Cisco 300-415 Online Practice Questions and Exam Preparation

Cisco 300-415 Online Questions & Answers

• Question 191:

  Refer to the exhibit.

  

  The Cisco SD-WAN network is configured with a default full-mesh topology. An engineer wants Paris WAN Edge to use the Internet HOC as the preferred TLOC for MSN Messenger and AOL Messenger traffic.

  Which policy achieves this goal?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  C. Option C

• Question 192:

  Which on-the-box security feature is supported by the Cisco ISR 4451 SD-WAN device and not on vEdge?

  A. Cloud Express service
  B. Enterprise Firewall with Application Awareness
  C. reverse proxy
  D. iPsec/GRE cloud proxy
  B. Enterprise Firewall with Application Awareness

  ---

  Explanation

  The Cisco ISR 4451 SD-WAN device supports the "Enterprise Firewall with Application Awareness" feature, while vEdge devices do not typically have the same advanced firewall capabilities.

• Question 193:

  Which two vRoute attributes should be matched or set in vSmart policies and modified by data policies? (Choose two.)

  A. VPN
  B. preference
  C. site ID
  D. origin
  E. TLOC
  A. VPN
  E. TLOC

• Question 194:

  An organization requires the use of integrated preventative engines, exploit protection, and the most updated and advanced signature-based antivirus with sandboxing and threat intelligence to stop malicious attachments before they reach users and get executed.

  Which Cisco SD-WAN solution meets the requirements?

  A. Cisco Trust Anchor module
  B. URL filtering and Umbrella DNS security
  C. Cisco AMP and Threat Grid
  D. Snort IPS
  C. Cisco AMP and Threat Grid

  ---

  Explanation

  Cisco AMP and Threat Grid provide advanced threat protection capabilities, including antivirus, sandboxing, and threat intelligence. These technologies work together to detect and prevent a wide range of security threats, including malicious attachments, before they can impact users and the network.

  https://blogs.cisco.com/networking/enabling-amp-in-cisco-sd-wan

• Question 195:

  An engineer must apply the configuration for certificate installation to vBond Orchestrator and vSmart Controller.

  Which configuration accomplishes this task?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  A. Option A

• Question 196:

  Which two virtualized environments are available for a company to install the controllers using the on-premises model? (Choose two )

  A. VMware vSphere ESXi
  B. VMware Workstation
  C. kernel-based virtual machine
  D. OpenStack
  E. Microsoft Hyper-V
  A. VMware vSphere ESXi
  D. OpenStack

• Question 197:

  Which two mechanisms are used to guarantee the integrity of data packets in the Cisco SD-WAN architecture data plane? (Choose two.)

  A. certificates
  B. transport locations
  C. authentication headers
  D. encapsulation security payload
  E. TPM chip
  C. authentication headers
  D. encapsulation security payload

  ---

  Explanation

  A number of components contribute to the integrity of data packets in the Viptela data plane:

  1. ESP, which is the standard IPsec encryption protocol, protects (via encryption and authentication) the inner header, data packet payload, and ESP trailer in all data packets.

  2. AH, which is the standard IPsec authentication protocol, protects (via authentication) the entire data packet, including the inner and outer headers, data packet payload, and ESP trailer

• Question 198:

  A company is deploying a new policy that restricts access to Cisco Catalyst SD-WAN Manager features based on VPN groups, segments, and users.

  Which configuration accomplishes this task when a user has already been provisioned with the name user1 for this purpose?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  A. Option A

• Question 199:

  Which two features are not supported when FIPS mode is enabled on a Cisco IOS XE SD-WAN device? (Choose two.)

  A. SXP reflectors
  B. SXP over IPv6
  C. Cisco TrustSec
  D. Static IP-SGT mapping
  E. Authentication Key
  C. Cisco TrustSec
  E. Authentication Key

• Question 200:

  An engineer must configure two branch WAN Edge devices where an Internet connection is available and the controllers are in the headquarters. The requirement is to have IPsec VPN tunnels established between the same colors.

  Which configuration meets the requirement on both WAN Edge devices?

  

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  B. Option B