I85PREP
⌘ K
Aruba SD-WAN (ACSDP) study materials
Aruba SD-WAN (ACSDP) study resources

Aruba SD-WAN (ACSDP) practice questions

One question at a time. Build your Aruba SD-WAN (ACSDP) understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1SD-WAN Architecture and Deployment Planning

In Aruba SD-WAN, which component is responsible for centrally defining and distributing policy and configuration to the branch devices?

  1. The branch gateway data plane
  2. The underlay ISP router
  3. The local DHCP server
  4. The Aruba Central orchestrator Correct answer.

Explanation

Aruba SD-WAN uses a centralized orchestration and management layer, typically Aruba Central, to define policy and push configuration to fabric devices. The branch gateway executes forwarding locally, while ISP and DHCP devices are not part of the SD-WAN control plane.

Question 2SD-WAN Architecture and Deployment Planning

Which statement best describes the role of the underlay in an Aruba SD-WAN deployment?

  1. It assigns overlay endpoint addresses to gateways
  2. It replaces the need for an overlay fabric
  3. It provides the physical transport links that carry overlay tunnels Correct answer.
  4. It terminates all overlay IPsec tunnels

Explanation

The underlay is the physical or provider transport network (MPLS, broadband, LTE) that carries the overlay tunnels between sites. It does not terminate tunnels, replace the overlay, or perform overlay addressing.

Question 3SD-WAN Architecture and Deployment Planning

A design team wants branch traffic to take a preferred path but automatically fail over to a secondary link when latency degrades. Which SD-WAN capability primarily enables this?

  1. DNS round-robin load balancing
  2. Static route redistribution
  3. Application-aware dynamic path selection Correct answer.
  4. Spanning Tree topology changes

Explanation

Dynamic path selection monitors link health (latency, loss, jitter) and steers application traffic to the best available path, providing automatic failover. Static routing, STP, and DNS do not perform health-based per-application steering.

Question 4SD-WAN Architecture and Deployment Planning

Which Aruba SD-WAN design element provides logical separation of traffic for different departments across a shared WAN?

  1. QoS marking
  2. NAT overload
  3. Overlay segmentation Correct answer.
  4. Link aggregation

Explanation

Overlay segmentation creates separate logical topologies or segments so distinct groups can share transport while remaining isolated. QoS, NAT, and link aggregation affect treatment or capacity, not logical separation.

Question 5SD-WAN Architecture and Deployment Planning

When planning a high-availability branch, which design provides gateway redundancy at a single site?

  1. A centralized controller only
  2. Two gateways configured as an HA pair Correct answer.
  3. A single gateway with two WAN links
  4. A single gateway with redundant power supplies

Explanation

An HA pair of gateways provides device-level redundancy so one gateway can take over if the other fails. Redundant links, power supplies, or a controller alone do not provide gateway failover.

Question 6SD-WAN Architecture and Deployment Planning

Which factor is most important when sizing branch gateway throughput for an SD-WAN deployment?

  1. The number of DNS zones hosted
  2. The physical rack unit height of the gateway
  3. The number of VLANs configured
  4. Aggregate encrypted tunnel throughput with services enabled Correct answer.

Explanation

Gateway sizing must account for throughput with encryption and services enabled, since these reduce effective capacity. VLAN count, physical height, and DNS zones are not primary throughput determinants.

Question 7SD-WAN Architecture and Deployment Planning

What is the primary purpose of a zero-touch provisioning workflow in Aruba SD-WAN?

  1. To disable encryption on tunnels
  2. To replace dynamic routing with static routes
  3. To manually configure each device on site
  4. To onboard branch devices automatically using centralized configuration Correct answer.

Explanation

Zero-touch provisioning lets devices contact the orchestration platform and receive configuration automatically, reducing manual on-site effort. It does not disable encryption or change routing protocols.

Question 8SD-WAN Architecture and Deployment Planning

Which overlay topology connects every branch directly to every other branch without traversing a central hub?

  1. Hub and spoke
  2. Full mesh Correct answer.
  3. Point-to-point
  4. Ring

Explanation

A full mesh provides direct branch-to-branch paths, avoiding hub traversal. Hub-and-spoke, point-to-point, and ring topologies route through intermediate nodes.

Question 9SD-WAN Architecture and Deployment Planning

A company has many small branches and a few large data centers. Which overlay design most efficiently balances cost and direct data center access?

