Free demo
VNX301 Free Demo Questions
A sample from the full question set for this exam.
QUESTION 1 OF 5
You are asked to ensure symmetric traffic flows between two SD - WAN branches. Which feature should be enabled to achieve this objective?
Correct Answer: A
Symmetric Forwarding is the correct Versa SD - WAN feature for ensuring that return traffic between
SD - WAN branches follows the same SD - WAN path on which the forward traffic was received. Versa
documentation for SD - WAN traffic steering describes Symmetric forwarding as the option that
specifies the path for reverse - direction traffic, meaning whether traffic returning from the
destination branch to the originating branch should be sent on the same path on which it arrived. It
further states that enabling symmetric traffic forwarding determines the reverse path for traffic
returning from the destination branch to the originating branch.
This is different from Symmetric Routing, which is a routing design goal or behavior, not the Versa
SD - WAN forwarding - profile feature named in the product documentation. Equal - Cost Multipath can
distribute flows across equal - cost routes, but it does not specifically guarantee that both directions of
the same SD - WAN session use the same path. Packet Striping is used to split or distribute packets
across multiple links for performance, not to enforce bidirectional path symmetry. Therefore, the
verified Versa feature to enable is Symmetric Forwarding.
SD - WAN branches follows the same SD - WAN path on which the forward traffic was received. Versa
documentation for SD - WAN traffic steering describes Symmetric forwarding as the option that
specifies the path for reverse - direction traffic, meaning whether traffic returning from the
destination branch to the originating branch should be sent on the same path on which it arrived. It
further states that enabling symmetric traffic forwarding determines the reverse path for traffic
returning from the destination branch to the originating branch.
This is different from Symmetric Routing, which is a routing design goal or behavior, not the Versa
SD - WAN forwarding - profile feature named in the product documentation. Equal - Cost Multipath can
distribute flows across equal - cost routes, but it does not specifically guarantee that both directions of
the same SD - WAN session use the same path. Packet Striping is used to split or distribute packets
across multiple links for performance, not to enforce bidirectional path symmetry. Therefore, the
verified Versa feature to enable is Symmetric Forwarding.
QUESTION 2 OF 5
Examine the exhibit below. You are onboarding the SOLDEU-R2 branch device using the staging script. You cannot get a VersaProvider-Controller-VR IP address assigned, indicating that the IPsec tunnel to the corrector has not come up. You verified that the cables have been connected to the correct ports. What has caused this issue?
Examine the exhibit below. You are onboarding the SOLDEU-R2 branch device using the staging script. You cannot get a VersaProvider-Controller-VR IP address assigned, indicating that the IPsec tunnel to the corrector has not come up. You verified that the cables have been connected to the correct ports. What has caused this issue?
Correct Answer: D
The issue is caused by specifying the incorrect WAN port in the staging script. In the exhibit, the SOLDEU-R2 branch is physically connected to the Internet cloud through vni-0/0, while vni-0/1 is shown as the inter-device link toward SOLDEU-R1. However, the show interfaces brief output shows that the WAN IP address 192.168.122.121/24 has been assigned to vni-0/1.0, not to the Internetfacing interface. Since the cables are confirmed to be connected correctly, the mismatch must be in the staging script interface selection, not in the cabling. Versa documentation states that during SD-WAN staging, the branch establishes an IKE session with the Controller, and after that the Controller assigns an IP address to the branch device. Versa troubleshooting guidance also states that after transport connectivity to the Controller is established, the branch forms IKE-based IPsec connectivity, and if this succeeds, the ptvi interface toward the Controller comes up. If IKE/IPsec fails, the ptvi interface remains down. Because the staged WAN IP is placed on the wrong VNI interface, the branch cannot reach the Controller over the intended Internet transport, so the Controller tunnel does not come up.
QUESTION 3 OF 5
You are configuring the BGP routing protocol between a Versa Secure SD - WAN CPE with AS number 64514 and two upstream service providers SP1 with AS number 64515 and SP2 with AS number 64519. You want to prefer BGP routes learned from AS 64515 over routes learned from AS 64519. Which BGP path attribute would be used to accomplish this task?
Correct Answer: C
The correct answer is LOCAL_PREF. In BGP, the Local Preference attribute is used inside an
autonomous system to influence which exit path is preferred for outbound traffic. In this scenario,
the Versa Secure SD - WAN CPE receives routes from two upstream service providers, SP1 and SP2. To
prefer routes learned from AS 64515 over routes learned from AS 64519, you would apply a BGP
import or route policy that assigns a higher local preference to routes received from SP1. Versa SD -
WAN design guidance shows this exact routing concept an import policy can manipulate the Local -
Pref attribute to prefer one advertised route path over another. The Versa output examples also
https//www.certs2pass.comdisplay “Local Preference” as a BGP route attribute used in route selection.
