Implementing Cisco SD-WAN Solutions (ENSDWI) — Question 114

What is the purpose of `vpn 0` in the configuration template when onboarding a WAN Edge node?

Answer options

• A. It carries control traffic over secure IPsec connections between vSmart controllers and vEdge routers, and between vEdge and vManager.
• B. It carries control traffic over secure IPsec connections between vSmart controllers and vEdge routers, and between vSmart and vBond.
• C. It carries control traffic over secure DTLS or TLS connections between vSmart controllers and vEdge routers, and between vSmart and vBond.
• D. It carries out-of-band network management traffic among the Cisco SD-WAN devices in the overlay network.

Correct answer: C

Explanation

`vpn 0` is specifically designed to handle control traffic using secure DTLS or TLS connections between vSmart controllers and vEdge routers, along with connections between vSmart and vBond. Options A and B incorrectly state that IPsec is used instead of DTLS or TLS, while option D describes out-of-band management traffic, which is not the function of `vpn 0`.