  1. Ring topology across all sites
  2. Full mesh between all branches
  3. Point-to-point between each branch pair
  4. Hub and spoke with data centers as hubs Correct answer.

Explanation

Hub-and-spoke with data centers as hubs concentrates traffic efficiently for many small branches while centralizing key resources. Full mesh and point-to-point scale poorly, and ring topologies add unnecessary hops.

Question 10SD-WAN Architecture and Deployment Planning

Which element should be planned first when designing an SD-WAN addressing scheme?

  1. Printer IP reservations
  2. Overlay subnet allocation for gateways and tunnels Correct answer.
  3. Wireless SSID names
  4. Email domain records

Explanation

Overlay addressing must be planned early so gateways and tunnels have unique, non-overlapping subnets. Endpoint reservations, SSIDs, and email records do not define the SD-WAN fabric addressing.

Question 11SD-WAN Architecture and Deployment Planning

Why is it important to verify that branch LAN subnets do not overlap before deploying an overlay?

  1. Overlapping subnets reduce power consumption
  2. Overlapping subnets disable IPsec encryption
  3. Overlapping subnets increase wireless channel interference
  4. Overlapping subnets break routing and policy enforcement across the fabric Correct answer.

Explanation

Overlapping LAN subnets cause ambiguous routing and incorrect policy matching across the fabric. They do not affect wireless channels, encryption, or power.

Question 12SD-WAN Architecture and Deployment Planning

Which planning consideration most directly affects the choice between using internet broadband versus MPLS underlay for a site?

  1. Required SLA and traffic predictability Correct answer.
  2. The color of the rack cabling
  3. The model of desk phones
  4. The number of switch ports in the closet

Explanation

Underlay choice depends on service-level requirements and traffic predictability, since broadband and MPLS differ in guarantees. Cabling, port counts, and phone models do not drive WAN transport selection.

Question 13SD-WAN Architecture and Deployment Planning

What role does a VPNC (VPN concentrator) play in an Aruba SD-WAN fabric?

  1. It terminates overlay tunnels and aggregates branch connectivity Correct answer.
  2. It assigns DHCP leases to branch clients
  3. It performs wireless channel planning
  4. It replaces the need for branch gateways

Explanation

A VPN concentrator terminates overlay tunnels and aggregates branch connections, often at a data center. It does not provide DHCP, wireless planning, or eliminate branch gateways.

Question 14SD-WAN Architecture and Deployment Planning

Which design approach best supports a phased SD-WAN migration from a legacy WAN?

  1. Delay all provisioning until migration completes
  2. Coexist legacy and SD-WAN paths during transition Correct answer.
  3. Disable all legacy links before provisioning
  4. Cut over all sites simultaneously

Explanation

Coexistence lets sites run legacy and SD-WAN paths in parallel, reducing risk during migration. Simultaneous cutover, pre-disabling links, and delaying provisioning increase outage risk.

Question 15SD-WAN Architecture and Deployment Planning

Which factor most influences the number of overlay tunnels a hub gateway must support?

  1. The number of VLANs at the hub
  2. The number of NTP servers
  3. The number of DNS forwarders
  4. The number of spoke sites connecting to the hub Correct answer.

Explanation

Each spoke typically establishes a tunnel to the hub, so the spoke count drives tunnel scale at the hub. VLANs, DNS, and NTP do not determine tunnel counts.

Question 16SD-WAN Architecture and Deployment Planning

What is the purpose of defining business intent or application policies in an SD-WAN design?

  1. To map application traffic to appropriate paths and treatment Correct answer.
  2. To assign MAC addresses to endpoints
  3. To configure spanning tree priorities
  4. To set disk quotas on servers

Explanation

Business intent policies express how applications should be routed and treated, guiding path selection and QoS. MAC assignment, STP priorities, and disk quotas are unrelated.

Question 17SD-WAN Architecture and Deployment Planning

A branch requires local internet breakout for SaaS traffic while keeping corporate traffic on the VPN. Which design decision enables this?

  1. Centralizing all traffic through the data center
  2. Disabling the overlay tunnel entirely
  3. Using only static default routes
  4. Local breakout policy with application-based steering Correct answer.

Explanation

Local breakout with application-based steering sends SaaS traffic directly to the internet while corporate traffic uses the overlay. Centralizing all traffic, disabling tunnels, or using only static defaults does not achieve selective breakout.

Question 18SD-WAN Architecture and Deployment Planning

Which planning artifact documents site-specific WAN links, subnets, and device roles before deployment?

