300-415 Actual Questions Answers PDF 100% Cover Real Exam Questions
300-415 Exam questions and answers
NEW QUESTION 67
A network administrator is configuring a tunnel interface on a branch Cisco IOS XE router to run TLOC extensions. Which configuration will extend a TLOC over a GRE tunnel to another router in the branch?
- A. Option D
- B. Option A
- C. Option C
- D. Option B
Answer: C
Explanation:
NEW QUESTION 68
An engineer is configuring a data policy for packets that must be captured through the policy. Which command accomplishes this task?
- A. policy > data-policy > vpn-list > sequence > default-action > drop
- B. policy > data-policy > vpn-list > sequence > action
- C. policy > data-policy > vpn-list > sequence > default-action > accept
- D. policy > data-policy > vpn-list > sequence > match
Answer: B
Explanation:
Explanation
https://www.cisco.com/c/dam/en/us/td/docs/routers/sdwan/configuration/config-18-4.pdf#page=357
NEW QUESTION 69
Which pathway under Monitor > Network > Select Device is used to verify service insertion configuration?
- A. System Status
- B. ACL Logs
- C. Real Time
- D. Events
Answer: B
NEW QUESTION 70
Which two requirements must be met for DNS inspection when integrating with cisco umbrella? (Choose two)
- A. Upload the WAN Edge serial allow list to the Umbrella portal.
- B. Attach security policy to the device template.
- C. Create and attach a System feature template with the Umbrella registration credentials.
- D. Register and configure the vManage public IP and serial number in the Umbrella portal.
- E. Configure the Umbrella token on the vManage
Answer: B,E
Explanation:
https://www.connection.com/~/media/pdfs/brands/c/cisco/security/cnxn-cisco-sd-wan-and-umbrella.pdf?la=en
NEW QUESTION 71
Drag and drop the policies from the left onto the correct policy types on the right.
Answer:
Explanation:
NEW QUESTION 72
Which type of route advertisement of OMP can be verified?
- A. OMP, VPN. and origin
- B. OMP, TLOC and service
- C. Origin, TLOC, and VPN
- D. Origin, TLOC, and service
Answer: B
Explanation:
Reference:
https://sdwan-docs.cisco.com/Product_Documentation/Software_Features/Release_18.2/03Routing/01Unicast_Overlay_Routing_Overview#OMP_Route_Advertisements
NEW QUESTION 73
Which component of the Cisco SD-WAN architecture oversees the control plane of overlay network to establish,adjust,and maintain the connections betweenthe WAN Edge devices that form the Cisco SD-WAN fabric?
- A. APIC-EM
- B. vBond
- C. vSmart
- D. vManage
Answer: B
NEW QUESTION 74
Which secure connection should be used to access the REST APIs through the Cisco vManage web server?
- A. HTTP inspector interface
- B. authenticated DTLS
- C. JSON Inspector interface
- D. authenticated HTTPS
Answer: D
Explanation:
Section: Management and Operations
NEW QUESTION 75
Refer to the exhibit.
Which configuration change is needed to configure the tloc-extention on Branch1-Edge1?
- A. Option D
- B. Option A
- C. Option C
- D. Option B
Answer: D
NEW QUESTION 76
Drag and drop the vManage policy configuration procedures from the left onto the correct definitions on the right.
Answer:
Explanation:
NEW QUESTION 77
A network administrator is configuring an application-aware firewall between inside zones to an outside zone on a WAN edge router using vManage GUI. What kind of Inspection is performed when the ''inspect'' action is used?
- A. stateful inspection for TCP and UDP
- B. Layer 7 inspection for TCP and Layer 4 inspection for UDP
- C. IPS inspection for TCP and-Layer 4 inspection for UDP
- D. stateful inspection for TCP and stateless inspection of UDP
Answer: A
Explanation:
NEW QUESTION 78
A network administrator is configuring Qos on a Vedge 5000 router and needs to enable it on the transport side interface. Which policy setting must be selected to accomplish this goal?