MULTI_EXIT_DISC, or MED, is generally used to influence how a neighboring AS enters your AS, not
how your CPE prefers routes learned from different upstreams. ORIGIN is part of BGP best - path
selection but is not normally the administrative tool used to prefer one provider. NEXT_HOP
identifies the next - hop address and does not directly define route preference.
autonomous system to influence which exit path is preferred for outbound traffic. In this scenario,
the Versa Secure SD - WAN CPE receives routes from two upstream service providers, SP1 and SP2. To
prefer routes learned from AS 64515 over routes learned from AS 64519, you would apply a BGP
import or route policy that assigns a higher local preference to routes received from SP1. Versa SD -
WAN design guidance shows this exact routing concept an import policy can manipulate the Local -
Pref attribute to prefer one advertised route path over another. The Versa output examples also
https//www.certs2pass.comdisplay “Local Preference” as a BGP route attribute used in route selection.
MULTI_EXIT_DISC, or MED, is generally used to influence how a neighboring AS enters your AS, not
how your CPE prefers routes learned from different upstreams. ORIGIN is part of BGP best - path
selection but is not normally the administrative tool used to prefer one provider. NEXT_HOP
identifies the next - hop address and does not directly define route preference.
QUESTION 4 OF 5
Examine the exhibit below. The exhibit shows a device group created for a new group of hubs. The device template called “BMBF - TEMPLATE” has an Address object called “Server”. A network administrator creates the Class of Service Template called “Ship - CoS - IT” that has an Address object with the same name. Then it tries to onboard a new device to this device group. Which statement is true about the configuration that this device will have?
Examine the exhibit below. The exhibit shows a device group created for a new group of hubs. The device template called “BMBF - TEMPLATE” has an Address object called “Server”. A network administrator creates the Class of Service Template called “Ship - CoS - IT” that has an Address object with the same name. Then it tries to onboard a new device to this device group. Which statement is true about the configuration that this device will have?
Correct Answer: D
The correct answer is D. In the displayed post-staging template association order, the device template BMBF-TEMPLATE is applied before the QoS service template Ship-CoS-IT. Versa documentation explains that device templates, also called post-staging templates, provide the baseline configuration for devices, while service templates are service-specific configurations that can be applied to device configurations. It also states that service templates are associated with device groups and that, in a device group, the administrator can choose the order in which service templates are applied. Because the QoS template is later in the shown association order, the final merged device configuration uses the Address object definition from the QoS template when the same object name exists in both templates. It does not automatically create two copies of the same Address object, because the object name is the key for the configuration element. It also should not fail merely because the same object name exists in a later template; the merge behavior resolves the effective configuration according to the template order. Therefore, the onboarded hub device receives the Server Address object version from Ship-CoS-IT, the QoS template.
QUESTION 5 OF 5
As an administrator, you are migrating your legacy WAN to Versa Secure SD - WAN without changing the underlay network. You need to ensure that, during the migration process, legacy WAN sites are allowed to communicate with SD - WAN branches. Which two steps should be implemented to accomplish this task? (Choose two.)
Correct Answer: B,C
The correct answers are B and C. During a migration from a legacy WAN, such as MPLS Layer 3 VPN,
to Versa Secure SD - WAN, an SD - WAN gateway is used to allow communication between SD - WAN -
enabled branches and legacy WAN sites. Versa SD - WAN design guidance states that an SD - WAN
gateway allows sites connected to the SD - WAN VPN network to communicate with sites connected
to a legacy MPLS VPN network. It also explains that this gateway facilitates route exchange between
the MPLS underlay network and the SD - WAN VPN network, typically using a dynamic routing
protocol such as BGP.
For this design, the hub or gateway must be configured with the Gateway option for the underlay
transport so it can act as the interconnect point between the legacy and SD - WAN domains. Versa
documentation further describes configuring a BGP peering session on the MPLS transport VR of the
gateway to exchange routes from the MPLS provider to the SD - WAN network, and notes that Director
Workflows can automate this configuration. Spoke - to - Spoke - Direct is not sufficient for legacy
interconnect, and SD - WAN traffic steering policies do not advertise routes.
to Versa Secure SD - WAN, an SD - WAN gateway is used to allow communication between SD - WAN -
enabled branches and legacy WAN sites. Versa SD - WAN design guidance states that an SD - WAN
gateway allows sites connected to the SD - WAN VPN network to communicate with sites connected
to a legacy MPLS VPN network. It also explains that this gateway facilitates route exchange between
the MPLS underlay network and the SD - WAN VPN network, typically using a dynamic routing
protocol such as BGP.
For this design, the hub or gateway must be configured with the Gateway option for the underlay
transport so it can act as the interconnect point between the legacy and SD - WAN domains. Versa
documentation further describes configuring a BGP peering session on the MPLS transport VR of the
gateway to exchange routes from the MPLS provider to the SD - WAN network, and notes that Director
Workflows can automate this configuration. Spoke - to - Spoke - Direct is not sufficient for legacy
interconnect, and SD - WAN traffic steering policies do not advertise routes.
Question 1 of 5