Cisco 300-415 Online Practice Questions and Exam Preparation

Cisco 300-415 Online Questions & Answers

• Question 161:

  Refer to the exhibit.

  

  An enterprise has hub and spoke topology where it has several VPNs. An engineer must allow users in VPN91 to reach users in VPN92 and VPN10 to reach VPN91 and VPN92. Which configuration meets these requirements?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  C. Option C

  ---

• Question 162:

  A policy is created to influence the routing path in the network using a group of prefixes. Which policy application will achieve this goal when applied to a site list?

  A. control-policy
  B. vpn-membership policy
  C. app-route policy
  D. cflowd-template
  A. control-policy

  ---

• Question 163:

  What is the OMP graceful restart default value on vSmart controllers and WAN Edge routers?

  A. 21,600 seconds
  B. 43,200 seconds
  C. 86,400 seconds
  D. 604,800 seconds
  B. 43,200 seconds

  ---

  OMP graceful restart is enabled by default on Cisco vSmart Controllers and Cisco SD-WAN devices. OMP graceful restart has a timer that tells the OMP peer how long to retain the cached advertised routes. When this timer expires, the cached routes are considered to be no longer valid, and the OMP peer flushes them from its route table. The default timer is 43,200 seconds (12 hours), and the timer range is 1 through 604,800 seconds (7 days). To modify the default timer value:

• Question 164:

  What is the size of SGT data in the metadata header?

  A. 8 bits
  B. 16 bits
  C. 24 bits
  D. 32 bits
  B. 16 bits

  ---

  An SGT is a 16-bit single label indicating the security classification of a source in the TrustSec domain. It is appended to an Ethernet frame or an IP packet.

• Question 165:

  Which feature delivers traffic to the Cisco Umbrella SIG cloud from a Cisco SD-WAN domain?

  A. L2TPv3 tunnel
  B. IPsec tunnel
  C. local umbrella agent
  D. source NAT
  B. IPsec tunnel

  ---

  The Cisco Secure Internet Gateway relies on tunnels, more specifically IPSec tunnels from a WAN edge device to communicate to the Cisco Umbrella Secure Internet Gateway (SIG)

• Question 166:

  Which device in the Cisco SD-WAN solution receives and categorizes event reports, and generates alarms?

  A. vSmart controllers
  B. WAN Edge routers
  C. vBond controllers
  D. vManage NMS
  D. vManage NMS

  ---

  https://sdwan-docs.cisco.com/Product_Documentation/vManage_Help/Release_17.1/vManage_NMS_Product_Help

• Question 167:

  An engineer is adding a tenant with location ID 399533345 in vManage.

  What is the maximum number of alphanumeric characters that is accepted in the tenant name filed?

  A. 64
  B. 128
  C. 256
  D. 8
  B. 128

• Question 168:

  Refer to the exhibit.

  

  An enterprise decides to use the Cisco SD-WAN Cloud onRamp for SaaS feature and utilize HQ site Biz iNET to reach SaaS Cloud for branch C, currently reaching SaaS Cloud directly.

  Which role must be assigned to devices at both sites in vManage Cloud Express for this solution to work?

  A. Branch to be added as Client Sites and H Q as DIA.
  B. H Q to be added as Gateway and Branch as DIA.
  C. Branch to be added as DIA and H Q as Client Site.
  D. H Q to be added as Gateway and Branch as Client Site.
  D. H Q to be added as Gateway and Branch as Client Site.

  ---

  https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/cloudonramp/ios-xe-17/cloud-onramp-book-xe/cor-saas.html

• Question 169:

  Which VPNs must be configured outside the workflow to complete the SD-WAN overlay setup when using the Quick Connect workflow?

  A. service and transport VPNs
  B. service VPNs
  C. transport VPNs
  D. management VPNs
  D. management VPNs

  ---

  The Quick Connect workflow in Cisco SD-WAN simplifies the initial setup process by automating many configuration steps. However, certain configurations still need to be performed outside of this automated workflow to ensure a complete and operational SD- WAN overlay.

  Management VPNs: Management VPNs, specifically VPN 512, are used for device management and are critical for the proper operation and management of the SD- WAN devices. These VPNs are typically configured outside of the Quick Connect workflow to ensure that all devices can be properly managed and monitored. Service and Transport VPNs: While service and transport VPNs are also important, they are often included within the Quick Connect workflow, which sets up the necessary

  configurations to enable data transport across the SD-WAN fabric.

• Question 170:

  A network engineer must configure all branches to communicate with each other through the Service Chain Firewall located at the headquarters site. Which configuration allows the engineer to accomplish this task?

  

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  B. Option B

  ---