300-415 · Question #148
Which set of elements are verified by the controller to confirm the identity of edge devices?
The correct answer is A. certificates, organization name, and serial number of the device. Cisco SD-WAN controllers verify the identity of edge devices during the onboarding process by confirming their certificates, organization name, and serial number.
Question
Exhibit
Options
- Acertificates, organization name, and serial number of the device
- Borganization name, serial number, and system IP of the device
- Ccertificates, organization name, and vBond domain
- Dcertificates, system IP, and vBond domain
How the community answered
(47 responses)- A94% (44)
- C2% (1)
- D4% (2)
Why each option
Cisco SD-WAN controllers verify the identity of edge devices during the onboarding process by confirming their certificates, organization name, and serial number.
Controllers verify the edge device's identity by checking its digital certificate for authenticity, matching the organization name configured on the device and within the certificate, and confirming the device's serial number against a trusted list.
System IP is a logical identifier within the overlay assigned after authentication, not a primary element used for initial identity verification during the certificate-based authentication process.
vBond facilitates initial connection, but the 'vBond domain' is not directly verified by the controller to confirm the *edge device's identity* in the same manner as certificates, organization name, and serial number.
System IP is not used for initial identity verification, and vBond domain is not a core element for identity confirmation by the controller in this context.
Concept tested: Cisco SD-WAN device authentication elements
Source: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/sdwan-xe-gs-config-guide/cisco-sd-wan-gs-config-guide-xe-17-x/certificate-management.html
Topics
Community Discussion
No community discussion yet for this question.
