SD-WAN-Engineer · domain
Operations And Monitoring
This domain covers day-two SD-WAN visibility and fault handling on Cisco vManage-managed fabrics. You must read real-time and historical telemetry, interpret control and data plane state, and act on alarms, events, and logs. Questions present operational symptoms and ask which menu, command, or recovery action applies.
Focused practice
Practice Operations And Monitoring questions
Scored sessions drawing only from this domain — pick a length below.
Start 20-question practice test →What this domain covers
What to know about Operations And Monitoring
Be able to open the right vManage Monitor view, read BFD/OMP and application-aware routing telemetry, and choose the correct remediation or HA action. The critical skill is separating overlay symptoms from underlay causes before changing policy or transport.
Navigating vManage Monitor menus for real-time application performance and path quality per site
Interpreting BFD, control connections, and OMP peer state to isolate tunnel flapping
Using alarms, events, and audit logs to trace configuration and reachability faults
Applying HA actions such as soft shutdown and understanding resulting failover behavior
Watch out for
Common Operations And Monitoring exam traps
- ▸Confusing underlay transport health with overlay tunnel state; BFD flaps can persist on stable circuits due to color, TLOC, or policy mismatches
- ▸Assuming application-aware routing always selects the preferred path; local exit, SLA class, and tunnel availability can override intent
- ▸Treating soft shutdown as a full power-off; it gracefully drains and fails over rather than immediately halting the device
Question index
All Operations And Monitoring questions (47)
Click any question to see the full explanation, or start a practice session above.
Where do you check the status of active control connections in vManage?
Easy2Which menu path is used to view the real-time tunnel statistics for a specific vEdge router?
Easy3A junior engineer needs to confirm that a specific branch router's control connections to all controllers are currently established and encrypted. Which vManage view should the engineer open for that single device to see the state of each control connection and the TLOC it uses?
Easy4Where do you go in vManage to generate a report on historical bandwidth utilization for a specific site?
Easy5During an incident, an engineer observes that a WAN edge device is dropping traffic on a specific tunnel, and wants to verify the BFD session state and the measured loss and latency for that tunnel. Which operational command on a Cisco IOS XE SD-WAN device provides this per-tunnel BFD detail?
Hard6Which dashboard component in vManage provides an 'at-a-glance' health score for the entire SD-WAN fabric?
Easy7A network administrator is troubleshooting why a specific application flow is being routed over a less desirable WAN link despite the configured application-aware routing policy preferring a different link. The administrator has verified that the application is recognized correctly. Which vManage monitoring tool should be used to examine the per-flow path selection and the reason for the chosen path?
Hard8A network administrator needs to generate a report that shows the top ten applications by bandwidth consumption over the past week for a specific site. Which vManage feature should be used?
Medium9An engineer is designing monitoring for a dual-router branch where each router has two WAN transports. The requirement is to detect a degradation on a single transport before end users report poor application experience, and to distinguish a transport-wide problem from a single-site problem. Which two capabilities of the SD-WAN monitoring stack should be used to meet these requirements? (Choose two.)
Hard10A network operations engineer needs to confirm whether the OMP routes advertised by a specific branch vEdge have been received by the vSmart controller and propagated to other sites. The engineer is already logged into the CLI of the vSmart controller. Which command should be used to display the OMP routes received from that branch?
Medium11A network operations team is using Cisco vManage to manage a large SD-WAN fabric. They need to view a real-time, hop-by-hop path trace between a branch router and a data center application server to pinpoint where latency is being introduced. Which vManage feature should they use to capture this information?
Medium12A network administrator is troubleshooting an SD-WAN issue where a branch site's voice traffic is experiencing poor quality. The administrator suspects that the issue is related to the Bidirectional Forwarding Detection (BFD) sessions used for Application-Aware Routing. Which vManage monitoring view should the administrator check to see the BFD session status and performance metrics for the tunnels from that branch?
Hard13You have a DCI configuration where two data centers are connected via a dedicated link. You want to ensure the DCI link is only used if the primary WAN transport fails. How do you achieve this?
