300-415 · Question #15
Which hardware component is involved in the Cisco SD-WAN authentication process for ISR platforms?
The correct answer is C. SUDI. On Cisco ISR platforms, the SUDI (Secure Unique Device Identifier) is the hardware component that provides the cryptographic identity used in the SD-WAN authentication process.
Question
Options
- AZTP
- BOTPC
- CSUDI
- DTPMD
How the community answered
(37 responses)- B3% (1)
- C92% (34)
- D5% (2)
Why each option
On Cisco ISR platforms, the SUDI (Secure Unique Device Identifier) is the hardware component that provides the cryptographic identity used in the SD-WAN authentication process.
ZTP (Zero Touch Provisioning) is a software-driven onboarding process, not a hardware component involved in authentication.
OTPC is not a recognized hardware component in the Cisco ISR SD-WAN authentication architecture.
The SUDI is a tamper-resistant hardware chip embedded in Cisco ISR routers that stores a unique X.509 certificate and private key tied to the device's serial number. During SD-WAN onboarding, the SUDI certificate is presented to vBond and validated against the vManage whitelist, providing hardware-rooted authentication that proves the device is a genuine Cisco product.
TPMD (Trusted Platform Module Daemon) is a software process that may interact with a TPM chip, but is not the specific hardware component used for SD-WAN authentication on ISR platforms.
Concept tested: Cisco ISR SUDI hardware-based SD-WAN authentication
Source: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/security/ios-xe-17/security-book-xe/security-overview.html
Topics
Community Discussion
No community discussion yet for this question.