nerdexam
Cisco

300-415 · Question #148

Which set of elements are verified by the controller to confirm the identity of edge devices?

The correct answer is A. certificates, organization name, and serial number of the device. Cisco SD-WAN controllers verify the identity of edge devices during the onboarding process by confirming their certificates, organization name, and serial number.

WAN Edge Router Deployment

Question

Which set of elements are verified by the controller to confirm the identity of edge devices?

Exhibit

300-415 question #148 exhibit

Options

  • Acertificates, organization name, and serial number of the device
  • Borganization name, serial number, and system IP of the device
  • Ccertificates, organization name, and vBond domain
  • Dcertificates, system IP, and vBond domain

How the community answered

(47 responses)
  • A
    94% (44)
  • C
    2% (1)
  • D
    4% (2)

Why each option

Cisco SD-WAN controllers verify the identity of edge devices during the onboarding process by confirming their certificates, organization name, and serial number.

Acertificates, organization name, and serial number of the deviceCorrect

Controllers verify the edge device's identity by checking its digital certificate for authenticity, matching the organization name configured on the device and within the certificate, and confirming the device's serial number against a trusted list.

Borganization name, serial number, and system IP of the device

System IP is a logical identifier within the overlay assigned after authentication, not a primary element used for initial identity verification during the certificate-based authentication process.

Ccertificates, organization name, and vBond domain

vBond facilitates initial connection, but the 'vBond domain' is not directly verified by the controller to confirm the *edge device's identity* in the same manner as certificates, organization name, and serial number.

Dcertificates, system IP, and vBond domain

System IP is not used for initial identity verification, and vBond domain is not a core element for identity confirmation by the controller in this context.

Concept tested: Cisco SD-WAN device authentication elements

Source: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/sdwan-xe-gs-config-guide/cisco-sd-wan-gs-config-guide-xe-17-x/certificate-management.html

Topics

#SD-WAN Authentication#Device Identity#WAN Edge Onboarding#Controller Verification

Community Discussion

No community discussion yet for this question.

Full 300-415 Practice