Cisco Enterprise Networks SDA, SDWAN and ISE Exam for System Engineers

Answer: D vEdge routers operate in the Cisco SD-WAN data plane and establish secure IPsec sessions with other vEdge routers across the WAN. vSmart is the control-plane controller, vManage is the management plane, and vBond performs orchestration and onboarding. **Learn more:** [Cisco SD-WAN for Secure Networks White Paper](https://www.cisco.com/c/en/us/solutions/collateral/enterprise-networks/sd-wan/white-paper-c11-741640.html) · [Cisco Catalyst IR8140 Software Configuration Guide — Cisco SD-WAN Support](https://www.cisco.com/c/en/us/td/docs/routers/access/ir8140/b_ir8100-config-guide/m_sdwan.html)

Answer: C, D Cisco ISE proof-of-value activities use Cisco dCloud for the demonstration lab environment and an ISE POV Kit for the associated demonstration resources. A proof of value is not an implementation on a production network. **Learn more:** [Cisco Identity Services Engine (ISE) Demos](https://www.cisco.com/site/ca/en/products/security/identity-services-engine/demos.html) · [Cisco Community: ISE NFR?](https://community.cisco.com/t5/network-access-control/ise-nfr/m-p/3696417)

Answer: A, E, F SXP provides IP-to-security-group-tag mapping exchange, pxGrid provides the ISE context and TrustSec metadata exchange, and Passive Identity enables identity mapping from observed user authentications. Cisco’s SD-Access integration guidance lists enabling SXP Service, Passive Identity Service, and pxGrid on the ISE host. **Learn more:** [Cisco Live: Cisco DNA Center & ISE Communication](https://www.ciscolive.com/c/dam/r/ciscolive/global-event/docs/2022/pdf/BRKENS-2814.pdf)