Cisco 500-470 Exam Dumps - Actual Questions Answers

SD-WAN is a software-defined approach to managing the WAN that offers several capabilities, such as:

• The separation of management plane, control plane and data plane to enable horizontal scaling. This means that the SD-WAN solution can decouple the network functions from the underlying hardware and distribute them across different layers and locations. This allows for greater flexibility, scalability, and resilience of the network12
• Cloud hosted or on-premise fully redundant management and control plane functions. This means that the SD-WAN solution can provide centralized and cloud-based management and control of the network, as well as the option to deploy them on-premise for more control and security. This enables the SD-WAN solution to offer consistent policies, visibility, and analytics across the network, as well as the ability to automate network operations and orchestration13

The other options are not SD-WAN solution capabilities, but rather features or benefits of specific SD-WAN solutions, such as:

• Trust roll branch turn up for easy provisioning and new installations. This is a feature of Cisco Catalyst SD-WAN, which enables zero-touch provisioning and automated configuration of branch devices, as well as the ability to trust the identity and security posture of the devices3
• Ability to provide and integrate security with complementary products and applications. This is a benefit of Cisco Catalyst SD-WAN, which offers integrated security capabilities, such as full-stack multilayer security, cloud-delivered security, and SASE-enabled architecture. This enables the SD-WAN solution to provide real-time threat protection and compliance across the network3

References :=

• What Is SD-WAN? - Software-Defined WAN (SDWAN) - Cisco
• SD-WAN Solution - Cisco Catalyst SD-WAN Solution Overview
• What is SD-WAN? - Software-Defined WAN | VMware

https://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise-networks/sd-wan/nb-07-clo ud-router-data-sheet-cte-en.pdf

A vEdge Cloud Router is a virtualized version of the vEdge router that can be deployed in various cloud environments. According to the Cisco vEdge Cloud Data Sheet1, the vEdge Cloud Router can be instantiated as a virtual machine (VM) on a KVM hypervisor or as a VM on a VMware ESXi hypervisor, as well as in public cloud environments, such as Amazon AWS or Google Cloud Platform. Therefore, the two platforms that can host a vEdge Cloud Router are AWS and Microsoft Azure.

References:

 1: [Solutions - Cisco vEdge Cloud Data Sheet - Cisco]

 SD-Access Fabric is a network architecture that uses three key technologies to create a virtual overlay network on top of the physical underlay network. These technologies are:

• VXLAN: Virtual Extensible LAN is a tunneling protocol that encapsulates Layer 2 frames in UDP packets and transports them over an IP network. VXLAN enables the creation of large-scale virtual networks that span multiple Layer 3 domains. VXLAN is used in SD-Access Fabric to carry user traffic between different fabric nodes and to provide network segmentation based on virtual network identifiers (VNIs).
• TrustSec: Cisco TrustSec is a security framework that uses software-defined segmentation to enforce granular access policies based on the identity and context of users, devices, and applications. TrustSec uses scalable group tags (SGTs) to classify endpoints into logical groups and applies security policies based on the source and destination SGTs. TrustSec is integrated with SD-Access Fabric to provide micro-segmentation within a virtual network and to simplify policy management across the fabric.
• LISP: Locator/ID Separation Protocol is a routing protocol that decouples the endpoint identity (EID) from its location (RLOC) in the network. LISP uses two types of devices: ingress tunnel routers (ITRs) and egress tunnel routers (ETRs) to map EIDs to RLOCs and to encapsulate and decapsulate packets. LISP is used in SD-Access Fabric to provide control plane functions, such as endpoint registration, discovery, and mobility. LISP also enables seamless integration of SD-Access Fabric with external networks, such as the Internet, WAN, or data center.

The other options, OTV, RSVP, and MPLS, are not used in SD-Access Fabric. OTV is another tunneling protocol that extends Layer 2 connectivity across Layer 3 domains, but it is not compatible with VXLAN. RSVP is a signaling protocol that reserves network resources for quality of service (QoS), but it is not required for SD-Access Fabric. MPLS is a packet-switching technology that labels packets and forwards them based on label switching routers (LSRs), but it is not involved in SD-Access Fabric. References := : Cisco SD-Access Solution Design Guide (CVD) - Cisco1, Cisco Software-Defined Access - Cisco Software-Defined Access Solution Overview2