SD-WAN-Engineer Operations And Monitoring Practice Test 3 — 15 Questions

Question 1

You are investigating why a vEdge at a branch site is not forming control connections to any vSmart controller. The vEdge has a valid IP address and can ping the vBond address. You run 'show control connections' and see no entries. Which troubleshooting step should you perform NEXT?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Verify that UDP port 12346 is not blocked between the vEdge and the vSmart controllers.. Since the vEdge can reach vBond but has no control connections to vSmart, the most likely cause is that the control connection port (UDP 12346) is blocked. Verifying that this port is open between the vEdge and vSmart is the correct next troubleshooting step.

Answer

Reinstall the vEdge certificate by running 'request certificate install'.

Answer

Check the vEdge's system IP configuration and ensure it is unique and reachable.

Answer

Restart the vEdge's control plane by issuing 'clear control connections'.

Question 2

A network operations team wants to receive an alert when a WAN interface on a branch router exceeds 80% utilization for more than 5 minutes. They are using vManage for monitoring. What is the correct way to implement this?

Accepted Answer

Create a custom alarm in vManage with a threshold on interface utilization and set the duration to 5 minutes.. vManage's custom alarm feature allows you to define thresholds on interface statistics, including utilization, and specify a duration. This directly addresses the requirement to alert when utilization exceeds 80% for 5 minutes. Other methods like SNMP, syslog, or NetFlow are either not native to the router for this purpose or require external components.

Answer

Enable NetFlow on the interface and analyze the flow data in vManage to trigger an alarm.

Answer

Configure SNMP traps on the branch router to send alerts when the interface utilization exceeds 80%.

Answer

Use syslog to send interface utilization messages to a syslog server and set up alerts there.

Question 3

An SD-WAN engineer needs to verify that a specific branch router is receiving the correct application-aware routing policy from the controller. The engineer wants to see the policy as it is currently applied on the device, including any counters or matches. Which vManage or CLI action provides this verification?

Accepted Answer

Use vManage Real-Time Monitoring > Device > Troubleshooting > Policy Report.. The Policy Report in vManage Real-Time Monitoring shows the actual application-aware routing policy applied on a specific WAN Edge device, including match counters and actions. It reflects the runtime state, confirming not only that the policy was received but also that it is being enforced. Configuration comparison and CLI policy display only show intended or received policy, not operational matches.

Answer

Check the control connection status in vManage Monitor > Network > Control Connections.

Answer

Run 'show sdwan policy from-vsmart' on the branch router CLI.

Answer

View the policy in vManage Configuration > Policies and compare the revision number.

Question 4

An engineer needs to verify that the OMP routes from a specific vSmart controller are being received by a vEdge router. Which command on the vEdge router displays the OMP routes learned from a particular vSmart controller?

Accepted Answer

show omp routes vSmart . The command 'show omp routes vSmart ' on a vEdge router allows filtering of the OMP route table by the originating vSmart controller's system IP. This is the most direct way to verify that routes from a specific vSmart are being received. Other commands either show all routes without filtering or provide only summary or peer information, which does not satisfy the requirement.

Answer

show omp peers

Answer

show omp routes

Answer

show omp summary

Question 5

A network operations team is setting up proactive monitoring for their SD-WAN fabric. They want to receive alerts when a WAN Edge router loses its control connection to a vSmart controller for more than five minutes, and also when the BFD sessions on a specific TLOC go down. Which TWO actions must they perform in vManage to accomplish this? (Choose two.)

Accepted Answer

Use the vManage alarm configuration to enable the 'BFD Session Down' alarm and associate it with a notification rule for the specific TLOC.. vManage's alarm and notification framework is the native way to achieve proactive monitoring. Alarms are generated for control connection state changes and BFD session state changes, and notification rules can be attached to those alarms to deliver alerts through configured channels. Enabling the relevant alarms and creating notification rules satisfies both the control connection and BFD monitoring requirements without custom per-device configuration or external polling.

Answer

Schedule a daily report in vManage that lists all control connections and BFD sessions that were down in the last 24 hours.

Answer

Create a custom syslog event filter on each WAN Edge device that matches BFD session state changes and forwards those logs to vManage.

Answer

Deploy a vAnalytics instance and configure it to poll each WAN Edge router every minute for BFD session status.

Question 6

An administrator is investigating why a specific site's WAN Edge router is not receiving any application-aware routing (AAR) policy updates from the vSmart controller. The administrator confirms that the WAN Edge has an active control connection to vSmart. Which additional step should the administrator take to verify that the WAN Edge is receiving AAR policies?

Accepted Answer

Check the WAN Edge's `show policy from-vsmart` command output.. To verify that a WAN Edge has received AAR policies from vSmart, the administrator should use the `show policy from-vsmart` command. This command displays the applied policies, including application-aware routing, and confirms whether the expected policy is present. If it is missing, the administrator can then check vSmart for policy activation and attachment to the site.

Answer

Check the WAN Edge's `show sdwan policy from-vsmart` command output.

Answer

Verify that the WAN Edge has a valid BFD session to the destination.

