Cisco 300-415 Online Practice Questions and Exam Preparation

Cisco 300-415 Online Questions & Answers

• Question 1:

  SIMULATION

  Configure individual VRFs for each customer according to the topology to achieve these goals :

  

  R1

  

  R2

  

  SW1

  

  SW2

  

  SW3

  

  SW4

  

  Tasks

  

  See the solution below in explanation.
  PlaceHolder
  PlaceHolder
  PlaceHolder

  ---

  explanation:

  Use cu-red under interfaces facing SW1 and SW3:

  On R1:

  interface Ethernet0/0

  ip vrf forwarding cu-red

  ip address 192.168.1.254 255.255.255.0

  Check reachability to SW1:

  R1#ping vrf cu-red 192.168.1.1

  Type escape sequence to abort.

  Sending 5, 100-byte ICMP Echos to 192.168.2.1, timeout is 2 seconds:

  !!!!!

  Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms

  On R2:

  interface Ethernet0/0

  ip vrf forwarding cu-red

  ip address 192.168.2.254 255.255.255.0

  Check reachability to SW3:

  R2#ping vrf cu-red 192.168.2.1

  Type escape sequence to abort.

  Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:

  !!!!!

  Use vrf cu-green for SW2 and SW4:

  On R1:

  interface Ethernet0/1

  ip vrf forwarding cu-green

  ip address 192.168.20.254 255.255.255.0

  Test reachability to SW2:

  R1#ping vrf cu-green 192.168.20.1

  Type escape sequence to abort.

  Sending 5, 100-byte ICMP Echos to 192.168.22.1, timeout is 2 seconds:

  !!!!!

  Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms

  On R2:

  interface Ethernet0/1

  ip vrf forwarding cu-green

  ip address 192.168.22.254 255.255.255.0

  Test reachability to SW4:

  R2#ping vrf cu-green 192.168.22.1

  Type escape sequence to abort.

  Sending 5, 100-byte ICMP Echos to 192.168.20.1, timeout is 2 seconds:

  !!!!!

  Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms

  On R1:

  interface Ethernet0/2.100

  mpls ip

  !

  interface Ethernet0/2.200

  mpls ip

  !

  Configure BGP:

  router bgp 65000

  neighbor 10.10.10.2 remote-as 65000

  neighbor 10.10.20.2 remote-as 65000

  !

  address-family vpnv4

  neighbor 10.10.10.2 activate

  neighbor 10.10.20.2 activate

  exit-address-family

  !

  address-family ipv4 vrf cu-green

  redistribute connected

  exit-address-family

  !

  address-family ipv4 vrf cu-red

  redistribute connected

  exit-address-family

  !

  R1(config)#ip vrf cu-red

  R1(config-vrf)#route-target both 65000:100

  !

  R1(config)#ip vrf cu-green

  R1(config-vrf)#route-target both 65000:200

  On R2:

  interface Ethernet0/2.100

  mpls ip

  !

  interface Ethernet0/2.200

  mpls ip

  !

  router bgp 65000

  neighbor 10.10.10.1 remote-as 65000

  neighbor 10.10.20.1 remote-as 65000

  !

  address-family vpnv4

  neighbor 10.10.10.1 activate

  neighbor 10.10.20.1 activate

  exit-address-family

  !

  address-family ipv4 vrf cu-green

  redistribute connected

  exit-address-family

  !

  address-family ipv4 vrf cu-red

  redistribute connected

  exit-address-family

  R2(config)#ip vrf cu-red

  R2(config-vrf)#route-target both 65000:100

  !

  R2(config)#ip vrf cu-green

  R2(config-vrf)#route-target both 65000:200

  Verification:

  From SW1 to SW3:

  SW1#ping 192.168.1.1

  Type escape sequence to abort.

  Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:

  !!!!!

  Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms

  But can't Reach SW2 or SW4 in VRF cu-green:

  SW1#ping 192.168.22.1

  Type escape sequence to abort.

  Sending 5, 100-byte ICMP Echos to 192.168.22.1, timeout is 2 seconds:

  Success rate is 0 percent (0/5)

  Same Test for SW2:

  From SW2 to SW4:

  SW2#ping 192.168.20.1

  Type escape sequence to abort.

  Sending 5, 100-byte ICMP Echos to 192.168.20.1, timeout is 2 seconds:

  !!!!!

  Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms

  But can’t Reach SW3 or SW1 in VRF cu-red:

  SW2#ping 192.168.1.1

  Type escape sequence to abort.

  Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:

  !!!!!

  Success rate is 0 percent (0/5)

  SW2#ping 192.168.2.1

  Type escape sequence to abort.

  Sending 5, 100-byte ICMP Echos to 192.168.2.1, timeout is 2 seconds:

  !!!!!

  Success rate is 0 percent (0/5)

  Both R1 and R2 has separate tables for VRFs cu-red and cu-green.

• Question 2:

  A network is configured with CoPP to protect the CORE router route processor for stability and DDoS protection. As a company policy, a class named class-default is preconfigured and must not be modified or deleted. Troubleshoot CoPP to resolve the issues introduced during the maintenance window to ensure that:

  

  WAN

  

  

  CORE

  

  MGMT

  

  See the solution below in explanation.
  PlaceHolder
  PlaceHolder
  PlaceHolder

  ---

  explanation:

  CORE policy-mao CoPP class CoPP-CRITICAL police 1000000 50000 50000 conform-action transmit exceed-action transmit

  

  CORE# Copy run start TESTING: CORE

  

  MGMT

  

• Question 3:

  An SD-WAN customer must ensure that its network operations team can monitor and update the NTP server if needed on a WAN Edge in HQ.

  Which configuration meets this requirement?

  A. system usergroup operator task interface write
  B. system aaa usergroup operator task policy write
  C. system aaa usergroup operator task system write
  D. system aaa usergroup operator task security write
  B. system aaa usergroup operator task policy write

• Question 4:

  Which Cloud OnRamp solution is used by partners and vendors without Cisco SD-WAN but still needs connectivity to their customers without installing SD-WAN routing appliances on their sites?

  A. Cloud OnRamp for IaaS
  B. Cloud OnRamp for SaaS
  C. Cloud OnRamp for Multicloud
  D. Cloud OnRamp for Colocation
  A. Cloud OnRamp for IaaS

• Question 5:

  What are two attributes of vRoute? (Choose two)

  A. originator
  B. service
  C. encapsulation
  D. carrier
  E. domain ID
  A. originator
  B. service

• Question 6:

  A company is using Catalyst SD-WAN Manager as its root certificate authority server and must generate a root certificate using the vShell (Linux) built into the CLI of Catalyst SD-WAN Manager.

  Which command must be issued to generate the root certificate?

  A. openssl req -x509 -new-nodes -key XYZ.pem -sha256 -days 365 \subj "/C=US/ST=DC/L=DC/O=Cisco /CN=device.lab"-out ABC.key
  B. openssl genrsa -out ROOTCA.pem 2048
  C. openssl req -x509 -new-nodes -key XYZ.key -sha256 -days 365 Isubj "/C-US/ST-DC/L-DC/O-Cisco /CN-device.lab" 1-out ABC.pem
  D. openssl genrsa -out ROOTCA.key 2048
  C. openssl req -x509 -new-nodes -key XYZ.key -sha256 -days 365 Isubj "/C-US/ST-DC/L-DC/O-Cisco /CN-device.lab" 1-out ABC.pem

• Question 7:

  Refer to the exhibit.

  

  A network administrator is configuring OSPF advanced configuration pararmeters from a template using the vManager GUI for a branch WAN Edge router to calculate the cost of summary routes to an ASBR.

  Which action achieves this configuration?

  A. Disable RFC 1583 Compatiblt
  B. Enable Originate
  C. Enable RFC 1583 Compatible
  D. Disable Original
  C. Enable RFC 1583 Compatible

• Question 8:

  An engineer must advertise OSPF-learned routes and modify the update interval for route filtering by TLOC color to 300 on an SD-WAN device.

  Which configuration accomplishes this task?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  C. Option C

• Question 9:

  Which value of the IPsec rekey timer must be set by the engineer for an OMP graceful restart value set for 24 hours?

  A. 6 hours
  B. 12 hours
  C. 36 hours
  D. 48 hours
  C. 36 hours

• Question 10:

  Refer to the exhibit.

  

  Which issue is shown, and which action must an engineer take to resolve the issue?

  A. An IPsec issue; verify and resolve the tunnel configurations on devices.
  B. An organization name issue; verify and correct the configuration on the devices.
  C. A certificate issue; verify and correct the certificate attributes.
  D. A connectivity issue; verify and resolve the reachability to the controller.
  B. An organization name issue; verify and correct the configuration on the devices.