SD-WAN-Engineer Practice Test 9 — 10 Questions

Question 1

An engineer is troubleshooting why a WAN edge device shows an out-of-sync state with the vSmart controller in vManage, even though the control connection appears to be up. Which TWO conditions should the engineer verify to explain an out-of-sync policy or configuration state? (Choose two.)

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The device has not yet accepted or applied the pending configuration change.. Out-of-sync status in vManage indicates that the device's applied configuration or policy differs from the intended state. The usual causes are that a template or policy update has not been delivered, or that a pending change has not been accepted and applied. Certificate expiry, version differences, and NTP drift affect connectivity or validity but do not directly produce this configuration mismatch.

Answer

The vSmart controller is running a software version older than the WAN edge device.

Answer

The device's clock is not synchronized with an NTP server.

Answer

The device's certificate has expired and it is operating in a degraded mode.

Question 2

A network operations team is troubleshooting an intermittent voice-quality complaint at a branch. In vManage they open the Troubleshooting pane for the affected device and run a bidirectional application-aware traffic flow test between the branch and the voice gateway. The test completes successfully, but the team wants to confirm which physical WAN transport and which local interface the simulated flow actually traversed. Where should they look in the test results?

Accepted Answer

The Flow Details section of the test output, which lists the ingress and egress interface names and the selected WAN transport for each direction of the simulated flow.. An application-aware flow test returns per-direction forwarding detail, including the egress interface and the WAN transport selected by the data plane. Reviewing that detail confirms the actual path rather than assuming the test used the same transport as production voice. Control connection status, system events, and interface counters describe other layers and cannot identify the transport of the simulated flow.

Answer

The Interface Utilization widget on the Monitor dashboard, which correlates the test timestamp with the busiest interface on the device.

Answer

The Control Connections table on the device dashboard, which shows the system IP of each vBond and the TLOC color currently in use.

Answer

The Events log filtered by severity level major, which records every packet-forwarding decision made by the data plane.

Question 3

A network administrator is troubleshooting an SD-WAN issue where a branch site's voice traffic is experiencing poor quality. The administrator suspects that the issue is related to the Bidirectional Forwarding Detection (BFD) sessions used for Application-Aware Routing. Which vManage monitoring view should the administrator check to see the BFD session status and performance metrics for the tunnels from that branch?

Accepted Answer

Monitor > Network > WAN Edge > Tunnel. The Tunnel view under Monitor > Network > WAN Edge is the correct place to check BFD session status and performance metrics such as latency, jitter, and loss for each tunnel. Since Application-Aware Routing relies on BFD to measure path quality, this view directly supports diagnosing voice quality issues. Other views lack the combination of BFD state and per-tunnel performance data.

Answer

Monitor > Network > WAN Edge > Interface

Answer

Monitor > Network > WAN Edge > Control Connections

Answer

Monitor > Applications > Application-Aware Routing

Question 4

Where do you go in vManage to generate a report on historical bandwidth utilization for a specific site?

Accepted Answer

Monitor > Reports.. In vManage, historical bandwidth utilization reports for a specific site are generated from Monitor > Reports. This section provides pre-built and custom reports on bandwidth, application usage, and other historical data, with filters for site, time range, and other parameters.

Answer

Configuration > Templates.

Answer

Administration > Maintenance.

Answer

Tools > Logs.

Question 5

A network administrator needs to generate a report that shows the top ten applications by bandwidth consumption over the past week for a specific site. Which vManage feature should be used?

Accepted Answer

Tools > Reports. The Tools > Reports feature in vManage is designed for generating historical reports. It allows you to select a time range, site, and specific metrics such as application bandwidth. This directly fulfills the requirement for a weekly top-ten application report. Other monitoring views are more real-time or focus on different metrics.

Answer

Monitor > Network

Answer

Monitor > Applications

Answer

Monitor > Tunnel Health

Question 6

You want to audit who changed a policy on the Controller. Where is this information logged?

Accepted Answer

Controller Audit Logs. The Audit logs record all administrative actions, including policy changes.

Answer

Performance Monitoring

Answer

Security Policy Hits

Answer

System Event Logs

Question 7

You are configuring a path policy to prioritize VoIP traffic. Which specific metric should you leverage to ensure the best call quality when multiple paths are available?

Accepted Answer

Path performance metric. Jitter and latency are critical for voice; the policy uses performance metrics to steer traffic dynamically.

Answer

DSCP marking

Answer

Bandwidth consumption

Answer

Source IP address

Question 8

A branch is failing to load-balance traffic across two ISPs. Both are active. Which setting controls the load-balancing algorithm?

Accepted Answer

Path Selection Policy. The Path Selection policy defines how traffic is distributed across available paths.

Answer

NAT Policy

Answer

Interface Bandwidth Settings

Answer

QoS Policy

Question 9

When troubleshooting QoS, what does a high 'drop' count in the interface statistics imply?

Accepted Answer

Interface congestion. High drop counts indicate that the interface is congested and exceeding the configured bandwidth limit.

Answer

Hardware failure

Answer

Security policy blocking

Answer

The ISP is down

Question 10

During the design of a large-scale data center migration, you need to extend Layer 2 domains across the SD-WAN fabric. Which mechanism supports this requirement?

Accepted Answer

L2-Over-SD-WAN (L2VPN). L2-Over-SD-WAN (L2VPN) is the correct mechanism because it encapsulates Layer 2 frames (Ethernet) inside the SD-WAN overlay tunnels, effectively extending a single broadcast domain across geographically dispersed sites. This allows the data center migration to preserve VLANs, IP subnets, and MAC addresses without re-IPing workloads. It is a native SD-WAN feature designed specifically for Layer 2 extension use cases.

Answer

STP Bridge Group

Answer

Proxy ARP

Answer

BGP EVPN