SkillTestPro | CCNP 300-415 ENSDWI Practice Test 1

CCNP ENSDWI 300-415 Practice Test 1 (Hard) - SD-WAN Architecture & Control Plane

CCNP Enterprise logo

1 / 10

In the Cisco Catalyst SD-WAN architecture, which plane authenticates WAN Edge routers and controllers and assists with initial connectivity/NAT traversal, but does not participate in ongoing OMP route exchange?

The orchestration plane (vBond)

The forwarding plane, which validates certificates before installing OMP routes

The control plane (vSmart)

The analytics plane (vAnalytics)

The data plane (WAN Edge routers)

The management plane (vManage)

2 / 10

A TLOC (Transport Locator) in Cisco Catalyst SD-WAN is uniquely identified by which three-tuple?

Site ID, color, and encapsulation

Site ID, VPN ID, and color

System IP, color, and encapsulation

Interface name, VPN ID, and color

Public IP, private IP, and color

System IP, VPN ID, and encapsulation

3 / 10

Which OMP route type carries reachability and next-hop TLOC information for a specific transport link, separately from prefix reachability (vRoutes)?

BGP route

Static route

Connected route

Service route

vRoute (OMP route)

TLOC route

4 / 10

What is the purpose of an OMP 'color' attribute assigned to a TLOC?

It sets the DSCP marking applied to all data-plane traffic on that TLOC

It encrypts the OMP control session between vSmart and the WAN Edge

It defines the BFD hello interval for that transport

It specifies the maximum bandwidth allowed on that TLOC

It determines the VPN/VRF a TLOC belongs to

It identifies the transport tunnel type (e.g., mpls, biz-internet, lte) and influences path preference and policy matching

5 / 10

By default, when a WAN Edge router forms two TLOCs using the same 'public-internet' color across two different underlying ISPs, how does OMP treat these TLOCs when building the overlay full mesh?

Both TLOCs are merged under a single carrier attribute and treated as one path

OMP requires renaming one of the TLOCs before either can be advertised

They are automatically bundled into a single logical TLOC for load balancing

The second TLOC is treated as a backup-only path and excluded from ECMP

As two separate, independently advertised TLOCs, each forming its own set of BFD sessions and OMP paths to remote TLOCs

OMP will suppress the second TLOC with the same color to avoid duplicate advertisements

6 / 10

Which data-plane encapsulation is used by default for tunnels between Cisco IOS XE SD-WAN (cEdge) routers within the same organization, and which is used toward Viptela vEdge appliances by default?

IPsec by default between cEdge routers; GRE is not the default and vEdge tunnels also use IPsec by default

GRE by default between cEdge routers; IPsec toward vEdge appliances only

cEdge routers require manual configuration of ESP keys since IPsec is not natively integrated

Both platforms default to no encryption unless IPsec is manually enabled

GRE is mandatory for all SD-WAN data-plane tunnels regardless of platform

IPsec is only supported on vEdge appliances, never on cEdge routers

7 / 10

What does the 'site-id' attribute represent in the Cisco Catalyst SD-WAN architecture?

The chassis ID reported to vManage for inventory tracking

A logical identifier grouping all WAN Edge devices and TLOCs at one physical location for topology, policy, and route-reflection purposes

A globally unique serial number assigned to each WAN Edge hardware device

The VPN/VRF identifier used to segment site traffic

The BGP AS number used for underlay peering at that site

A per-interface identifier used only for QoS queue selection

8 / 10

Which statement correctly differentiates the SD-WAN management plane from the control plane?

The management plane and control plane are merged into a single controller process in all deployment models

The management plane performs BFD liveness detection between WAN Edge routers

The management plane (vManage) provides configuration, monitoring, and template/policy orchestration, while the control plane (vSmart) distributes OMP routing and policy information to WAN Edge devices

The management plane exclusively handles BFD session negotiation between WAN Edge routers

The control plane is only used during initial device onboarding and is not involved afterward

The management plane distributes OMP routes while the control plane only stores device certificates

9 / 10

In a dual-vSmart-controller deployment, how do WAN Edge routers typically form OMP peerings?

WAN Edge routers peer with only the vSmart controller that has the lowest system-ip

WAN Edge routers alternate their single OMP session between controllers every 24 hours

vSmart controllers replicate OMP state to each other and only one is active per site at a time

OMP sessions are proxied through vBond rather than connecting directly to vSmart

WAN Edge routers use OSPF adjacencies between controllers instead of OMP

Each WAN Edge router establishes a separate OMP session (DTLS/TLS) with every reachable vSmart controller for redundancy

10 / 10

What is the primary role of vAnalytics (Cisco SD-WAN Analytics) in the overall architecture?

It replaces vSmart as the control-plane route reflector for large-scale deployments

It functions as the DTLS tunnel termination point for the data plane

It is required for every OMP route exchange between vSmart and WAN Edge routers

It ingests telemetry from the fabric to provide long-term historical analytics, application/circuit quality trending, and predictive insights, separate from real-time device management

It performs certificate signing for WAN Edge device onboarding

It is a mandatory dependency for vBond to authenticate new WAN Edge routers

Your score is

The average score is 0%