Cisco 300-415 Online Practice Questions and Exam Preparation

Cisco 300-415 Online Questions & Answers

• Question 301:

  Which capability does Cisco SD-WAN Multi-Region Fabric provide?

  A. end-to-end SLA-aware routing
  B. overlay support for IP multicast
  C. assignment of a single vSmart controller to handle region 0 and noncore regions
  D. end-to-end encryption for inter-region traffic
  D. end-to-end encryption for inter-region traffic

• Question 302:

  Which component of the Cisco Catalyst SD-WAN Manager allows a network manager to associate configuration groups with WAN Edge routers?

  A. workflow library
  B. feature template
  C. deploy configuration group workflow
  D. custom configuration group workflow
  C. deploy configuration group workflow

• Question 303:

  What is a description of vManage NMS?

  A. It is accessible only from VPN 512 (the management VPN).
  B. A cluster requires device templates to be created on and attached to the same server
  C. It is a software process on a dedicated WAN Edge router in the network.
  D. A cluster consists of a minimum of two vManage NMSs
  B. A cluster requires device templates to be created on and attached to the same server

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/optimization-ha/vedge/network-optimization-high-availability-book/high-availability.html

• Question 304:

  Which encryption algorithm is used for encrypting SD-WAN data plane traffic?

  A. Triple DES
  B. IPsec
  C. AES-128
  D. AES-256 GCM
  D. AES-256 GCM

  ---

  Explanation

  In the Cisco Catalyst SD-WAN network for unicast traffic, data plane encryption is done by AES-256-GCM, a symmetric-key algorithm that uses the same key to encrypt outgoing packets and to decrypt incoming packets.

• Question 305:

  An enterprise has several sites with multiple VPNs that are isolated from each other. A new requirement came where users in VPN 73 must be able to talk to users in VPN 50.

  Which configuration meets this requirement?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  A. Option A

  ---

  Explanation

  References:

  https://www.ciscolive.com/c/dam/r/ciscolive/latam/docs/2018/pdf/BRKCRS-2186.pdf

• Question 306:

  Refer to the exhibit.

  

  An administrator is configuring a policy in addition to an existing hub-and-spoke policy for two sites that should directly communicate with each other.

  How is this policy configured?

  A. hub-and-spoke
  B. mesh
  C. import existing topology
  D. custom control (route and TLOC)
  D. custom control (route and TLOC)

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/policies/vedge/policies-book/controlpolicies.html#id_107219

• Question 307:

  Refer to the exhibit.

  

  An engineer must configure a policy on a SD-WAN Controller device. This policy will allow VPN99 at branch 1 for direct internet access when accessing Google Apps and using the routing table upon its unavailability.

  Which configuration must be applied to meet this requirement?

  A. action accept nat pool 1 nat tallback
  B. action accept nat use-vpn 0 nat tallback
  C. action accept nat overload nat tallback
  D. action accept nat use-vpn 0 nat tallback
  B. action accept nat use-vpn 0 nat tallback

• Question 308:

  Which VPN must be present on at least one interface to install Cisco vManage and integrate it with WAN Edge devices in an overlay network site ID:S0123T4E56F78?

  A. VPN 512
  B. any VPN number selected
  C. services VPN range 0-511
  D. VPN 0
  D. VPN 0

  ---

  Explanation

  Cisco vManage is a centralized management platform for Cisco SD-WAN. It uses VPN 0, also known as the transport VPN, to communicate with WAN Edge devices. Therefore, VPN 0 must be present on at least one interface of the vManage VM in order to install it and integrate it with WAN Edge devices.

• Question 309:

  Which two products that perform lifecycle management for virtual instances are supported by WAN Edge cloud routers? (Choose two.)

  A. OpenStack
  B. AWS
  C. VMware vCenter
  D. Azure
  E. IBM Cloud
  A. OpenStack
  C. VMware vCenter

  ---

  Explanation

  https://www.cisco.com/c/en/us/solutions/collateral/enterprise-networks/sd-wan/nb-07-cloud-router-data-sheet-cte-en.html

  

• Question 310:

  On which device is a service FW address configured to insert firewall service at the hub?

  A. vSmart at the branch
  B. vEdge at the branch
  C. vEdge at the hub
  D. vSmart at the hub
  C. vEdge at the hub

  ---

  Explanation

  References:

  https://sdwan-docs.cisco.com/Product_Documentation/Software_Features/Release_18.4/07Policy_Applications/02Service_Chaining/Service_Chaining_Configuration_Examples