Cisco 300-415 Online Practice Questions and Exam Preparation

Cisco 300-415 Online Questions & Answers

• Question 291:

  Which two hardware platforms support Cisco IOS XE SD-WAN images? (Choose two.)

  A. ISR4000 series
  B. ISR9300 series
  C. vEdge-1000 series
  D. ASR9000 series
  E. ASR1000 series
  A. ISR4000 series
  E. ASR1000 series

  ---

  Explanation

  References:

  https://www.cisco.com/c/en/us/solutions/collateral/enterprise-networks/sd-wan/white_paper-c11-741071.html

• Question 292:

  Which Cisco SD-WAN configuration provides the advantages of day-zero deployment and reusable configuration components?

  A. configuration groups
  B. configuration via the vBond controller
  C. configuration through a Cisco Prime server
  D. CLI-based templates
  A. configuration groups

• Question 293:

  Refer to the exhibit.

  

  

  An engineer is creating a policy for VPN1 users. Their scavenger traffic at site 101 must pass through a firewall.

  Which two match conditions must be selected to enable this policy? (Choose two.)

  A. destination port
  B. source data prefix
  C. packet length
  D. protocol
  E. application/application family list
  D. protocol
  E. application/application family list

• Question 294:

  DRAG DROP

  A customer has two routers at its branch and wants one of its branch routers to advertise its loopback1 in BGP configured in transport VPN.

  The customer wants a policy to advertise more addresses from the loopback1 subnet in the future.

  Drag and drop the code snippets from the bottom onto the boxes in the configuration to meet the requirement. Not all options are used.

  

  Select and Place:

  

  

• Question 295:

  What is the maximum number of IPsec that are temporarily created and converged on a new set if IPsec Sas in the pairwise keys process during a simultaneous rekey?

  A. 2
  B. 4
  C. 6
  D. 8
  B. 4

• Question 296:

  An engineer is adding a tenant with location ID 399533345 in vManage.

  What is the maximum number of alphanumeric characters that is accepted in the tenant name filed?

  A. 64
  B. 128
  C. 256
  D. 8
  B. 128

• Question 297:

  Refer to the exhibit.

  

  Which configuration must the engineer use to form underlay connectivity for the Cisco SD-WAN network?

  

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  A. Option A

• Question 298:

  Refer to the exhibit.

  

  

  A WAN Edge device cannot connect to SD-WAN Validator; however, can ping it.

  Which action resolves the issue?

  A. Verify that the SD-WAN Validator IP address is correct.
  B. Modify the system IP on WAN Edge.
  C. Install the correct root certificate on WAN Edge.
  D. Switch the peer protocol from DTLS to TLS.
  A. Verify that the SD-WAN Validator IP address is correct.

• Question 299:

  In which Cisco SD-WAN deployment scenario does Cisco Umbrella SIG deliver the most value?

  A. when Cisco IOS XE SD-WAN devices are deployed throughout the network
  B. when resource-intensive security operations are offloaded from entry-level WAN Edge devices
  C. when the identity of several WAN Edge devices is verified throughout the network
  D. when a centralized Internet breakout solution is implemented
  D. when a centralized Internet breakout solution is implemented

  ---

  Explanation

  In a centralized Internet breakout scenario, all branch and remote office traffic is routed through a centralized Internet gateway. Cisco Umbrella SIG can be used to provide advanced security services, DNS protection, content filtering, and threat protection for all Internet-bound traffic. This approach enhances security, enforces security policies, and provides a consistent security posture across the entire network.

• Question 300:

  What are the two functions of vSmart? (Choose two.)

  A. It ensures that valid WAN Edge routers can build the control plane connectivity.
  B. It validates that the WAN Edge trying to join the overlay is authorized to join.
  C. It orchestrates connectivity between WAN Edge routers using policies to create network topology.
  D. It uses TLOCs to uniquely identify the circuit interface to control plane and data plane information.
  E. It builds control plane connections with WAN Edge routers using TLS or DTLS.
  C. It orchestrates connectivity between WAN Edge routers using policies to create network topology.
  E. It builds control plane connections with WAN Edge routers using TLS or DTLS.