During initial WAN Edge onboarding, what is the primary role of the vBond orchestrator?

• A. Distributes routing policies
• B. Performs data-plane encryption only
• C. Authenticates devices and facilitates secure control connections
• D. Acts as a DNS resolver

Answer: (C)

The vBond orchestrator is the authentication and control-plane rendezvous point for a new WAN Edge. Its job is to verify the edge’s identity (using certificates or tokens) and help the edge discover and establish secure control-plane connections to the vSmart controllers, so the device can join the SD-WAN fabric. This bootstrapping role is distinct from policy distribution (that’s handled by vSmart) and from data-plane encryption itself, and it isn’t used as a DNS resolver. By authenticating devices and facilitating the initial secure control connections, vBond ensures only trusted Edges become part of the network and can communicate with the control-plane components.