Evaluating WAN Technology for OPEX Reduction

Answer Correct answer: A — DMVPN over L3VPN provides the necessary scalability and OPEX efficiency for an in-house managed WAN upgrade.

Refer to the exhibit. The WAN network of the General Bank of Greece has experienced several outages. It takes too long to activate a new branch site. The networking department of the bank plans to upgrade the legacy end-of-life WAN network with a new flexible, manageable, and scalable in-house solution. The number of branches will increase exponentially in the next fiscal year. The CTO states that the bank’s main goal is OPEX reduction. The network engineering team prepares a table to evaluate the available options. Which WAN technology can be used for the solution? - image

  1. DMVPN over L3VPN Correct Answer
  2. Managed SD-WAN
  3. SD-WAN over L3VPN
  4. SD-WAN over L2VPN

Community Votes

A
47%
D
33%
B
20%

47% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.

Community Insight

The core trap is confusing CAPEX (equipment) with OPEX (licensing/subscriptions) and misinterpreting 'in-house' as excluding modern technologies like SD-WAN or DMVPN, when it simply excludes managed services.

This question tests the ability to select a WAN technology that meets specific business goals of scalability and OPEX reduction while maintaining an in-house management model. It establishes how to interpret cost structures and licensing models in network design scenarios.

Many learners choose Managed SD-WAN because they associate 'OPEX reduction' with subscription-based managed services, ignoring the explicit requirement for an 'in-house' solution.

Community Discussion (9 comments)

Doobiedoo 👍 5 Selected: A
The answer to this question really hinges on if the Licenses are perpetual (Single-Use = CAPEX) or if they are subscriptions (Recurring = OPEX). I'm going to assume we're using Cisco licensing in this example so they will be subscription-based licenses and therefore considered OPEX. Since none of the requirements for the WAN are only met with SDWAN, DMVPN is still an option, especially since Cisco SDWAN typically uses subscription licensing based on circuit bandwidth. In that case, the answer is A. DMVPN over L3VPN
The1BelowAll 👍 1 Selected: A
For OPEX count the number of $, DMVPN over L3 has less for License and WAN.
anonymousch 👍 1 Selected: D
ISP + Licenses costs are OPEX.
JCGO 👍 1 Selected: D
least opex - eiminates first 2 options. in-house ("done within an organization or business by its employees rather than by other people") eliminates 3rd option. So answer is clearly D.
cisco_guy 👍 2 Selected: C
In the question it states "in-house", which means they're not going to go with anything managed, therefore B is not the solution. There's growth expected and based on the question, they are looking for SD-WAN features.
Seawanderer 👍 1 Selected: B
Equipment and licenses are capex
xz_sky 👍 3 Selected: D
Consider licenses cost is CAPEX
PeterCheng 👍 1 Selected: A
B should be CAPEX reduction, not OPEX reduction.So A is the answer.
Rollizo 👍 2 Selected: B
Should be B: main goal is OPEX reduction

Comments & Corrections

No comments yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Submitted for moderation before publishing. Keep it helpful and respectful.

Expert Analysis

Why the Answer Is Correct

Option A (DMVPN over L3VPN) is the correct choice because it aligns with all three constraints: it supports exponential growth through dynamic spoke-to-spoke routing, allows for an in-house deployment model, and offers significant OPEX savings compared to legacy MPLS. The table provided in the exhibit shows that while DMVPN has higher initial costs, its long-term operational costs are lower than the other options, directly addressing the CTO's primary goal.

Why the Other Options Are Wrong

Option B (Managed SD-WAN) is incorrect because the requirement for an 'in-house solution' explicitly rules out third-party managed services. Option C (SD-WAN over L3VPN) is more expensive in terms of recurring license fees according to the exhibit, making it less optimal for strict OPEX reduction. Option D (SD-WAN over L2VPN) is not only costlier but also lacks the scalability and ease of branch activation provided by Layer 3 solutions.

Community Comment Notes

Community consensus was split, with many voting for Managed SD-WAN due to the 'OPEX' keyword. However, users who focused on the 'in-house' constraint correctly identified that managed services are excluded. Some users argued that licenses are OPEX, which is true, but failed to account for the fact that DMVPN can be deployed with perpetual licenses or lower recurring costs depending on the specific vendor model presented in the exhibit. The key differentiator remains the balance of total cost of ownership against the management model.

Official Reference

Exam Strategy

Always read the entire prompt for constraints before evaluating options. In this case, 'in-house' eliminates managed services, and 'OPEX reduction' requires analyzing the long-term cost trends, not just the initial price tag.

Frequently Asked Questions

Why is Managed SD-WAN incorrect if it reduces OPEX?

Managed SD-WAN is a third-party service. The requirement for an 'in-house solution' explicitly prohibits outsourcing management to a provider.

Are software licenses considered CAPEX or OPEX?

Traditionally, perpetual licenses are CAPEX, while subscriptions are OPEX. However, the decision here relies on the total cost profile shown in the exhibit and the management model.

Related Analysis

← Back to 400-007 Study Guide