Answer

Confirm that the vManage server has the correct time zone configured.

Question 7

You are troubleshooting an SD-WAN environment where a vEdge is not receiving any OMP routes from a vSmart controller. The control connection is established. Which TWO actions should you take to troubleshoot this issue? (Choose two.)

Accepted Answer

Check the OMP route table on the vEdge using 'show omp routes' to see if any routes are present.. To troubleshoot missing OMP routes when the control connection is up, first check the vEdge's OMP route table to confirm whether any routes are received. Then verify the vSmart controller's OMP configuration to ensure it is advertising routes to the vEdge's TLOC. These steps isolate whether the issue is on the receiving side or the sending side.

Answer

Verify that the OMP graceful restart timer is configured identically on both vEdge and vSmart.

Answer

Restart the vEdge's OMP process by clearing the control connection.

Answer

Verify that the vSmart controller is configured with the correct site ID and domain ID for the vEdge.

Question 8

A network operations team is using vManage to monitor the health of a large SD-WAN deployment. They want to set up alerts for critical events. Which TWO alarm types can be configured in vManage to notify administrators of potential issues? (Choose two.)

Accepted Answer

OMP route threshold exceeded. vManage provides a set of predefined alarm types that can be configured for notification. Among them are 'Control connection down' and 'OMP route threshold exceeded'. These alarms help administrators proactively monitor the SD-WAN overlay for critical failures and potential misconfigurations. Other options like duplex mismatch, BGP neighbor flap, and CPU threshold are not standard vManage alarm types and would require external monitoring tools.

Answer

CPU utilization exceeding threshold

Answer

Interface duplex mismatch

Answer

BGP neighbor flap

Question 9

A network operations team is troubleshooting a Cisco SD-WAN deployment where several WAN Edge devices are experiencing intermittent control plane flaps. The team suspects that the issue is related to the vBond orchestrator. Which two actions should the team take to verify the vBond's operational status and connectivity? (Choose two.)

Accepted Answer

Check the vBond's `show orchestrator connections history` command output.. To verify vBond's operational status and connectivity, the team should check the current orchestrator connections and their history. The `show orchestrator connections` command displays active connections, while `show orchestrator connections history` provides a log of past connections and flaps. Together, they help identify whether WAN Edge devices are maintaining stable connections to vBond and reveal patterns behind intermittent control plane flaps.

Answer

Review the vBond's `show control connections` command output.

Answer

Verify that the vBond has a valid certificate and that the root CA is installed.

Answer

Verify that the vBond's system IP is reachable from the WAN Edge devices using `ping`.

Question 10

When configuring Data Center Interconnect (DCI) between two sites, you notice that routing loops are occurring. What is the most effective way to prevent this in a dual-homed DCI scenario?

Accepted Answer

Implement Site-of-Origin (SoO) extended communities on the DCI links.. Setting appropriate OMP administrative distances or using site-of-origin tags prevents routing loops in DCI.

Answer

Disable OMP on the DCI interface.

Answer

Increase the OMP cost on all routes.

Answer

Configure a static route to the peer site.

Question 11

Which dashboard component in vManage provides an 'at-a-glance' health score for the entire SD-WAN fabric?

Accepted Answer

Network Health Dashboard.. The Network Health dashboard provides an aggregated score based on various site and device metrics.

Answer

Application Health.

Answer

Control Connections.

Answer

Interface Usage.

Question 12

If a device is stuck in 'In-Progress' during a template push, what is the first troubleshooting step?

Accepted Answer

Check the Device Tasks in vManage to view the specific error log.. The device task view provides specific error messages explaining why a push is stalling.

Answer

Reboot the vManage server.

Answer

Perform a factory reset on the device.

Answer

Change the vBond address.

Question 13

Where do you go in vManage to generate a report on historical bandwidth utilization for a specific site?

Accepted Answer

Monitor > Reports.. In vManage, historical bandwidth utilization reports for a specific site are generated from Monitor > Reports. This section provides pre-built and custom reports on bandwidth, application usage, and other historical data, with filters for site, time range, and other parameters.

Answer

Configuration > Templates.

Answer

Administration > Maintenance.

Answer

Tools > Logs.

Question 14

When performing a 'Soft Shutdown' on an HA device, what is the expected behavior?

Accepted Answer

The device gracefully transitions the active state to the standby device.. A soft shutdown allows the active unit to relinquish its role gracefully to the standby unit.

Answer

The device disables all interfaces without notifying the peer.

Answer

The device immediately reboots.

Answer

The device enters a maintenance mode that clears all routes.

Question 15

Where do you check the status of active control connections in vManage?

Accepted Answer

Monitor > Network > [Device] > Control Connections.. In vManage, active control connections between WAN Edge devices and vSmart controllers (and between vManage/vBond) are viewed under Monitor > Network > [Device] > Control Connections. This view shows the peer system IP, local/remote color, state (up/down), and uptime for each control-plane session. It is the standard operational location for verifying OMP/control-plane reachability in a Cisco SD-WAN fabric.

Answer

Administration > Maintenance.

Answer

Configuration > Policies > Security.

Answer

Tools > Network.