300-435 Question #118: Real Exam Question with Answer & Explanation

Question

What is a capability of Cisco Catalyst SD-WAN vManage Certificate Management APIs?

Options

• ASign a previously generated certificate.
• BGenerate a certificate signing request.
• CRoll back a certificate by using a serial number.
• DDistribute certificates to Cisco vEdge devices.

Explanation

One key capability of Cisco Catalyst SD-WAN vManage Certificate Management APIs is to distribute certificates to Cisco vEdge devices, facilitating secure communication within the SD-WAN fabric.

Common mistakes.

• A. While vManage might play a role in requesting signatures from an external CA, it does not typically "sign" certificates itself in the capacity of a Certificate Authority (CA) for end-entity certificates.
• B. While vManage can generate CSRs, its primary role in certificate management extends beyond just generation to full lifecycle management, including distribution.
• C. Rolling back a certificate by serial number might be a feature, but the core function of vManage certificate management APIs is broader and includes proactive distribution, which is more fundamental to an SD-WAN deployment.

Concept tested. Cisco vManage Certificate Management API capabilities

Reference. https://developer.cisco.com/docs/sdwan/#!vmanage-apis-certificate-management

No community discussion yet for this question.