What are the two requirements for plug-and-play provisioning on Cisco IOS XE SD-WAN devices? (Choose two.)

While vSmart connectivity is crucial for a fully provisioned SD-WAN fabric, it's not a prerequisite for the initial PnP provisioning process itself; PnP first establishes connectivity to vBond.

devicehelper.cisco.com is not directly involved in the standard PnP process for Cisco SD-WAN devices to discover the vBond or retrieve initial configurations.

While DNS resolution is generally required for internet access, the specific requirement for PnP is to resolve ztp.viptela.com, which implies access to any functional DNS, not specifically "public DNS servers" as a distinct requirement.

The WAN Edge device needs to reach ztp.viptela.com (or ztp.cisco.com) to discover the vBond orchestrator's IP address and initiate the zero-touch provisioning process.

A valid device certificate, typically pre-installed or obtained via ZTP, is essential for the WAN Edge device to authenticate itself with the Cisco SD-WAN control plane components (vBond, vManage, vSmart).