CCNP Automation Practice Question
A network engineer is evaluating Cisco SD-WAN (Viptela) for a large enterprise. The engineer needs to automate the deployment of vEdge routers using zero-touch provisioning. Which two components are required to enable zero-touch provisioning for vEdge routers? (Choose two.)
⚠ Common exam trap
It's easy for candidates to confuse the roles of the SD-WAN controllers and assuming that all are required for zero-touch provisioning, or mixing in components from other Cisco solutions.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
vManage NMS
Zero-touch provisioning for vEdge routers requires the vBond orchestrator and vManage. vBond authenticates the vEdge and provides the addresses of the other controllers. vManage then delivers the configuration. vSmart is not required for initial provisioning, though it is needed for control plane functionality. DNA Center and APIC-EM are unrelated to SD-WAN.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
vSmart controller
Why it's wrong here
While vSmart is a critical component for control plane policies and routing, it is not strictly required for zero-touch provisioning itself. The vEdge can be provisioned without vSmart, though it would not participate in the overlay network. Zero-touch provisioning focuses on initial bring-up, which involves vBond and vManage.
- ✓
vManage NMS
Why this is correct
vManage is the management plane that stores device configurations and policies. During zero-touch provisioning, the vEdge router obtains its configuration from vManage after being directed by vBond. vManage is essential for pushing the initial configuration and managing the device thereafter.
- ✓
vBond orchestrator
Why this is correct
The vBond orchestrator is the first point of contact for vEdge routers. It authenticates and orchestrates the initial connection, providing the vEdge with the IP addresses of the vManage and vSmart controllers. Without vBond, zero-touch provisioning cannot occur because the vEdge has no way to discover the other controllers.
- ✗
APIC-EM
Why it's wrong here
APIC-EM is a legacy Cisco controller for enterprise networks, not for SD-WAN. It has been largely replaced by DNA Center. It does not support vEdge zero-touch provisioning. Including APIC-EM would be a misunderstanding of the SD-WAN architecture and its components.
- ✗
Cisco DNA Center
Why it's wrong here
Cisco DNA Center is a separate product for campus and branch automation, not for SD-WAN. It does not participate in vEdge zero-touch provisioning. Using DNA Center in this context would be incorrect because it is not part of the Cisco SD-WAN solution architecture.
About these practice questions
This 350-401 question is part of Courseiva's 1,923-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.