Cisco 300-415 Online Practice Questions and Exam Preparation

Cisco 300-415 Online Questions & Answers

• Question 201:

  What is the order of operations for software upgrades of Cisco SD-WAN nodes?

  A. vBond, vManage, vSmart, WAN Edge
  B. vManage, vBond, vSmart, WAN Edge
  C. vManage, vBond, WAN Edge, vSmart
  D. vManage, vSmart, vBond, WAN Edge
  B. vManage, vBond, vSmart, WAN Edge

  ---

  When you upgrade a group of Cisco vBond Orchestrator, Cisco vSmart Controllers, and Cisco IOS XE SD-WAN devices or Cisco vEdge devices in either a standalone or Cisco vManage cluster deployment, the software upgrade and reboot is performed first on the Cisco vBond Orchestrator, next on the Cisco vSmart Controller, and finally on the Cisco IOS XE SD-WAN devices or Cisco vEdge devices.

• Question 202:

  An engineer wants to track tunnel characteristics within a SLA-based policy for convergence. Which policy configuration will achieve this goal?

  A. Data policy
  B. Control policy
  C. App-route policy
  D. VPN membership policy
  C. App-route policy

  ---

  App-Route policies allow you to define and manage application-aware routing policies based on specific application characteristics, such as application performance, latency, and other tunnel-related characteristics. These policies are used to ensure that traffic is routed over the most suitable paths to meet SLA (Service Level Agreement) requirements, including convergence and performance criteria.

• Question 203:

  Refer to the exhibit.

  

  Which issue is shown, and which action must an engineer take to resolve the issue?

  A. An IPsec issue; verify and resolve the tunnel configurations on devices.
  B. An organization name issue; verify and correct the configuration on the devices.
  C. A certificate issue; verify and correct the certificate attributes.
  D. A connectivity issue; verify and resolve the reachability to the controller.
  B. An organization name issue; verify and correct the configuration on the devices.

• Question 204:

  Which compression algorithm does DRE use in a Cisco SD-WAN environment?

  A. Lempel-Ziv-Welch encoding
  B. Huffman encoding
  C. run-length encoding
  D. Ziv Huffman encoding
  A. Lempel-Ziv-Welch encoding

  ---

  DRE Compression: DRE uses the Lempel-Ziv-Welch (LZW) compression algorithm for compressing data. DRE operates on large streams of data, typically tens to hundreds of bytes or more, and maintains a much larger compression history.

• Question 205:

  An administrator must configure an ACL for traffic coming in from the service-side VPN on a specific WAN device with circuit ID 391897770. Which policy must be used to configure this ACL?

  A. local data policy
  B. central data policy
  C. app-aware policy
  D. central control policy
  A. local data policy

  ---

  Localized data policy controls the flow of data traffic into and out of interfaces and interface queues on a vEdge router. This type of data policy is provisioned locally, on the vEdge router, using access lists. It allows you to classify traffic and map different classes to different queues. It also allows you to mirror traffic and to police the rate at which data traffic is transmitted and received. https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/policies/vedge/policies-book/control-policies.html#c_Localized_Control_Policy_12226.xm

• Question 206:

  An engineer is troubleshooting a certificate issue on vEdge. Which command is used to verify the validity of the certificates?

  A. show control local-properties
  B. show control summary
  C. show certificate installed
  D. show certificate status
  A. show control local-properties

  ---

  https://www.cisco.com/c/en/us/support/docs/routers/sd-wan/214509-troubleshoot-control-connections.html

• Question 207:

  Which two WAN Edge devices should be deployed in a cloud? (Choose two.)

  A. WAN Edge 5000v
  B. ASR 1000v
  C. CSR 1000v
  D. WAN Edge 100wm
  E. WAN Edge cloud
  C. CSR 1000v
  E. WAN Edge cloud

  ---

• Question 208:

  What is a benefit of the application aware firewall feature in the Cisco SD-WAN solution?

  A. application monitoring
  B. application malware protection
  C. application visibility
  D. control policy enforcement
  C. application visibility

  ---

  https://www.cisco.com/c/dam/en/us/td/docs/routers/sdwan/configuration/config-18-4.pdf#page=242

• Question 209:

  WAN Edge routers are configured manually to use UDP port offset to use nondefault offset values when IPsec tunnels are created. What is the offset range?

  A. 1-19
  B. 0-18
  C. 0-19
  D. 1-18
  C. 0-19

  ---

  https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2020/pdf/R6BGArNQ/TECSEC-2355.pdf

• Question 210:

  Which protocol is used by the REST API to communicate with network devices in the Cisco SD-WAN network?

  A. HTTP
  B. SSL
  C. IPsec
  D. SSH
  A. HTTP

  ---

  A REST API is a web service that adheres to the REST, or Representational State Transfer, architecture. The REST architecture uses a stateless, client–server, cacheable communications protocol. The Cisco SD-WAN vManage NMS web server uses HTTP and its secure counterpart, HTTPS, as the communications protocol. REST applications communicate over HTTP or HTTPS using standard HTTP methods to make calls between network devices.