Cisco 300-415 Online Practice Questions and Exam Preparation

Cisco 300-415 Online Questions & Answers

• Question 131:

  Which two actions are necessary to set the Controller Certificate Authorization mode to indicate a root certificate? (Choose two.)

  A. Select a private certificate signing authority instead of a public certificate signing authority.
  B. Change the organization name of the Cisco SD-WAN fabric.
  C. Select the Controller Certificate Authorization mode that is recommended by Cisco.
  D. Upload an SSL certificate to vManage.
  E. Select a validity period from the drop-down menu.
  A. Select a private certificate signing authority instead of a public certificate signing authority.
  D. Upload an SSL certificate to vManage.

  ---

  Explanation

  References:

  https://www.cisco.com/c/en/us/td/docs/solutions/CVD/SDWAN/cisco-sdwan-controller-cert-deploy-guide.html

• Question 132:

  Refer to the exhibit.

  

  A user has selected the options while configuring a VPN Interface Ethernet feature template.

  What is the required configuration parameter the user must set in this template for this feature to function?

  A. The "IP MTU" field must be increased from the default value of 1500 to support the additional overhead.
  B. The "Shaping Rate (Kbps)" field must be configured with a value
  C. The "Adaptive QoS" field must be set to "on"
  D. The "Bandwidth Downstream" field must be configured with a value
  B. The "Shaping Rate (Kbps)" field must be configured with a value

• Question 133:

  

  Refer to the exhibit. A user in the branch is connecting to Office 365 for the first time.

  Over which path does the branch WAN Edge router traffic follow?

  A. routing table of the branch WAN Edge router
  B. DIA exit of the branch WAN Edge router
  C. forwarded to the gateway site
  D. dropped because the minimum vQoE score has not been met
  B. DIA exit of the branch WAN Edge router

• Question 134:

  An engineer is configuring a centralized policy to influence network route advertisement.

  Which controller delivers this policy to the fabric?

  A. vSmart
  B. vManage
  C. WAN Edge
  D. vBond
  A. vSmart

• Question 135:

  Which routing protocol has the highest default administrative distance?

  A. IS-IS
  B. OMP
  C. IBGP
  D. external EIGRP
  B. OMP

  ---

  Explanation

  Administrative Distance

  Administrative distance is the metric used to select the best path when there are two or more different routes to the same destination from multiple routing protocols. When the Cisco Catalyst SD-WAN Controller or the router is selecting the OMP route to a destination, it prefers the one with the lowest administrative distance value.

  References:

  https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/routing/ios-xe-17/routing-book-xe/m-unicast-routing.html

• Question 136:

  What are the two components of an application-aware firewall? (Choose two.)

  A. default action
  B. sequence
  C. zone pair
  D. lists
  E. firewall policy
  C. zone pair
  E. firewall policy

• Question 137:

  A vEdge platform is sending VRRP advertisement messages every 10 seconds.

  Which value configures the router back to the default timer?

  A. 2 seconds
  B. 5 seconds
  C. 1 second
  D. 3 seconds
  C. 1 second

  ---

  Explanation

  References:

  https://sdwan-docs.cisco.com/Product_Documentation/vManage_Help/Release_18.3/Configuration/Templates/VPN_Interface_Ethernet

• Question 138:

  Which type of route advertisement of OMP can be verified?

  A. Origin, TLOC, and VPN
  B. Origin, TLOC, and service
  C. OMP, VPN, and origin
  D. OMP, TLOC, and service
  D. OMP, TLOC, and service

  ---

  Explanation

  References:

  https://sdwan-docs.cisco.com/Product_Documentation/Software_Features/Release_18.2/03Routing/01Unicast_Overlay_Routing_Overview#OMP_Route_Advertisements

• Question 139:

  Which routes are similar to the IP route advertisements when the routing information of WAN Edge routers is learned from the local site and local routing protocols?

  A. BGP
  B. OMP
  C. TLOC
  D. service
  B. OMP

  ---

  Explanation

  References:

  https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/routing/vEdge-20-x/routing-book/m-unicast-routing.html#:~:text=On%20Cisco%20vSmart%20Controllers,them%20from%20standard%20IP%20routes

• Question 140:

  Which component is used for stateful inspection of TCP, UDP.

  and ICMP flows in Cisco SD-WAN firewall policies?

  A. zones
  B. sites
  C. subnets
  D. interfaces
  A. zones

  ---

  Explanation

  In Cisco SD-WAN firewall policies, zones are used for stateful inspection of TCP, UDP, and ICMP flows. Zones define groups of interfaces and subnets that share common security requirements and enable you to create firewall policies to control traffic between these zones.