300-415 Question 96
Single answerYou are configuring certificates for a Cisco SD-WAN deployment to ensure secure communication between control and data plane components. During the implementation, you need to validate the authenticity of the edge devices being onboarded. Which step is mandatory to achieve this in the certificate configuration process?
- A
Include the Organization Name (Org-Name) in the device list during onboarding.
- B
Upload the signed certificate from the Certificate Authority (CA) to each vEdge router.
- C
Generate and validate Certificate Signing Requests (CSRs) on the vManage controller.
- D
Manually add the serial numbers of edge devices to the vSmart controller.
Show answer and explanation
Correct answer: B
Explanation
To authenticate edge devices in a Cisco SD-WAN deployment, each device must have a signed certificate from the Certificate Authority (CA). This certificate confirms the device's identity and allows secure communication within the SD-WAN fabric. Uploading the signed certificate to the vEdge router is a critical step in the process.
- A. Incorrect.
Including the Organization Name (Org-Name) is important for device consistency, but it is not directly related to certificate authentication or onboarding processes.
- B. Correct.
Uploading the signed certificate from the CA to the vEdge router ensures that the device can securely communicate within the SD-WAN fabric. This step is mandatory for authenticating edge devices.
- C. Incorrect.
Generating CSRs is an essential step during the certificate request process, but validation is performed after signing and uploading the certificate to the devices.
- D. Incorrect.
Serial numbers are used for device identification in the SD-WAN fabric, but they are not part of the certificate configuration process.