Cisco’s DevNet certification program is designed to equip IT professionals with the knowledge and skills required to develop and manage modern network applications. This unique certification route focuses on emerging technologies such as automation, IoT, DevOps, and Webex, and is the first of its kind in the industry. The program offers four certification levels: Associate, Specialist, Professional, and Expert, catering to individuals at different stages of their career. By earning a DevNet certification, IT professionals can demonstrate their expertise and competency in developing and managing modern network applications, and enhance their career prospects in this rapidly evolving field.

Duration: 90 minutes
Languages: English and Japanese
Associated certifications: CCNP Enterprise
Cisco Certified Specialist – Enterprise SD-WAN Implementation

Exam overview

This exam tests your knowledge of Cisco’s SD-WAN solution, including:
SD-WAN architecture
Controller deployment
Edge router deployment
Policies
Security
Quality of service
Multicast
Management and operations

Exam preparation

Official Cisco training
Implementing Cisco SD-WAN Solutions (ENSDWI)
Implementing Cisco SD-WAN Solutions v1.1 (300-415)
Exam Description:
Implementing Cisco SD-WAN Solutions v1.1 (ENSDWI 300-415) is a 90-minute exam associated with the CCNP Enterprise Certification. This exam tests a candidate’s knowledge of Cisco’s SD-WAN solution including SD-WAN architecture, controller deployment, WAN Edge router deployment, policies, security, quality of service, multicast, and management and operations. The course, Implementing Cisco SD-WAN Solutions, helps candidates to prepare for this exam.

The following topics are general guidelines for the content likely to be included on the exam. However, other related topics may also appear on any specific delivery of the exam. To better reflect the contents of the exam and for clarity purposes, the guidelines below may change at any time without notice.

20% 1.0 Architecture
1.1 Describe Cisco SD-WAN architecture and components
1.1.a Orchestration plane (vBond, NAT)
1.1.b Management plane (vManage)
1.1.c Control plane (vSmart, OMP)
1.1.d Data plane (WAN Edge)
1.1.d (i) TLOC
1.1.d (ii) IPsec and GRE
1.1.d (iii) vRoute
1.1.d (iv) BFD
1.2 Describe Cisco SD-WAN Edge platforms and capabilities
1.3 Describe Cisco SD-WAN Cloud OnRamp
1.3.a SaaS
1.3.b IaaS
1.3.c Colocation

15% 2.0 Controller Deployment
2.1 Describe controller cloud deployment
2.2 Describe controller on-premises deployment
2.2.a Hosting platform (KVM and Hypervisor)
2.2.b Installing controllers
2.2.c Scalability and redundancy
2.3 Configure certificates and device lists
2.4 Troubleshoot control plane connectivity between controllers

20% 3.0 Router Deployment
3.1 Describe WAN Edge deployment
3.1.a On-boarding
3.1.b Orchestration with zero-touch provisioning and plug-and-play
3.1.c Data center and regional hub deployments
3.2 Configure Cisco SD-WAN data plane
3.2.a Circuit termination and TLOC-extension
3.2.b Dynamic tunnels
3.2.c Underlay-overlay connectivity
3.3 Configure OMP
3.4 Configure TLOCs
3.5 Configure CLI and vManage feature configuration templates
3.5.a VRRP
3.5.b OSPF
3.5.c BGP
3.5.d EIGRP
3.6 Describe multicast support in Cisco SD-WAN

20% 4.0 Policies
4.1 Configure control policies
4.2 Configure data policies
4.3 Configure end-to-end segmentation
4.3.a VPN segmentation
4.3.b Topologies
4.4 Configure Cisco SD-WAN application-aware routing
4.5 Configure direct Internet access

15% 5.0 Security and Quality of Service
5.1 Configure service insertion
5.2 Describe Cisco SD-WAN security features
5.2.a. Application-aware enterprise firewall
5.2.b IPS
5.2.c URL filtering
5.2.d AMP
5.2.e SSL and TLS proxy
5.3 Describe Cloud security integration
5.3.a. DNS security
5.3.b. Secure Internet Gateway (SIG)
5.4 Configure QoS treatment on WAN Edge routers
5.4.a Scheduling
5.4.b Queuing
5.4.c Shaping
5.4.d Policing
5.4.e Marking
5.4.f Per-tunnel and adaptive QoS

10% 6.0 Management and Operations
6.1 Describe authentication, monitoring, and reporting from vManage
6.2 Configure authentication, monitoring, and reporting
6.3 Describe REST API monitoring
6.4 Describe software image management from vManage

 

QUESTION 1
What are the two advantages of deploying cloud-based Cisco SD-WAN controllers? (Choose two.)

A. centralized control and data plane
B. distributed authentication policies
C. management of SLA
D. infrastructure as a service
E. centralized raid storage of data

Answer: C D

QUESTION 2
An engineer is troubleshooting a certificate issue on vEdge. Which command is used to verify the validity of the certificates?

A. show control local-properties
B. show control summary
C. show certificate installed
D. show certificate status

Answer: A

QUESTION 3
What is a benefit of the application-aware firewall?

A. It blocks traffic by MAC address
B. It blocks traffic by MTU of the packet.
C. It blocks traffic by application.
D. It blocks encrypted traffic

Answer: C

QUESTION 4
When VPNs are grouped to create destination zone in Zone-Based Firewall, how many zones can a single VPN be part of?

A. two
B. four
C. one
D. three

Answer: C

QUESTION 5
Which attributes are configured to uniquely Identify and represent a TLOC route?

A. system IP address, link color, and encapsulation
B. firewall, IPS, and application optimization
C. site ID, tag, and VPN
D. origin, originator, and preference

Answer: A

QUESTION 6
Which device information is requited on PNP/ZTP to support the zero-touch onboarding process?

A. serial and chassis numbers
B. interface IP address
C. public DNS entry
D. system IP address

Answer: A