Hard14An operator must prove to an auditor that traffic from a branch to a business-critical SaaS application used the preferred low-latency transport over the last 24 hours, and that failover to the backup transport occurred only during a documented outage window. Which vManage monitoring capability provides the per-application, time-correlated evidence needed?
Hard15Which TWO features are included in the vManage 'Monitor' menu?
Easy16A network operations engineer is troubleshooting a Cisco SD-WAN overlay where a branch site's WAN Edge router has lost its control plane connectivity to the vSmart controllers. The engineer runs the command `show control connections` on the WAN Edge and sees that all control connections are in a 'connect' state rather than 'up'. Which action should the engineer take first to diagnose the issue?
Medium17A junior engineer wants to quickly confirm whether a specific WAN edge device has established control connections to all three controller roles (vBond, vSmart, and vManage) after onboarding. Which vManage location provides this per-device control connection status view?
Easy18A network administrator is troubleshooting a performance issue where voice traffic is being routed over a less optimal path despite a better path being available. The administrator has verified that the application-aware routing policy is correctly configured to prefer the lower-latency path for voice traffic. Which action should the administrator take next to identify the cause?
Medium19When configuring Data Center Interconnect (DCI) between two sites, you notice that routing loops are occurring. What is the most effective way to prevent this in a dual-homed DCI scenario?
Medium20Which dashboard provides the most detailed information regarding the health of individual tunnels within an SD-WAN fabric?
Easy21An operations team is investigating why a specific application flow between two branches is taking a suboptimal path through a hub site. They suspect the application-aware routing policy is not steering the flow as intended. Which vManage operational view should the engineer use to examine the per-flow path chosen by the SD-WAN fabric for this traffic?
Hard22If a device is stuck in 'In-Progress' during a template push, what is the first troubleshooting step?
Medium23A network engineer is troubleshooting an SD-WAN overlay where a branch router's BFD sessions to two WAN transports keep flapping every few minutes. The engineer suspects the issue is related to the BFD hello interval and multiplier settings configured in the vManage feature template. Which CLI command on the branch router displays the current BFD session state and the negotiated transmit/receive intervals for each WAN transport?
Medium24Which THREE OMP attributes can be used to influence path selection for DCI?
Hard25A network engineer is validating the health of an SD-WAN fabric after a controller upgrade. The engineer needs to verify that the control plane and data plane are operating correctly across all devices. Which two vManage monitoring screens should be checked to confirm that all control connections are up and that the data plane tunnels are established? (Choose two.)
Medium26A network engineer is configuring a Cisco SD-WAN solution with two vSmart controllers in a high-availability pair. The engineer wants to ensure that if one vSmart controller fails, the WAN Edge devices automatically switch to the other controller without manual intervention. Which mechanism should the engineer verify is properly configured?
Hard27A network administrator is investigating why application traffic from a branch site is being routed over the less-preferred MPLS transport instead of the local broadband circuit, even though the application-aware routing policy is configured to prefer broadband for that application. The administrator has already verified that the application is correctly identified and that both TLOCs are up. Which vManage monitoring view should the administrator check first to see the per-application path selection decisions and the reason a particular path was chosen?
Hard28Which TWO indicators would lead you to believe that a site's WAN transport is oversubscribed?
Medium29A network architect is reviewing the SD-WAN fabric's high availability design. The architect wants to ensure that if a vSmart controller becomes unavailable, the WAN Edge routers continue to forward traffic without interruption. Which statement accurately describes the behavior of WAN Edge routers when a vSmart controller fails in a multi-controller deployment?
Hard30An SD-WAN engineer is configuring syslog and SNMP traps for proactive monitoring of WAN Edge devices. The engineer wants to ensure that critical events such as control connection failures and BFD session flaps are reported to the central monitoring server. Which two actions must be performed on the WAN Edge devices to achieve this? (Choose two.)
Medium31A network engineer needs to monitor the health of an SD-WAN fabric and wants to receive alerts when any WAN Edge device loses its connection to the vSmart controller for more than five minutes. Which vManage feature should the engineer use to configure this alert?
Medium32A help desk technician reports that users at a remote site are experiencing slow access to a SaaS application. The SD-WAN engineer wants to quickly verify whether the issue is due to high latency on the WAN transport or due to packet loss. Which vManage monitoring dashboard provides a real-time view of latency, jitter, and packet loss per tunnel and per application?
