Architecture

A regional office is being redesigned. It currently has 3 access switches connecting to a pair of distribution switches, which in turn connect to a separate pair of core switches. The network team notes that the entire site fits in a single building with fewer than 400 users, and they want to reduce cost, cabling complexity, and the number of managed devices while maintaining redundancy. Which enterprise campus design change best satisfies these requirements?

A network engineer is deploying QoS on the access layer of a campus network. IP phones connect to access switches, and PCs connect through the phones. The engineer wants to ensure that voice traffic is prioritized while preventing users from manipulating DSCP markings on their PCs to gain unfair bandwidth. Where should the trust boundary be established, and how should PC traffic be handled?

A network engineer is reviewing the QoS policy on a branch router WAN interface. Voice traffic is marked EF, and the following policy-map is applied outbound: policy-map WAN-EDGE class VOICE priority percent 20 class VIDEO bandwidth percent 30 class class-default fair-queue During periods of severe WAN congestion, users report that voice quality is acceptable but a new bulk backup application (which falls into class-default) is being starved of throughput at times, while at other times video streams experience delay. What is the correct interpretation of how this policy handles traffic under congestion?

A network engineer is reviewing the QoS policy on an enterprise WAN aggregation router. A running-config excerpt shows: 'class-map match-all VOICE / match dscp ef'. During troubleshooting, voice packets arriving from an access switch are marked with DSCP value 46, but the engineer notices some voice traffic is not matching the VOICE class. Which statement correctly explains the relationship between the DSCP marking and the class-map match criteria?

A network engineer applies a QoS policy to a WAN sub-interface and needs to verify how the traffic is being conditioned. The running configuration shows: policy-map WAN-OUT / class class-default / shape average 20000000 / service-policy CHILD-QOS. During peak hours, users report that non-priority traffic bursts are being delayed rather than dropped when the link approaches its subscribed rate. Based on this configuration, what behavior is the parent policy producing?

A network engineer is reviewing the QoS configuration on a branch router's WAN uplink, which connects to a service provider with a contracted rate of 50 Mbps on a physical GigabitEthernet interface. The provider drops any traffic exceeding 50 Mbps. During peak hours, users report choppy voice quality and TCP application retransmissions, and the interface counters show a high number of drops on outbound traffic bursts. Which QoS mechanism should the engineer apply on the egress WAN interface to best address this problem?

A network engineer reviews the QoS policy on an enterprise WAN aggregation router. During periods of congestion, users complain that many TCP sessions slow down simultaneously and then recover together, causing throughput to oscillate on the link. The engineer wants to configure a congestion-avoidance mechanism that selectively drops packets before the queue is completely full to prevent this synchronized behavior. Which QoS mechanism should the engineer configure to address this problem?

A network engineer is deploying a Cisco SD-Access fabric for a campus site. Users in the fabric must reach applications hosted in the traditional data center that is outside the fabric, as well as the public internet. The engineer needs to select the fabric device role responsible for connecting the fabric overlay to these external, non-fabric networks and handling the translation between fabric and non-fabric domains. Which fabric role fulfills this requirement?

A network engineer is deploying a Cisco SD-Access fabric for a campus. Wired and wireless endpoints will connect to access-layer switches, and the design must support host mobility and dynamic tracking of endpoint identity-to-location mappings. When an edge node needs to forward traffic to an endpoint whose location it does not yet know, which fabric device role does it query to resolve the destination endpoint's location?

A network engineer is troubleshooting an SD-Access fabric where a client in the 'Employees' overlay network cannot reach a printer in the same subnet located on a different fabric edge node. Packet captures on the underlay show traffic between the two edge nodes is encapsulated. Which encapsulation and identifier does the fabric data plane use to carry this client traffic across the underlay while preserving segmentation?

An enterprise deploys Cisco SD-Access with Cisco ISE integrated into the fabric. A new employee connects a laptop to an access port on an edge node. The network team wants the laptop to be dynamically assigned to the correct virtual network (VN) and Scalable Group Tag (SGT) based on the user's identity, without any static per-port configuration. Which mechanism enables the edge node to apply this dynamic policy after successful authentication?

An engineer is troubleshooting east-west communication in an SD-Access fabric. When an endpoint attached to an edge node needs to reach another endpoint, the edge node must determine which remote fabric device the destination endpoint is currently connected to. Which mechanism does the SD-Access fabric use to resolve the destination endpoint's location so the ingress edge node knows where to forward the encapsulated traffic?

A network architect is deploying a new Cisco SD-Access fabric across a large campus building. The team wants to minimize manual configuration of the physical Layer 3 routed network that carries fabric traffic, and they want Cisco Catalyst Center to automatically discover devices, assign point-to-point routed links, and deploy the routing protocol between fabric nodes. Which SD-Access design approach and protocol should the architect use for the underlay?

A retail company is deploying Cisco SD-Access to a large number of small branch sites, each with only a single switch, a handful of wired hosts, and a few wireless access points. The network team wants to minimize the hardware footprint at each branch while still providing full fabric functionality (edge, control plane, and border services). Which SD-Access deployment approach best fits these small-site requirements?

A network architect is designing connectivity for an enterprise that hosts critical workloads in AWS and Azure. The design must automate the deployment of SD-WAN routers into the cloud provider's virtual networks and extend the SD-WAN fabric to reach cloud-hosted applications with consistent policy. Which Cisco Catalyst SD-WAN feature meets this requirement?

A retail company runs Cisco Catalyst SD-WAN across 40 branch sites. Users at several branches complain that Microsoft 365 performance is inconsistent, even though each branch has both an MPLS transport and a direct internet (DIA) circuit. The network team wants the fabric to continuously measure loss, latency, and jitter to each SaaS application and automatically forward traffic over whichever path currently delivers the best experience for that application. Which Cisco Catalyst SD-WAN capability should they enable to meet this requirement?

A network engineer is deploying a Cisco Catalyst SD-WAN overlay across multiple branch sites. The engineer needs to ensure that the WAN Edge routers can learn overlay routes, TLOCs, and service routes so that data plane tunnels can be established. Which component is responsible for distributing this reachability and control information to the WAN Edge devices?

A network engineer is troubleshooting a Cisco Catalyst SD-WAN deployment. Two WAN Edge (cEdge) routers at different branch sites have successfully registered with the controllers and have exchanged OMP routes. However, users report that traffic between the two branches is failing even though routes are present in the routing table. The engineer needs to verify the component that is responsible for detecting the liveness and quality of the direct site-to-site data plane tunnels. Which mechanism should the engineer investigate?

A network engineer is deploying a new Cisco Catalyst SD-WAN edge router (WAN Edge) at a remote branch. The device is powered on with a factory configuration and connected to the internet transport. During initial provisioning, the engineer needs to understand which component the WAN Edge contacts first to authenticate itself and discover the IP addresses of the other controllers in the overlay. Which controller performs this function?

A network architect is documenting the Cisco Catalyst SD-WAN fabric for a new deployment. She needs to identify which component sits in the branch and data center sites, establishes IPsec data plane tunnels to other sites, and forwards actual user traffic through the overlay. Which SD-WAN component performs this role?