  1. A software license invoice
  2. An incident ticket
  3. A marketing brochure
  4. A site design or low-level design document Correct answer.

Explanation

A site or low-level design document records links, subnets, and device roles to guide deployment. Brochures, tickets, and invoices do not capture design details.

Question 19SD-WAN Architecture and Deployment Planning

Which consideration is critical when planning overlay tunnels across NAT devices?

  1. Removing encryption from the tunnel
  2. Increasing the MTU beyond the physical link
  3. Disabling all keepalives
  4. Ensuring tunnel endpoints can be reached or use NAT traversal Correct answer.

Explanation

NAT can hide tunnel endpoints, so designs must ensure reachability or use NAT traversal mechanisms. Oversized MTU, disabling keepalives, and removing encryption are not valid solutions.

Question 20SD-WAN Architecture and Deployment Planning

What is the primary benefit of using multiple WAN links per branch in an SD-WAN design?

  1. Reduced need for any routing protocol
  2. Improved resiliency and path flexibility Correct answer.
  3. Elimination of all security policy
  4. Guaranteed zero packet loss

Explanation

Multiple links provide redundancy and let the fabric choose paths per application. They do not remove routing needs, eliminate security policy, or guarantee zero loss.

Question 21SD-WAN Architecture and Deployment Planning

When planning QoS across an SD-WAN overlay, which traffic class typically receives the highest priority?

  1. Guest web browsing
  2. Bulk backup replication
  3. Software updates
  4. Real-time voice traffic Correct answer.

Explanation

Real-time voice is latency- and jitter-sensitive, so it typically receives the highest priority. Bulk backup, updates, and guest browsing are delay-tolerant and lower priority.

Question 22SD-WAN Architecture and Deployment Planning

Which statement about overlay encryption in an SD-WAN design is accurate?

  1. Encryption only applies to management traffic
  2. Encryption protects tunnel payloads across untrusted transports Correct answer.
  3. Encryption eliminates the need for authentication
  4. Encryption removes the need for underlay security controls

Explanation

Overlay encryption protects tunneled payloads, particularly over untrusted internet transports. It does not replace underlay controls, is not limited to management traffic, and does not remove authentication.

Question 23SD-WAN Architecture and Deployment Planning

Which approach best supports segmentation of IoT devices from corporate users across an SD-WAN fabric?

  1. Assigning IoT devices to a dedicated overlay segment Correct answer.
  2. Placing IoT devices on the corporate VLAN
  3. Using a single shared credential for all devices
  4. Disabling all inter-site routing

Explanation

A dedicated overlay segment isolates IoT traffic and enforces policy boundaries across sites. Sharing the corporate VLAN, disabling routing, or sharing credentials undermines isolation.

Question 24SD-WAN Architecture and Deployment Planning

Which planning step helps validate an SD-WAN design before full production rollout?

  1. Deploying without a rollback plan
  2. Skipping testing to save time
  3. Running a pilot at a representative site Correct answer.
  4. Relying solely on vendor marketing claims

Explanation

A pilot at a representative site validates design assumptions, policy behavior, and performance before broad rollout. Skipping testing, relying on marketing, or lacking rollback increases risk.

Question 25SD-WAN Architecture and Deployment Planning

How does control-plane centralization affect branch device operation during a temporary loss of connectivity to the orchestrator?

  1. All branch traffic is immediately dropped
  2. The overlay tunnels are permanently deleted
  3. The branch gateway reboots automatically
  4. Existing data forwarding continues using cached configuration Correct answer.

Explanation

Branch gateways typically retain cached configuration and continue forwarding data if the orchestrator is unreachable. Traffic is not immediately dropped, reboots are not automatic, and tunnels are not permanently removed.

Question 26SD-WAN Architecture and Deployment Planning

In Aruba SD-WAN, which component is responsible for establishing and maintaining the overlay tunnels between sites?

  1. The firewall
  2. The VPN concentrator (VPNC) Correct answer.
  3. The orchestration plane
  4. The underlay router

Explanation

The VPNC is the device that terminates overlay tunnels and manages the secure fabric between sites. The underlay router forwards traffic but does not terminate overlay tunnels. The orchestration plane manages configuration and policy but does not handle data-plane tunneling.

Question 27SD-WAN Architecture and Deployment Planning

Which Aruba SD-WAN deployment model places the VPNC in a public cloud region to provide optimal access to cloud-hosted applications?

