Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Cisco 300-445 Exam - Topic 4 Question 10 Discussion

Posted by Wilda on May 17, 2026 at 06:17 AM

Refer to the exhibit.

An engineer must use Cisco ThousandEyes testing to monitor their Cisco Catalyst SD-WAN fabric. Which SD-WAN component is being monitored by ThousandEyes?

Suggested Answer: A

In the Designing and Implementing Enterprise Network Assurance (300-445 ENNA) curriculum, understanding the visibility gap between the SD-WAN overlay and the transport underlay is a core competency. The provided exhibit illustrates a ThousandEyes Enterprise Agent deployed on a Branch Edge Router performing tests across two distinct paths: Internet (reaching a destination at 64.100.249.90) and MPLS (reaching a destination at 172.29.0.2).

According to the ENNA architecture guidelines, ThousandEyes is primarily utilized to provide hop-by-hop visibility into the underlay network. While SD-WAN controllers like vManage provide native monitoring for the overlay---the logical IPsec tunnels (Option B) that form the SD-WAN fabric---they often lack granular visibility into the physical service provider paths (the underlay) that carry those tunnels. The exhibit specifically highlights the agent probing the transport networks (Transport VPN0) directly, bypassing the overlay tunnels to measure the raw performance of the ISP and MPLS circuits.

By monitoring the underlay (Option A), the engineer can identify if high latency or packet loss is caused by a specific hop within the service provider's infrastructure or at a peering point. This 'underlay visibility' is critical for troubleshooting SD-WAN performance issues where the overlay may report a tunnel down, but the root cause lies in a BGP routing change or physical fiber cut in the provider network. ThousandEyes Enterprise Agents, natively integrated into Catalyst 8000 and ISR 4000 platforms, allow for this persistent underlay monitoring without additional hardware.

Overlay (Option C): While ThousandEyes can monitor overlay performance, the exhibit's focus on the raw IP addresses (Internet and MPLS) in the transport VPN indicates an underlay test.

IPsec/GRE Tunnels (Options B & D): These represent the transport mechanisms of the overlay. ThousandEyes probes the path under these tunnels to ensure the transport health is sufficient to support the fabric.


Get Premium 300-445 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
24 comments · newest first
TO
Tonja 2 days ago
I’d go with underlay. It’s foundational for SD-WAN.
PE
Peter 7 days ago
Overlay seems right. It’s about application performance.
RA
Rasheeda 12 days ago
I’m leaning towards IPsec tunnels. Security is key!
JA
James 17 days ago
I think it's the overlay. It makes sense for monitoring.
PA
Pansy 22 days ago
Overlay is the best option. It impacts user experience directly.
OW
Owen 27 days ago
GRE tunnels are important, but overlay seems more relevant.
BU
Burma 1 month ago
I lean towards IPsec tunnels. Security is key in monitoring.
TW
Twana 1 month ago
Definitely overlay. It’s crucial for application performance.
DO
Donte 1 month ago
I feel like it could be the underlay too. Hard to choose!
EL
Elli 2 months ago
I think it's the overlay. It makes sense for monitoring.
JE
Jeannetta 2 months ago
I thought GRE tunnels were the focus here.
DE
Desirae 2 months ago
Overlay is the right choice, no doubt about it!
JU
Jules 2 months ago
Wait, are we sure ThousandEyes can monitor IPsec tunnels?
IS
Isadora 2 months ago
I think it's the underlay, not the overlay.
CR
Cristen 2 months ago
It's definitely the overlay being monitored.
BI
Billy 3 months ago
Overlay is the right choice, no doubt about it!
DA
Daren 3 months ago
IPsec tunnels are crucial for security, but overlay makes sense here.
ER
Ernestine 3 months ago
Wait, are we sure ThousandEyes can monitor GRE tunnels?
JA
Jade 3 months ago
I think it's the underlay, not overlay.
TY
Ty 3 months ago
It's definitely the overlay being monitored.
SH
Shaun 3 months ago
I recall that ThousandEyes is often used for monitoring the overlay, but I could be wrong. This is tricky!
LA
Lashaun 4 months ago
I keep mixing up IPsec tunnels and GRE tunnels. I wonder if ThousandEyes focuses more on one than the other in this context.
SH
Sheron 4 months ago
I practiced a similar question where we had to identify components of SD-WAN. I feel like the underlay might be the right answer here.
GR
Graham 5 months ago
I think it's the overlay, but I'm not entirely sure. I remember something about monitoring application performance over the SD-WAN.
0/2000 characters

Save Cancel