SD-WAN-Engineer Operations And Monitoring Practice Test 4 — 15 Questions

Question 1

You have a DCI configuration where two data centers are connected via a dedicated link. You want to ensure the DCI link is only used if the primary WAN transport fails. How do you achieve this?

Accepted Answer

Configure a lower TLOC preference on the DCI link routes.. OMP TLOC preference can be used to steer traffic to specific paths based on preference values.

Answer

Disable OMP on the primary link.

Answer

Set the OMP cost to zero.

Answer

Use a static route with a high administrative distance.

Question 2

Which menu path is used to view the real-time tunnel statistics for a specific vEdge router?

Accepted Answer

Monitor > Network > [Device] > Tunnel.. Monitor > Network allows you to select a specific device and view its tunnel performance.

Answer

Administration > Settings.

Answer

Tools > Real-time monitoring.

Answer

Configuration > Devices.

Question 3

You have configured two different DCI paths. You want to load balance traffic across both paths. What OMP configuration must be set?

Accepted Answer

Ensure TLOC preference and OMP costs are identical on both paths.. Equal cost multi-path (ECMP) requires identical OMP attributes.

Answer

Disable BFD on both paths.

Answer

Configure a unique site ID for each path.

Answer

Set the OMP administrative distance to 1.

Question 4

Which dashboard provides the most detailed information regarding the health of individual tunnels within an SD-WAN fabric?

Accepted Answer

Tunnel Health Dashboard.. The Tunnel Health dashboard is designed specifically to aggregate and report on tunnel performance metrics.

Answer

Device Health.

Answer

Application Health.

Answer

System Health.

Question 5

Which TWO dashboards are most useful for a daily operational health check?

Accepted Answer

Device Health Dashboard.. The Device Health Dashboard (A) is correct because it surfaces real-time status of managed endpoints—such as compliance state, encryption, and agent connectivity—which is exactly what a daily operational health check needs to catch failing or non-reporting devices. The Network Health Dashboard (D) is also correct because it monitors connectivity, latency, and link/interface status, giving immediate visibility into infrastructure issues that affect operations day to day. Together these two dashboards cover the endpoint and network layers that define routine operational health. SaaS Application Performance (B) is more about application-level user experience and is typically reviewed for service issues rather than a general daily health check. Policy Audit Dashboard (C) is focused on compliance and policy violations over time, not immediate operational status, and Inventory Report (E) is a periodic asset listing rather than a live health indicator.

Answer

SaaS Application Performance.

Answer

Policy Audit Dashboard.

Answer

Inventory Report.

Question 6

Which TWO indicators would lead you to believe that a site's WAN transport is oversubscribed?

Accepted Answer

Increased packet loss during peak business hours.. Option C is correct because when a WAN transport is oversubscribed, the provider's committed rate (CIR) is exceeded during busy periods, causing queue overflow and packet drops that manifest as increased packet loss during peak business hours. Option E is correct because oversubscription leads to bufferbloat and queuing delays in the provider network, producing high latency spikes precisely when demand peaks. Options A and D are not indicators of oversubscription: a constant low device temperature and low CPU utilization on the edge device simply show the local hardware is not stressed and say nothing about WAN circuit saturation. Option B is also not a valid indicator, since consistent BGP session drops typically point to link flaps, keepalive timer mismatches, or routing issues rather than bandwidth oversubscription.

Answer

Constant low temperature on the device.

Answer

Consistent BGP session drops.

Answer

Low CPU utilization on the edge device.

Question 7

Which TWO features are included in the vManage 'Monitor' menu?

Accepted Answer

Device health and status.. The Monitor menu is the central hub for observing the SD-WAN fabric performance.

Answer

User management.

Answer

Policy configuration.

Answer

Software image repository.

Question 8

Which THREE OMP attributes can be used to influence path selection for DCI?

Accepted Answer

TLOC Preference.. TLOC preference, OMP cost, and OMP tag are standard attributes for path manipulation.

Answer

System IP.

Answer

Device Serial Number.

Question 9

A network operations engineer needs to confirm whether the OMP routes advertised by a specific branch vEdge have been received by the vSmart controller and propagated to other sites. The engineer is already logged into the CLI of the vSmart controller. Which command should be used to display the OMP routes received from that branch?

Accepted Answer

show omp routes. On a vSmart controller, OMP routes are stored in the OMP route table. The command 'show omp routes' displays these routes along with attributes like originator, VPN, and path, allowing the engineer to confirm that the branch's routes were received and are being advertised. Other commands show IP or BGP routes, or only control connection status, and do not provide the required OMP route information.

Answer

show control connections

Answer

show bgp routes

Answer

show ip route

Question 10

A network administrator is troubleshooting why a specific application flow is being routed over a less desirable WAN link despite the configured application-aware routing policy preferring a different link. The administrator has verified that the application is recognized correctly. Which vManage monitoring tool should be used to examine the per-flow path selection and the reason for the chosen path?