  1. Headend gateway
  2. Branch gateway
  3. Cloud VPNC Correct answer.
  4. On-premises VPNC

Explanation

A cloud VPNC is deployed in a public cloud region to provide optimal access to cloud-hosted applications. On-premises VPNCs reside in private data centers. Branch and headend gateways are typically located at branch or campus sites, not in public cloud regions.

Question 28SD-WAN Architecture and Deployment Planning

Which Aruba SD-WAN component is responsible for central configuration, monitoring, and policy management?

  1. Aruba Central Correct answer.
  2. Underlay router
  3. Branch gateway
  4. VPNC

Explanation

Aruba Central is the cloud-based management platform that provides central configuration, monitoring, and policy management for Aruba SD-WAN. Branch gateways and VPNCs are data-plane devices that forward traffic. Underlay routers handle WAN connectivity but do not provide central management.

Question 29SD-WAN Architecture and Deployment Planning

Which factor is most important when deciding the number of VPNCs required in an Aruba SD-WAN design?

  1. The number of branch sites
  2. The number of VLANs at each branch
  3. The number of underlay ISPs
  4. The total overlay tunnel capacity and redundancy requirements Correct answer.

Explanation

The number of VPNCs is primarily driven by the total overlay tunnel capacity needed and the redundancy requirements to ensure high availability. The number of branch sites influences capacity but is not the sole factor. Underlay ISPs and VLANs do not directly determine VPNC count.

Question 30SD-WAN Architecture and Deployment Planning

What is the primary purpose of the Aruba SD-WAN orchestration plane?

  1. To provide centralized policy and configuration management Correct answer.
  2. To terminate overlay tunnels
  3. To perform packet encryption
  4. To forward user traffic between branches

Explanation

The orchestration plane provides centralized policy and configuration management, enabling zero-touch provisioning and consistent policy enforcement. Data forwarding, tunnel termination, and encryption are functions of the data plane, not the orchestration plane.

Question 31SD-WAN Architecture and Deployment Planning

When planning an Aruba SD-WAN overlay, which consideration is most critical for ensuring branch-to-branch communication when branches are behind NAT devices?

  1. Using static public IP addresses on all branches
  2. Disabling encryption on overlay tunnels
  3. Ensuring all branches use the same ISP
  4. Configuring NAT traversal (NAT-T) on the VPNCs Correct answer.

Explanation

NAT traversal (NAT-T) allows overlay tunnels to be established when branches are behind NAT devices by encapsulating VPN traffic in a way that traverses NAT. Static public IPs are not always feasible, and using the same ISP or disabling encryption is not required or recommended.

Question 32SD-WAN Architecture and Deployment Planning

Which Aruba SD-WAN design component is responsible for enforcing security policies at the branch?

  1. The underlay switch
  2. The VPNC
  3. The orchestration plane
  4. The branch gateway Correct answer.

Explanation

The branch gateway enforces security policies at the branch, including firewall, IPS, and application control. VPNCs terminate tunnels and may enforce policies at the headend, but branch-level enforcement is done by the branch gateway. The orchestration plane manages policies but does not enforce them in the data path.

Question 33SD-WAN Architecture and Deployment Planning

Which planning activity is essential to ensure that an Aruba SD-WAN deployment can scale to accommodate future branch additions?

  1. Using a single ISP for all branches
  2. Selecting underlay routers with the lowest cost
  3. Designing the overlay with sufficient IP address space and VPNC capacity Correct answer.
  4. Minimizing the number of VLANs per branch

Explanation

Scalability requires planning for sufficient IP address space and VPNC capacity to support future branches. Cost-driven underlay selection, minimizing VLANs, or using a single ISP do not directly address overlay scalability and may introduce limitations.

Question 34SD-WAN Architecture and Deployment Planning

In an Aruba SD-WAN design, what is the role of a headend gateway?

  1. To perform NAT for branch devices
  2. To manage the orchestration plane
  3. To provide local internet breakout at branches
  4. To aggregate VPN tunnels from branches at a data center Correct answer.

Explanation

A headend gateway aggregates VPN tunnels from branches at a data center, providing centralized connectivity to data center resources. Local internet breakout is a branch function, orchestration is managed by Aruba Central, and NAT is typically performed by underlay devices or firewalls.

Question 35SD-WAN Architecture and Deployment Planning

Which factor should be considered when planning the underlay network for an Aruba SD-WAN deployment to ensure optimal overlay performance?

