Discuss Versa Networks VNX301 Exam Topic 3 Question 6

A branch device has completed Stage 3 onboarding. Which set of tunnels or sessions should exist after the device becomes fully operational in the customer SD-WAN network?

AIKE and IPsec sessions between the branch and Controller, and VXLAN and ESP sessions between branches

BOnly an HTTPS session between the branch and Director

COnly a BGP session between the branch and Analytics

DGRE-only tunnels between all branches without IPsec

Suggested Answer: A

The correct answer is A. In Versa Secure SD-WAN onboarding, the branch moves through three staging phases before becoming fully operational. Versa documentation states that in Stage 3, Versa Director pushes the stage-three configuration to the branch device over the IKE session and reboots the branch. After this stage, the branch becomes fully operational and is part of the customer SD-WAN network. At this point, IKE and IPsec sessions are created between the branch and Controller, and VXLAN and ESP sessions are created between branch to branch.

This distinction is important because the Controller connection is used for SD-WAN control-plane functions, while branch-to-branch overlay communication uses tunnel encapsulation for data forwarding. The documentation also notes that branch-to-branch ESP is maintained using a lightweight DH key-pair proprietary protocol.

Options B, C, and D are incorrect. HTTPS to Director alone does not represent the complete SD-WAN operational tunnel state. BGP to Analytics is not the required operational tunnel set. GRE-only tunnels without IPsec do not match the Versa Stage 3 SD-WAN tunnel behavior described in the staging documentation.

Get Premium VNX301 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

25 comments · newest first

Carman 20 hours ago

Agreed! A covers all necessary sessions.

Jules 6 days ago

I think it's A. We need both IKE and IPsec for security.

Alisha 11 days ago

Not sure about A, can we really have both VXLAN and ESP?

Wade 16 days ago

A makes the most sense, all those sessions are crucial.

Veronique 22 days ago

Surprised that anyone would choose D, that seems outdated!

Filiberto 27 days ago

I think B is too limited, there’s more needed.

Goldie 1 month ago

Definitely A, that's the standard setup for SD-WAN.

Rex 1 month ago

C is interesting, but I don’t see how BGP alone would work.

Marylin 1 month ago

Wait, GRE-only tunnels? That sounds risky, right?

Lazaro 2 months ago

A makes the most sense, all those sessions are necessary!

Huey 2 months ago

I think B is too limited, there’s more going on.

Adolph 2 months ago

Definitely A, you need IKE and IPsec for secure connections.

Merissa 2 months ago

Really? I thought there could be more options than just A.

Leslie 2 months ago

B is too limited, I think A covers all bases.

Rossana 2 months ago

Wait, how can you only have GRE tunnels? Sounds risky, D doesn't seem right.

Ming 3 months ago

I agree, A is the right choice. Can't have an SD-WAN without those tunnels!

Nan 3 months ago

Definitely A! IKE and IPsec are essential for secure connections.

Art 3 months ago

GRE tunnels seem outdated for modern SD-WAN setups, so I doubt that's the right answer, but I can't recall the specifics of the other options.

Daren 3 months ago

I feel like the HTTPS session with the Director is too limited for a fully operational device, but I can't pinpoint why.

Queenie 3 months ago

I vaguely recall a practice question that mentioned VXLAN and ESP sessions, but I'm not sure if they were specifically tied to the branch device.

Octavio 3 months ago

I think we discussed that after Stage 3, there should be multiple sessions established, but I can't remember if it was just IKE and IPsec or something else too.

Wai 4 months ago

I feel like B is too limited, but I can’t shake the feeling that there might be a simpler answer than A.

Lyndia 4 months ago

I’m a bit confused; I thought there could be multiple types of sessions, but I can’t recall if GRE-only tunnels are really secure enough for this scenario.

Hubert 4 months ago

I remember practicing a similar question, and I think it emphasized the importance of IPsec for secure communication, which makes me lean towards A as well.

Carolynn 6 months ago

I think the answer might be A, but I’m not entirely sure about the specifics of the sessions involved.

Versa Networks VNX301 Exam - Topic 3 Question 6 Discussion