Accepted Answer

Flow Analytics. Flow Analytics in vManage captures detailed flow records, including the selected path, application identification, and the policy decision that led to that path. It allows drilling down into a specific flow to see why it egressed a particular interface. Other monitoring tools like Interface Statistics, Control Connections, or Alarms lack the per-flow granularity and policy reasoning needed to diagnose application-aware routing decisions.

Answer

Interface Statistics

Answer

Control Connections

Answer

Alarms

Question 11

You are troubleshooting an SD-WAN environment where a branch site's vEdge reports that the BFD sessions to the remote data center are flapping every few minutes. The underlay transport is stable, and the WAN interface counters show no errors. You run 'show tunnel statistics' and observe periodic drops in the tunnel. Which action should you take FIRST to isolate the cause?

Accepted Answer

Run 'show bfd sessions' and 'show tunnel statistics' with timestamps to correlate drops with specific tunnel and path.. The first step in troubleshooting flapping BFD sessions is to gather data that correlates the flapping with specific tunnels and paths. Running 'show bfd sessions' alongside 'show tunnel statistics' with timestamps reveals which TLOC or transport is affected. This evidence-based approach avoids premature configuration changes and directs subsequent remediation to the actual faulty path.

Answer

Increase the BFD hello interval on the tunnel interface to reduce sensitivity to transient latency.

Answer

Apply a QoS policy to prioritize BFD packets on the WAN interface to prevent drops.

Answer

Disable BFD on the tunnel and rely on IPsec DPD to detect failures instead.

Question 12

A network engineer is validating the health of an SD-WAN fabric after a controller upgrade. The engineer needs to verify that the control plane and data plane are operating correctly across all devices. Which two vManage monitoring screens should be checked to confirm that all control connections are up and that the data plane tunnels are established? (Choose two.)

Accepted Answer

Tunnels. To verify control plane health, the Control Connections screen lists all control connections and their states. For data plane health, the Tunnels screen shows the status of data plane tunnels between devices. Together, these screens confirm that both planes are operational after the controller upgrade. Other screens like Interface Statistics, Alarms, or Application Awareness provide different metrics and do not directly show control connection or tunnel status.

Answer

Alarms

Answer

Interface Statistics

Answer

Application Awareness

Question 13

An operations team is investigating why a specific application flow between two branches is taking a suboptimal path through a hub site. They suspect the application-aware routing policy is not steering the flow as intended. Which vManage operational view should the engineer use to examine the per-flow path chosen by the SD-WAN fabric for this traffic?

Accepted Answer

Monitor > Network > WAN Edge > Real Time > Flows. To confirm which path the SD-WAN fabric selected for a particular application flow, the engineer must look at the real-time flow information for the WAN edge. That view correlates flow tuples with the chosen TLOC or path, letting the engineer validate application-aware routing behavior. Control connections, interface counters, and BFD sessions describe other layers and cannot show the per-flow decision.

Answer

Monitor > Network > WAN Edge > Real Time > Interface

Answer

Monitor > Network > WAN Edge > Real Time > BFD Sessions

Answer

Monitor > Network > WAN Edge > Real Time > Control Connections

Question 14

An engineer needs to view real-time application-aware routing statistics for a specific site in vManage. Which menu path should the engineer use?

Accepted Answer

Monitor > Network > App Route. To view real-time application-aware routing statistics in vManage, navigate to Monitor > Network > App Route. This view displays the metrics used by AAR, such as latency, loss, and jitter per application and path, allowing engineers to confirm path selection and troubleshoot routing decisions.

Answer

Monitor > Network > WAN Clarity

Answer

Monitor > Network > Real Time

Answer

Monitor > Network > Applications

Question 15

A network operations engineer is troubleshooting a Cisco SD-WAN overlay where a branch site's WAN Edge router has lost its control plane connectivity to the vSmart controllers. The engineer runs the command `show control connections` on the WAN Edge and sees that all control connections are in a 'connect' state rather than 'up'. Which action should the engineer take first to diagnose the issue?

Accepted Answer

Check the WAN Edge's `show control local-properties` output to confirm the organization name and VBOND/controller IPs are correctly configured.. When control connections are stuck in 'connect', the most likely cause is a misconfiguration of the WAN Edge's control plane parameters such as organization name, VBOND, or controller IPs. The `show control local-properties` command provides a quick snapshot of these settings, allowing the engineer to verify them against the intended configuration before investigating underlay or certificate issues.

Answer

Verify the WAN Edge's system IP is reachable by pinging the vSmart controller's system IP from the WAN Edge.

Answer

Verify that the WAN Edge has a valid certificate and that the root CA is installed.

Answer

Restart the vSmart controller to force a new DTLS session with the WAN Edge.