300-420 Exam Dumps : Designing Cisco Enterprise Networks (ENSLD) v1.1

Cisco SD-WAN components map to distinct control, management, orchestration, and forwarding roles. vManage is the centralized management plane used for configuration templates, monitoring, software management, and operational visibility. vSmart is the centralized control-plane component that distributes OMP routes, TLOC information, security parameters, and centralized policy to WAN Edge devices. vBond is the orchestration component used during onboarding; it authenticates devices, helps them discover controllers, and assists with NAT traversal. The WAN Edge router, whether physical or virtual, forms the data plane at the branch, campus, or data center and forwards user traffic through secure overlay tunnels. Correctly identifying these roles is essential because SD-WAN scale and resiliency depend on separating management, control, orchestration, and forwarding responsibilities. A design that confuses vManage with vSmart or vBond will misplace policy, onboarding, and forwarding functions. Reference topics: Cisco SD-WAN architecture, vManage, vSmart, vBond, WAN Edge, OMP, overlay control plane.

Traffic shaping is required in the parent policy when hierarchical QoS uses CBWFQ in the child policy for low-bandwidth remote sites. In Cisco hierarchical QoS, the parent policy commonly shapes outbound traffic to the real available rate of the WAN service, especially when the physical interface speed is higher than the provider committed rate. The child policy then applies class-based queuing, such as CBWFQ and LLQ, inside the shaped rate. This structure creates an artificial congestion point on the router so the child queues can schedule packets predictably instead of allowing the provider to drop traffic after it exceeds the service rate. Policing in the child policy would drop excess packets and is not the normal prerequisite for nested CBWFQ. CBWFQ is supported in child policies within hierarchical designs, and parent shaping is the mechanism that makes the hierarchy effective. This is especially important on low-bandwidth WAN links where voice, video, and business-critical applications require deterministic treatment. Reference topics: hierarchical QoS, CBWFQ, parent shaping, child queuing, WAN QoS design.

The best answer is to use a single IP address for a static NAT entry that represents the server with a nonoverlapping address. When two companies use overlapping private address space, routing directly between the networks can fail because each side may already have a local route for the same prefix. The requirement is narrow: users in the acquired company need access to one server in Company A, and the design must conserve address space. A static NAT mapping for the server solves the destination overlap problem with one translated address, giving remote users a unique reachable address for that server without renumbering either company. Overload NAT is normally used to translate many inside clients behind one address for outbound access; it is not the most precise solution for publishing one overlapping server. One-to-one NAT for every user wastes addresses and adds operational overhead. Readdressing the acquired company would solve the overlap permanently, but it does not conserve effort or address space. Therefore, a single static NAT entry for the server is the most efficient design.