  1. Minimizing latency and packet loss between sites Correct answer.
  2. Disabling QoS on underlay links
  3. Ensuring all underlay links have the same bandwidth
  4. Using a single service provider for all sites

Explanation

Underlay performance directly impacts overlay performance; minimizing latency and packet loss helps ensure optimal overlay operation. Equal bandwidth, single provider, or disabling QoS are not requirements and may not be feasible or beneficial.

Question 36SD-WAN Architecture and Deployment Planning

Which Aruba SD-WAN feature allows a branch to use multiple WAN links simultaneously for traffic forwarding?

  1. Policy-based routing
  2. Dynamic path selection Correct answer.
  3. Static routing
  4. VLAN trunking

Explanation

Dynamic path selection (DPS) enables the branch to use multiple WAN links simultaneously by selecting the best path based on policy and link quality. Policy-based routing can direct traffic but does not inherently provide dynamic multi-link selection. Static routing and VLAN trunking do not provide this capability.

Question 37SD-WAN Architecture and Deployment Planning

When designing an Aruba SD-WAN overlay, which IP addressing scheme is recommended for the overlay tunnels?

  1. Using public IP addresses for overlay tunnels
  2. Using link-local addresses
  3. Using private IP addresses from a dedicated overlay subnet Correct answer.
  4. Using the same subnet as the underlay

Explanation

Overlay tunnels should use private IP addresses from a dedicated subnet to avoid conflicts with underlay or public addressing. Using public IPs, the underlay subnet, or link-local addresses can cause routing conflicts or scalability issues.

Question 38SD-WAN Architecture and Deployment Planning

Which Aruba SD-WAN design consideration is most important for supporting real-time applications such as VoIP across the overlay?

  1. Implementing QoS and dynamic path selection Correct answer.
  2. Maximizing the number of overlay tunnels
  3. Disabling encryption for real-time traffic
  4. Using a single WAN link per branch

Explanation

Real-time applications require QoS to prioritize latency-sensitive traffic and dynamic path selection to avoid degraded links. Maximizing tunnels, using a single link, or disabling encryption do not directly ensure quality and may introduce risks.

Question 39SD-WAN Architecture and Deployment Planning

In a large Aruba SD-WAN deployment with thousands of branches, which design approach helps reduce the load on the orchestration plane?

  1. Using a single VPNC for all branches
  2. Implementing a hierarchical overlay with regional VPNCs Correct answer.
  3. Using static routing for all branches
  4. Disabling encryption on overlay tunnels

Explanation

A hierarchical overlay with regional VPNCs distributes tunnel termination and reduces the load on any single component, improving scalability. A single VPNC for all branches creates a bottleneck, while disabling encryption or using static routing does not address orchestration load.

Question 40SD-WAN Architecture and Deployment Planning

Which factor is most critical when planning the placement of VPNCs in a global Aruba SD-WAN deployment?

  1. Using the lowest-cost cloud provider
  2. Geographic proximity to branches to minimize latency Correct answer.
  3. Maximizing the number of VPNCs per region
  4. Ensuring all VPNCs are in the same data center

Explanation

Placing VPNCs geographically close to branches minimizes latency and improves application performance. Cost, centralizing all VPNCs in one data center, or maximizing VPNC count without regard to proximity can negatively impact performance and efficiency.

Question 41Underlay, Overlay, and Fabric Configuration

In Aruba SD-WAN, which component is responsible for establishing and maintaining the encrypted tunnels that carry overlay traffic between sites?

  1. The SD-WAN gateway (overlay tunnel endpoint) Correct answer.
  2. The underlay router's WAN interface
  3. The DHCP relay agent
  4. The NTP server

Explanation

Overlay tunnels are built between SD-WAN gateways, which encapsulate and encrypt traffic across the untrusted underlay. The underlay simply forwards the encapsulated packets between gateway endpoints.

Question 42Underlay, Overlay, and Fabric Configuration

What is the primary purpose of the underlay network in an Aruba SD-WAN deployment?

  1. To enforce per-application QoS policies
  2. To encrypt and authenticate overlay traffic end to end
  3. To terminate all branch LAN VLANs
  4. To provide the physical and IP transport that carries encapsulated overlay packets Correct answer.

Explanation

The underlay is the transport fabric (physical links, ISP paths, IP reachability) over which the overlay is tunneled. Encryption, QoS, and policy enforcement happen at the overlay/gateway layer, not the underlay.

