Cisco 300-415 Online Practice Questions and Exam Preparation

Cisco 300-415 Online Questions & Answers

• Question 221:

  DRAG DROP

  Drag and drop the devices from the left onto the correct functions on the right.

  Select and Place:

  

  

  ---

  References:

  https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2019/pdf/LTRCRS-3550.pdf

  slide 8

• Question 222:

  A large retail organization decided to move some of the branch applications to the AWS cloud.

  How does the network architect extend the in-house Cisco SD-WAN branch to cloud network into AWS?

  A. Create virtual WAN Edge devices Cloud through the AWS online software store
  B. Create virtual instances of vSmart Cloud through the AWS online software store
  C. Create GRE tunnels to AWS from each branch over the Internet
  D. Install the AWS Cloud Router in the main data center and provide the connectivity from each branch
  A. Create virtual WAN Edge devices Cloud through the AWS online software store

  ---

  Explanation

  With Cloud OnRamp for IaaS, vManage will automatically deploy SD-WAN edge virtual routers in a transit VPC, acting as virtual aggregation routers.

  https://www.cisco.com/c/en/us/td/docs/solutions/CVD/SDWAN/Cisco_Cloud_onRamp_for_IaaS_AWS_Version2.html#_Toc54023359

• Question 223:

  How are the individual applications monitored on per user basis in the overlay network?

  A. availability
  B. bandwidth
  C. tunnel
  D. performance
  D. performance

• Question 224:

  Which configuration change allows direct internet access at the branch site for YouTube traffic?

  

  

  A. policy data-policy DP1 vpn-list vpn10 sequence 10 match app-list YouTube ! action count YouTube ! default-action accept ! ! lists vpn-list vpn10 vpn 10 ! app-list YouTube app youtube app youtube_hd ! site-list Remote site-id 14 ! ! apply-policy site-list Remote data-policy DP1 from-service
  B. policy data-policy DPI vpn-list vpn10 sequence 10 match app-list YouTube ! action drop count YouTube ! default-action accept ! ! lists vpn-list vpn10 vpn 10 ! app-list YouTube app youtube app youtube_hd ! site-list Remote site-id 14 ! ! apply-policy site-list Remote data-policy DPI from-transport
  C. policy data-policy DPI vpn-list vpn10 sequence 10 match app-list YouTube ! action count YouTube nat vpn 0 ! default-action accept ! ! lists vpn-list vpn10 vpn 10 ! app-list YouTube app youtube app youtube_hd ! site-list Remote site-id 14 ! ! apply-policy site-list Remote data-policy DPI from-service
  D. policy data-policy DPI vpn-list vpn10 sequence 10 match app-list YouTube ! action count YouTube nat vpn 0 ! default-action accept ! ! lists vpn-list vpn10 vpn 10 ! app-list YouTube app youtube app youtube_hd ! site-list Remote site-id 14 ! ! apply-policy site-list Remote data-policy DPI from-transport
  A. policy data-policy DP1 vpn-list vpn10 sequence 10 match app-list YouTube ! action count YouTube ! default-action accept ! ! lists vpn-list vpn10 vpn 10 ! app-list YouTube app youtube app youtube_hd ! site-list Remote site-id 14 ! ! apply-policy site-list Remote data-policy DP1 from-service

• Question 225:

  What is the main purpose of using TLOC extensions in WAN Edge router configuration?

  A. transports control traffic to remote-site WAN Edge routers
  B. creates an IPsec tunnel from WAN Edge to vBond Orchestrator
  C. creates hardware-level transport redundancy at the local site
  D. transports control traffic to a redundant vSmart Controller
  C. creates hardware-level transport redundancy at the local site

  ---

  Explanation

  TLOC extensions are used to provide redundancy and failover capabilities at the local site. They allow a WAN Edge router to connect to multiple transport networks (e.g., MPLS, Internet) simultaneously. If one transport network becomes unavailable or experiences issues, the WAN Edge router can seamlessly switch to an alternative transport network, ensuring network uptime and reliability.

• Question 226:

  Refer to the exhibit.

  

  The SD-WAN network is configured with a default full-mesh topology. An engineer wants Barcelona and Paris to communicate to each other through the London site using a control policy.

  Which control policy configuration accomplishes the task?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  A. Option A

  ---

  Explanation

• Question 227:

  Which Cisco SD-WAN component centralizes policy configuration?

  A. Cisco DNA Center
  B. vBond
  C. WAN Edge
  D. vSmart
  D. vSmart

  ---

  Explanation

  In the Cisco SD-WAN network architecture, centralized control policy is handled by the Cisco vSmart Controller, which effectively is the routing engine of the network. The Cisco vSmart Controller is the centralized manager of network-wide routes, maintaining a primary route table for these routes.

• Question 228:

  Refer to the exhibit.

  

  The control connection is failing.

  Which action resolves the issue?

  A. import vSmart in vManager
  B. Validate the certificates authenticity on vSmart
  C. Upload the WAN Edge list on vManage.
  D. Restore the reachability to the vSmart
  D. Restore the reachability to the vSmart

  ---

  Explanation

  https://www.cisco.com/c/en/us/support/docs/routers/sd-wan/214509-troubleshoot-control-connections.html

• Question 229:

  Which feature allows reachability to an organization's internally hosted applications for an active DNS security policy on a device?

  A. data policy with redirect
  B. local domain bypass
  C. DNSCrypt configuration
  D. DHCP option 6
  B. local domain bypass

  ---

  Explanation

  A local domain bypass allows reachability to an organization's internally hosted applications when an active DNS security policy is in place. It permits the device to bypass DNS security policies for specific domains or hosts, typically those that are hosted internally by the organization. This ensures that access to internal resources is not blocked or affected by DNS security policies.

  https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/security/ios-xe-16/security-book-xe/umbrella-integration.html

• Question 230:

  Refer to the exhibit.

  

  A company requires a data traffic policy that uses the "mpls" and "biz-internet" colors for Google Apps if the SLA is met. A link with the "public-internet" color must be used if the other two links violate the data SLA.

  Which configuration meets these requirements?

  

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  B. Option B