    • Public IP, Private IP, and Port
    • WAN Interface Name, Bandwidth, and Protocol

  3. How do Cisco SD-WAN controllers and WAN Edge devices establish secure control plane connections across untrusted transport networks?

    • IPsec tunnels negotiated with IKEv2 using pre-shared keys entered manually on each WAN Edge device
    • DTLS or TLS control connections authenticated with X.509 certificates (SUDI on hardware edges)
    • GRE tunnels encrypted with MACsec keys that vBond distributes during initial onboarding
    • L2TPv3 sessions carried over HTTPS, authenticated with the vManage admin credentials

  4. Which Cisco SD-WAN component provides the centralized graphical user interface (GUI) for network operations, configuration templates, multi-tenant management, and real-time alerts?

    • vBond
    • vSmart
    • vManage
    • cEdge

  5. Which Cisco SD-WAN component acts as the initial point of contact for WAN Edge devices, facilitating NAT traversal and facilitating control plane setup with vSmart and vManage controllers?

    • vSmart Controller
    • vBond Orchestrator
    • vManage
    • cEdge Router

  6. In Cisco SD-WAN, what information is advertised using TLOC routes over OMP?

    • Service-side host subnets and VLAN interfaces learned from the LAN side of each WAN Edge.
    • Dynamic routing updates learned from local OSPF and BGP neighbors on the service side.
    • Transport location details: System IP, color, encapsulation, plus NAT public IP and port.
    • Firewall security rules and ACL definitions pushed from vManage for each site's policy.

  7. What protocol is used by default to secure the data plane forwarding plane between Cisco SD-WAN vEdge/cEdge routers across the overlay network?

    • GRE with cleartext payloads, protected only by the MP-BGP control plane
    • IPsec (ESP), with keys distributed by vSmart over OMP instead of IKE
    • SSL/TLS over TCP 443, the same session used by the control connections
    • L2TPv3 pseudowires keyed by the vBond orchestrator at onboarding

  8. In Cisco SD-WAN, which route type is advertised over OMP to inform vSmart controllers about central network services like Firewalls, Intrusion Prevention Systems, or Server Farms available behind local WAN Edge devices?

    • TLOC Routes
    • OMP Routes
    • Service Routes
    • BGP VPNv4 Routes

  9. Which control plane protocol is executed by Cisco SD-WAN vSmart controllers to exchange routing, security, and policy information across the SD-WAN fabric?

    • MP-BGP EVPN
    • Overlay Management Protocol (OMP)
    • Open Shortest Path First (OSPF)
    • Dynamic Multipoint VPN (DMVPN) with NHRP

  10. In Cisco SD-WAN, which three elements uniquely identify a Transport Location (TLOC)?

    • System IP address, Color, and Encapsulation type (IPsec or GRE)
    • System IP address, BGP Autonomous System number, and OSPF Area ID
    • Interface MAC address, VLAN ID, and Subnet Mask
    • Site ID, Organization Name, and vManage UUID

  11. Which component in the Cisco SD-WAN architecture represents the Management Plane, delivering centralized GUI administration, monitoring dashboards, and configuration templates?

    • vBond
    • vManage
    • vSmart
    • WAN Edge

  12. What primary security role does the Cisco vBond Orchestrator perform during the initial boot and onboarding of a WAN Edge device?

    • Serves as the main database that stores long-term NetFlow records exported by every WAN Edge in the fabric.
    • Authenticates edges against the authorized serial number list and points them to vSmart and vManage.
    • Generates the dynamic NAT rules that translate client data traffic exiting to the public internet.
    • Performs stateful packet inspection on all user data payloads passing through the site's edge.

  13. What role does Bidirectional Forwarding Detection (BFD) execute across IPsec data tunnels in a Cisco SD-WAN network?

    • Negotiates the IKEv2 Phase 1 SA lifetime between each pair of WAN Edge routers before the tunnel comes up.
    • Measures loss, latency, jitter, and reachability on each tunnel to drive application-aware routing.
    • Encrypts the control traffic exchanged with vSmart controllers inside each DTLS connection.
    • Distributes OMP route updates between site locations whenever a TLOC changes its state.

  14. What control plane protocol is used by Cisco SD-WAN controllers (vSmart) to distribute routing, security, and policy information to WAN edge devices?

    • BGP
    • OMP
    • LISP
    • OSPFv3