- A. Cloud QoS
- B. Netflow
- C. Cloud QoS Service side
- D. Application
Answer: A
Explanation:
NEW QUESTION 79
Drag and drop the policies from the left onto the correct policy types on the right.
Answer:
Explanation:
NEW QUESTION 80
Which two image formats are supported for controller codes? (Choose two.)
- A. .bin
- B. .qcow2
- C. .nxos
- D. .ova
- E. Tgz
Answer: B,E
NEW QUESTION 81
In which device state does the WAN edge router create control connections, but data tunnels are not created?
- A. staging
- B. active
- C. valid
- D. backup
Answer: A
Explanation:
NEW QUESTION 82
Which two mechanisms are used to guarantee the integrity of data packets in the Cisco SD-WAN architecture data plane? {Choose two )
- A. encapsulation security payload
- B. authentication headers
- C. certificates
- D. TPM chip
- E. transport locations
Answer: A,E
NEW QUESTION 83
What are the two advantages of deploying cloud-based Cisco SD-WAN controllers? (Choose two.)
- A. centralized raid storage of data
- B. management of SLA
- C. infrastructure as a service
- D. centralized control and data plane
- E. distributed authentication policies
Answer: B,D
Explanation:
Section: Controller Deployment
NEW QUESTION 84
Drag and drop the functions from the left onto the correct templates on the right.
Answer:
Explanation:
NEW QUESTION 85
Drag and drop the functions from the left onto the correct templates on the right.
Answer:
Explanation:
NEW QUESTION 86
An engineer is configuring a WAN Edge router for DIA based on matching QoS parameters. Which two actions accomplish this task? (Choose two.)
- A. Apply a data policy on WAN interface.
- B. Apply a QoS map policy.
- C. Configure a control policy.
- D. Configure NAT on the transport interface.
- E. Configure a centralized data policy.
Answer: A,B
NEW QUESTION 87
Which pathway underMonitor > Network > Select Deviceis used to verify service insertion configuration?
- A. System Status
- B. Real Time
- C. Troubleshooting
- D. Events
Answer: C
NEW QUESTION 88
An administrator needs to configure SD-WAN to divert traffic from the company's private network to an ISP network. What action should be taken to accomplish this goal?
- A. configure the data policy
- B. configure the control policy
- C. configure the data security policy
- D. configure the application aware policy
Answer: A
Explanation:
NEW QUESTION 89
Refer to the exhibit.
The tunnel interface configuration on both WAN Edge routers is:
Which configuration for WAN Edge routers will connect to the Internet?
- A. Option D
- B. Option A
- C. Option C
- D. Option B
Answer: D
Explanation:
Explanation
https://sdwandocs.cisco.com/Product_Documentation/Software_Features/SDWAN_Release_16.3/02System_and
NEW QUESTION 90
Drag and drop the vManage policy configuration procedures from the left onto the correct definitions on the right.
Answer:
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/policies/vedge/policies-book/data-policies.html
NEW QUESTION 91
Which protocol is used to measure loss, latency, jitter, and liveliness of the tunnel between WAN Edge router peers?
- A. BFD
- B. IP SLA
- C. NetFlow
- D. OMP
Answer: A
Explanation:
Section: Management and Operations
Explanation/Reference: https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2019/pdf/TECCRS-2014.pdf
NEW QUESTION 92
......
Quality of Service and security
Another very important and timely area involves security and the quality of service offered through these products. Thus, this domain goes into detail about how configuring and verifying service insertion is carried out; what application-aware firewalls are; and how to configure QoS treatment in WAN Edge routers and verify such configurations, including the operations such as shaping, scheduling, policing, and queuing. In 300-415, one will face 15% of such tasks.
TestBraindump 300-415 Exam Practice Test Questions : https://www.testbraindump.com/300-415-exam-prep.html
Pass 300-415 Exam Info and Free Practice Test : https://drive.google.com/open?id=1YKfQ56Ad_VNTEziSWDKQZaUA2NxEccJP
