CCNP Virtualization Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  Replacement of all branch routing with static routes only

  Why it's wrong here

  Cisco SD-WAN supports dynamic routing protocols including OSPF, BGP, and OMP in addition to static routes. Limiting branches to static routes would remove the dynamic path selection and failover capabilities that define the solution. This option contradicts how SD-WAN actually operates and would undermine resilience and application-aware routing in a multi-transport branch design.

• ✗

  Elimination of all encryption on the overlay tunnels

  Why it's wrong here

  Cisco SD-WAN secures overlay tunnels with IPsec by default, protecting traffic across untrusted transports. Removing encryption would expose branch and data-center traffic to interception and violate common security requirements. Since confidentiality and integrity are fundamental to the solution's design, this option is factually incorrect and would introduce significant risk instead of providing the capabilities the architect seeks.

• ✓

  Centralized policy management through vManage with templates pushed to edge devices

  Why this is correct

  Cisco SD-WAN centralizes configuration and policy in vManage, which pushes feature templates and centralized policies to vEdge and cEdge devices. This enables consistent, scalable provisioning of thousands of branches without manual CLI configuration. It directly supports the architect's goal of managing branch-to-data-center and cloud connectivity in a unified, policy-driven manner across the overlay.

• ✗

  Mandatory use of MPLS as the only WAN transport

  Why it's wrong here

  Cisco SD-WAN is transport-agnostic and supports MPLS, broadband internet, LTE, and 5G simultaneously. Requiring MPLS alone would eliminate the cost and flexibility benefits of hybrid WAN designs. The solution is specifically designed to operate across multiple heterogeneous transports, so this option misrepresents a core capability and would not satisfy typical branch connectivity goals.

• ✓

  Application-aware routing that selects the best path based on policy and link quality

  Why this is correct

  Cisco SD-WAN uses the Overlay Management Protocol to distribute routing and policy information, and vEdge or cEdge devices continuously measure path characteristics such as latency, jitter, and loss. Application-aware routing then steers traffic over the best available path per application policy. This directly addresses the requirement to optimize branch-to-data-center and cloud connectivity based on real-time link conditions.