Cisco 300-415 Online Practice Questions and Exam Preparation

Cisco 300-415 Online Questions & Answers

• Question 121:

  Which two ways does a Cisco Catalyst SD-WAN Manager software repository allow an engineer to download images on a Cisco Catalyst SD-WAN Edge device? (Choose two.)

  A. Use a data plane connection to download an image from the bootflash of other Cisco WAN Edge devices.
  B. Use a remote file server that is reachable through an FTP or HTTP URL.
  C. Use out-of-band management to download an image from the local SD-WAN Manager server.
  D. Use an image on a USB to upload an image on the SD-WAN Manager server directly.
  E. Use a control plane connection to download an image from a SD-WAN Validator controller validating the device list.
  B. Use a remote file server that is reachable through an FTP or HTTP URL.
  C. Use out-of-band management to download an image from the local SD-WAN Manager server.

• Question 122:

  A customer wants to use AWS for Cisco SD-WAN IaaS services by deploying virtual SD-WAN routers in a transit AWS VPC. The transit VPC then connects via site-to-site IPsec tunnels to an AWS transit gateway.

  Which transit VPC connects via site-to-site IPsec tunnels to an AWS transit gateway?

  A. Cisco Cloud onRamp for SaaS
  B. Cisco Cloud onRamp for Colocation
  C. Cisco Cloud onRamp for IaaS
  D. Cisco Cloud onRamp for Multicloud
  C. Cisco Cloud onRamp for IaaS

  ---

  Explanation

  Cisco Cloud OnRamp for IaaS is designed to simplify and optimize connectivity between on-premises locations, Cisco SD-WAN components, and public cloud environments like AWS.

  The key components and functionalities of Cisco Cloud OnRamp for IaaS in this scenario include:

  Transit VPC: The transit AWS VPC serves as a hub, where the virtual SD-WAN routers are deployed. These SD-WAN routers are responsible for efficiently connecting the customer's on-premises network with resources in the AWS cloud.

  AWS Transit Gateway: The AWS Transit Gateway provides centralized routing and connectivity management for multiple Amazon VPCs, including the transit VPC and other VPCs within the AWS environment. It simplifies and streamlines the routing of traffic between the VPCs and the on-premises network.

  Site-to-Site IPsec Tunnels: Site-to-site IPsec tunnels are used to secure the communication between the SD-WAN routers in the transit VPC and the AWS Transit Gateway, ensuring the confidentiality and integrity of data in transit.

• Question 123:

  Which requirement must be met before deploying data redundancy elimination in SD-WAN?

  A. Ensure that routing is symmetric between locations.
  B. Disable shaping in the queue assigned for the application.
  C. Ensure that traffic is sent through a GRE tunnel
  D. Create a DRE feature template in vManage
  A. Ensure that routing is symmetric between locations.

• Question 124:

  How many vBond controllers must be installed when vManager is installed in a multitenancy environment for four tenants?

  A. One vBond controller is shared between the tenants.
  B. Multitenancy deployment requires three vBand controllers.
  C. Each tenant requires two vBond controllers for redundancy.
  D. Each tenant requires a dedicated vBond controller.
  A. One vBond controller is shared between the tenants.

  ---

  Explanation

  In a multi-tenancy environment with four tenants in Cisco SD-WAN, you would typically deploy a single vBond orchestrator controller for all tenants. The vBond orchestrator is responsible for initial device authentication and secure connectivity establishment, and it acts as a central point for initial contact between WAN Edge devices and other SD-WAN components, such as the vSmart controllers and vManage.

  The number of vBond controllers is not necessarily determined by the number of tenants but by factors like network size, redundancy, and scale. In most deployments, a single vBond orchestrator can handle the needs of multiple tenants.

  Each tenant's devices communicate with the vBond orchestrator independently, and policies are used to isolate and manage each tenant's resources and traffic.

• Question 125:

  Which configuration step is taken on vManage after WAN Edge list is uploaded to support the on-boarding process before the device comes online?

  A. Verify the device certificate
  B. Enable the ZTP process
  C. Set the device as valid
  D. Send the list to controllers
  C. Set the device as valid

  ---

  Explanation

  References:

  https://www.cisco.com/c/dam/en/us/td/docs/solutions/CVD/SDWAN/sd-wan-wan-edge-onboarding-deploy-guide-2020jan.pdf

• Question 126:

  An engineer creates a data policy to prevent communication from the 172.20.21.0/24 network to the 172.20.41.0/24 network.

  Which configuration accomplishes this task?

  A:

  

  B:

  

  C:

  

  D:

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  D. Option D

• Question 127:

  What is the threshold to generate a warning alert about CPU or memory usage on a WAN Edge router?

  A. 70 to 85 percent
  B. 70 to 90 percent
  C. 75 to 85 percent
  D. 75 to 90 percent
  C. 75 to 85 percent

• Question 128:

  Refer to the exhibit.

  

  vManage and vSmart have an issue establishing a connection to vBond.

  Which configuration resolves the issue?

  A. Configure the tunnel interface on all three controllers with a color of transport.
  B. Change the timezone on the vSmart to Europe/London.
  C. Configure the (11.1.1.X/24) IP addresses on the elhO interfaces on vManage and vSmart.
  D. Reconfigure the system-ip parameter on vSmart to 11.1.1.2.
  D. Reconfigure the system-ip parameter on vSmart to 11.1.1.2.

• Question 129:

  DRAG DROP

  Drag and drop the policies from the left onto the correct policy types on the right.

  Select and Place:

  

  

• Question 130:

  In an AWS cloud, which feature provisions WAN Edge routers automatically in Cisco SD-WAN?

  A. Cloud OnRamp
  B. vAnalytics
  C. Cloud app
  D. Network Designer
  A. Cloud OnRamp