Easy33A branch router shows its OMP peerings to the vSmart controllers as up, but routes learned from other sites are not appearing in its routing table, and the overlay has stopped forwarding between sites. The engineer suspects the data plane rather than the control plane. Which check best isolates whether the issue is a data-plane tunnel problem rather than an OMP or routing-policy problem?
Medium34Which TWO dashboards are most useful for a daily operational health check?
Easy35A network engineer is troubleshooting an issue where a vEdge device shows as unreachable in vManage, but the device is still forwarding traffic. The engineer suspects a problem with the control plane. Which CLI command on the vEdge should be used to check the status of its control connections to the vSmart controllers?
Medium36A network engineer is analyzing a recurring issue where a specific site experiences intermittent packet loss on its WAN circuit. The engineer wants to determine whether the packet loss is occurring on the underlay or within the overlay tunnel. Which vManage monitoring feature provides the most direct insight into this?
Hard37A network operations team is using Cisco vManage to monitor the health of their SD-WAN fabric. They want to create a custom dashboard that provides a quick overview of the most critical operational metrics for daily health checks. Which three widgets should they include to effectively monitor the overall health and performance of the SD-WAN fabric? (Choose three.)
Hard38An engineer is troubleshooting why a WAN edge device shows an out-of-sync state with the vSmart controller in vManage, even though the control connection appears to be up. Which TWO conditions should the engineer verify to explain an out-of-sync policy or configuration state? (Choose two.)
Medium39A network administrator needs to monitor real-time application performance and path quality metrics for a specific site in Cisco vManage. Which menu should the administrator navigate to?
Easy40You are troubleshooting an SD-WAN environment where a branch site's vEdge reports that the BFD sessions to the remote data center are flapping every few minutes. The underlay transport is stable, and the WAN interface counters show no errors. You run 'show tunnel statistics' and observe periodic drops in the tunnel. Which action should you take FIRST to isolate the cause?
Medium41An engineer is analyzing an application-aware routing policy on a Cisco SD-WAN fabric. The policy is configured to steer business-critical traffic based on the best path according to BFD probes. After a recent change, the engineer notices that traffic is being forwarded over a path that has a higher latency than an alternative path, even though the BFD probes indicate the alternative path is better. The engineer verifies that the BFD sessions are up and the policy is applied to the correct VPN. What is the most likely cause of this behavior?
Medium42An engineer needs to view real-time application-aware routing statistics for a specific site in vManage. Which menu path should the engineer use?
Easy43A network administrator is troubleshooting a performance issue where voice traffic is being routed over a less optimal path despite a better path being available. The administrator suspects that the Application-Aware Routing policy is not functioning as intended. Which two actions should be taken to verify that the policy is correctly applied and the SLA is being met? (Choose two.)
Hard44A network operations team wants to proactively detect and alert on control-plane issues in their Cisco SD-WAN fabric. They plan to use vManage alarms. Which TWO alarm types are directly related to control-plane connectivity? (Choose two.)
Hard45You have configured two different DCI paths. You want to load balance traffic across both paths. What OMP configuration must be set?
Hard46When performing a 'Soft Shutdown' on an HA device, what is the expected behavior?
Medium47A network operations team is troubleshooting an intermittent voice-quality complaint at a branch. In vManage they open the Troubleshooting pane for the affected device and run a bidirectional application-aware traffic flow test between the branch and the voice gateway. The test completes successfully, but the team wants to confirm which physical WAN transport and which local interface the simulated flow actually traversed. Where should they look in the test results?
MediumOther domains
All SD-WAN-Engineer exam domains
Frequently asked questions
- What does the Operations And Monitoring domain cover on the SD-WAN-Engineer exam?
- Be able to open the right vManage Monitor view, read BFD/OMP and application-aware routing telemetry, and choose the correct remediation or HA action. The critical skill is separating overlay symptoms from underlay causes before changing policy or transport.
- How many questions are in this domain?
- This page lists all 47 Operations And Monitoring questions in the SD-WAN-Engineer question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
- What is the best way to practise this domain?
- Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
- Can I practise only Operations And Monitoring questions?
- Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.