300-415 Question #233: Real Exam Question with Answer & Explanation

Question

Options

• ARectify the Root CA certificate mismatch on WAN Edge devices.
• BResolve the ZTP reachability and rectify smart account credentials issue.
• CInstall the bootstrap code on WAN Edge and check for CSR.
• DSend the serial number to vBond from the vManage controller.

Explanation

If a WAN Edge device fails to establish a control connection after being added to vManage, sending its serial number from vManage to vBond can resolve the issue by ensuring vBond has the necessary authentication information.

Common mistakes.

• A. A Root CA certificate mismatch would prevent TLS/DTLS tunnel establishment due to trust issues, but the primary action for a newly added device failing to connect often involves serial number synchronization with vBond first.
• B. ZTP issues and smart account credentials are typically relevant during initial automated provisioning, not usually the direct cause of a control connection failure after the device has already been added to vManage.
• C. Installing bootstrap code is part of the initial device bring-up to join the fabric, and checking for CSR (Certificate Signing Request) is part of certificate enrollment, which often follows successful initial connectivity, not the direct solution for a serial number-related connection problem.

Concept tested. SD-WAN WAN Edge onboarding troubleshooting

Reference. https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/sdwan-xe-gs-book/install-upgrade-wan-edge.html

No community discussion yet for this question.