Question 43Underlay, Overlay, and Fabric Configuration

A branch gateway must form an overlay tunnel to a hub gateway across the internet. Which address must the branch reliably resolve to bring up the tunnel?

  1. The hub's LAN default gateway address
  2. The hub's public (underlay) reachable endpoint address Correct answer.
  3. The branch's own loopback address
  4. The DNS resolver's address

Explanation

To build an overlay tunnel across an untrusted transport, the initiating gateway needs an underlay-reachable address for the remote gateway endpoint. LAN-side or local addresses do not provide cross-internet reachability.

Question 44Underlay, Overlay, and Fabric Configuration

Which statement best describes the relationship between a fabric and an overlay in Aruba SD-WAN?

  1. The fabric is the encryption algorithm; the overlay is the key exchange
  2. The fabric and overlay are interchangeable terms for the same thing
  3. The fabric is the group of gateways and sites managed as one logical network; the overlay is the tunneled connectivity among them Correct answer.
  4. The fabric is the physical cabling; the overlay is the routing protocol

Explanation

A fabric represents the managed collection of gateways/sites forming one logical network, while the overlay is the tunneled data plane connecting those fabric members. They are related but distinct concepts.

Question 45Underlay, Overlay, and Fabric Configuration

In a hub-and-spoke overlay topology, how does traffic typically flow between two spoke sites?

  1. Over the underlay without any encapsulation
  2. Only when both spokes share the same ISP
  3. Through the hub gateway, which forwards it over the overlay Correct answer.
  4. Directly spoke-to-spoke over a dedicated tunnel by default

Explanation

In a classic hub-and-spoke overlay, spokes tunnel to the hub and inter-spoke traffic is forwarded through the hub. Direct spoke-to-spoke paths require additional overlay configuration.

Question 46Underlay, Overlay, and Fabric Configuration

Which interface type on an Aruba SD-WAN gateway is used to connect to the local LAN segment at a branch?

  1. The WAN uplink interface
  2. The tunnel interface
  3. The LAN interface Correct answer.
  4. The loopback interface

Explanation

LAN interfaces connect the gateway to local branch segments, while WAN uplinks connect to the transport. Loopbacks and tunnels serve other roles such as identification and overlay transport.

Question 47Underlay, Overlay, and Fabric Configuration

What does an Aruba SD-WAN gateway use to determine which underlay path (e.g., MPLS vs. internet) a given application flow should take?

  1. The DHCP lease duration
  2. The spanning-tree topology
  3. Overlay policies that classify traffic and select a path Correct answer.
  4. The static ARP table

Explanation

Path selection is driven by overlay policy that classifies traffic (by application, prefix, etc.) and steers it onto a chosen underlay path. ARP, STP, and DHCP are unrelated to policy-based path selection.

Question 48Underlay, Overlay, and Fabric Configuration

Which feature allows an Aruba SD-WAN gateway to monitor underlay path health and react to degradation?

  1. Static routing only
  2. Port mirroring
  3. Path monitoring with SLA-based probes Correct answer.
  4. RADIUS accounting

Explanation

Path monitoring sends probes to measure latency, loss, and jitter so the overlay can react to SLA violations by rerouting traffic. Static routing, mirroring, and RADIUS accounting do not provide this health feedback.

Question 49Underlay, Overlay, and Fabric Configuration

An engineer wants branch traffic destined for a SaaS application to use the local internet link while corporate traffic uses MPLS. Which overlay construct accomplishes this?

  1. Application-aware policy with per-path steering Correct answer.
  2. Disabling path monitoring
  3. A single default route over MPLS
  4. A larger MTU on the internet link

Explanation

Application-aware overlay policy classifies flows and steers each class onto the appropriate underlay path. A blanket default route cannot differentiate application classes.

Question 50Underlay, Overlay, and Fabric Configuration

Two gateways sit behind NAT devices on the internet. What must be accounted for so their overlay tunnel can come up?

  1. The LAN subnets must be identical on both sides
  2. NAT traversal must be supported and the tunnel endpoints must handle address translation Correct answer.
  3. The gateways must share the same public IP address
  4. Spanning tree must be disabled on the WAN

Explanation

When gateways are behind NAT, the overlay must support NAT traversal so encapsulated packets reach the correct translated endpoint. Sharing public IPs, identical LAN subnets, or disabling STP are not requirements and can cause problems.