300-415 Question 110
Single answerA network engineer is tasked with deploying new Cisco SD-WAN edge devices across multiple branch sites. The engineer decides to use the Zero-Touch Provisioning (ZTP) process to simplify the deployment. However, one of the branch sites has a strict security policy that prohibits direct internet access for the SD-WAN device. Which onboarding method should the engineer use for this branch site?
- A
Use ZTP with direct internet access
- B
Use the Bootstrap process with a configuration file
- C
Use ZTP with a private DNS server
- D
Manually configure the device using the CLI
Show answer and explanation
Correct answer: B
Explanation
The Bootstrap process is the most suitable onboarding method for environments where direct internet access is restricted. By using a configuration file, the device can be pre-provisioned locally, bypassing the need for ZTP's internet connectivity requirements. This method aligns with the branch site's strict security policy while ensuring smooth onboarding of the SD-WAN device.
- A. Incorrect.
This option is incorrect because ZTP requires direct internet access to contact the Cisco vBond Orchestrator. Since the branch site prohibits direct internet access, this method cannot be used.
- B. Correct.
This option is correct because the Bootstrap process allows the engineer to preconfigure the device with a configuration file, which can be loaded locally without requiring direct internet access.
- C. Incorrect.
This option is incorrect because ZTP with a private DNS server is not a supported onboarding method in Cisco SD-WAN. ZTP inherently relies on internet connectivity.
- D. Incorrect.
This option is incorrect because while manual CLI configuration is technically possible, it is not an efficient or scalable solution for onboarding devices, especially in an SD-WAN environment where automation is preferred.