Cisco 300-415 Online Practice Questions and Exam Preparation

Cisco 300-415 Online Questions & Answers

• Question 201:

  An engineer configures an application-aware routing policy for a group of sites. The locations depend on public and private transports. The policy does not work as expected when one of the transports does not perform properly. This policy is configured:

  

  Which configuration completes the policy so that it works for all locations?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  B. Option B

  ---

  Explanation

  Within the configured policy Realtime is being tagged with DSCP 46 which is voice and Transactional data is attached to DSCP 34 which is interactive video.

  Therefore, both of these 2 clases should have a lower amount of loss and jitter.

• Question 202:

  DRAG DROP

  Drag and drop the alarm slates from the left onto the corresponding alarm descriptions on the right.

  Select and Place:

  

  

• Question 203:

  Refer to the exhibit.

  

  Which configuration stops Netconf CLI logging on WAN Edge devices during migration?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  B. Option B

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/routers/sdwan/command/sdwan-cr-book/config-cmd.html#wp3867250313

  

• Question 204:

  Refer to the exhibit.

  Which QoS treatment results from this configuration after the access list acl-guest is applied inbound on the vpn1 interface?

  

  A. A TCP packet sourcing from 172.16.10.1 and destined to 172.16.20.1 is dropped
  B. A UDP packet sourcing from 172.16.20.1 and destined to 172.16.10.1 is accepted
  C. A UDP packet sourcing from 172.16.10.1 and destined to 172.16.20.1 is dropped
  D. A TCP packet sourcing from 172.16.20.1 and destined to 172.16.10.1 is accepted
  C. A UDP packet sourcing from 172.16.10.1 and destined to 172.16.20.1 is dropped

  ---

  Explanation

  Protocol 6 is used for TCP.

• Question 205:

  Refer to the exhibit.

  

  Which command allows traffic through the IPsec tunnel configured in VPN 0?

  A. service netsvc1 vpn1
  B. service netsvc1 address 1.1.1.1
  C. service FW address 1.1.1.1
  D. service local
  B. service netsvc1 address 1.1.1.1

  ---

  Explanation

  References:

  https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/policies/vedge-20-x/policies-book/service-chaining.html

• Question 206:

  An engineer builds a three-node vManage cluster and then realizes that multiple nodes are unnecessary for the size of the company.

  How should the engineer revert the setup to a single vManage?

  A. Use the cluster conversion utility to convert to standalone vManage.
  B. Restore vManage from the backup VM snapshot.
  C. Leave the cluster as is and point to one vManage.
  D. Remove two nodes from the three-node vManage cluster.
  D. Remove two nodes from the three-node vManage cluster.

  ---

  Explanation

  References:

  https://sdwan-docs.cisco.com/Product_Documentation/vManage_Help/Release_18.1/Administration/Cluster_Management

• Question 207:

  An engineering team must prepare a traffic engineering policy where an MPLS circuit is preferred for traffic coming from the Admin VLAN. Internet should be used as a backup only.

  Which configuration fulfills this requirement?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  B. Option B

• Question 208:

  An engineer wants to change the configuration of the certificate authorization mode from manual to automated.

  Which GUI selection will accomplish this?

  A. Maintenance > Security
  B. Configuration > Certificates
  C. Administration > Settings
  D. Tools > Operational Commands
  C. Administration > Settings

  ---

  Explanation

  To change the configuration of the certificate authorization mode from manual to automated in Cisco SD-WAN, you would typically select:

  Administration > Settings

  The "Administration > Settings" section of the GUI typically includes options for configuring various settings, including certificate authorization modes.

• Question 209:

  Which template configures the out-of-band management VPN?

  

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  C. Option C

• Question 210:

  What is the advantage of instating the controller on-premises?

  A. ease of deployment and management
  B. full control of the data piano and the control plane
  C. automatic geographical redundancy and security
  D. scalability and a cost-saving
  B. full control of the data piano and the control plane