Cisco 300-415 Online Practice Questions and Exam Preparation

Cisco 300-415 Online Questions & Answers

• Question 351:

  Which two features does the application firewall provide? (Choose two.)

  A. classification of 1400+ layer 7 applications
  B. blocks traffic by application or application-family
  C. numbered sequences of match-action pairs
  D. classification of 1000+ layer 4 applications
  E. application match parameters
  A. classification of 1400+ layer 7 applications
  B. blocks traffic by application or application-family

  ---

  Explanation

  The application firewall in Cisco SD-WAN provides the following features:

  1. Blocks traffic by application or application-family: The application firewall allows you to define policies that block or permit traffic based on specific applications or application families. This enables granular control over the types of traffic that are allowed or denied.

  2. Classification of 1400+ layer 7 applications: The application firewall classifies a wide range of layer 7 (application layer) applications, which allows you to create policies based on specific applications and their characteristics. This extensive classification database provides detailed application awareness for traffic management and security.

• Question 352:

  An administrator must deploy the controllers using the On-Prem method while vManage can access the PnP portal from inside

  How are the two WAN Edge authorized allowed lists to be made available to vManage? (Choose two)

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  E. Option E
  D. Option D
  E. Option E

  ---

  Explanation

  https://sdwan-docs.cisco.com/Product_Documentation/vManage_Help/Release_18.4/Configuration/Devices

• Question 353:

  Which type of service provider is responsible for secure, private connections between data centers, access regions, and cloud providers in Cisco SD-WAN Multi-Region Fabric?

  A. distributed network providers
  B. middle-mile network providers
  C. last-mile network providers
  D. first-mile network providers
  B. middle-mile network providers

• Question 354:

  Which plane builds and maintains the network topology and makes decisions on traffic flows?

  A. data
  B. orchestration
  C. management
  D. control
  D. control

  ---

  Explanation

  In Cisco SD-WAN, the plane responsible for building and maintaining the network topology and making decisions on traffic flows is the Control Plane. The Control Plane in Cisco SD-WAN is managed by the vSmart controllers, which are responsible for orchestrating network policies, maintaining the network topology, and making intelligent routing decisions.

• Question 355:

  Refer to the exhibit.

  

  

  

  An enterprise requires spoke sites 102 and 103 to use the MPLS circuit to reach the 172.16.101.0/24 subnet (Service VPN 100) advertised by site 101 (Hub Site).

  Which policy configuration meets this requirement?

  A. apply-policy site-list Spokes control-policy Route-Policy in
  B. apply-policy site-list Spokes control-policy Route-Policy out
  C. apply-policy site-list Hub control-policy Route-Policy in
  D. apply-policy site-list Hub control-policy Route-Policy out
  B. apply-policy site-list Spokes control-policy Route-Policy out

• Question 356:

  Where does the Cisco V-Edge Router perform QoS traffic classification?

  A. Per VPN
  B. Per vEdge
  C. Egress interface
  D. Ingress interface
  D. Ingress interface

• Question 357:

  Which component is responsible for creating and maintaining the secure DTLS/TLS connection on the vSmart controller?

  A. vdaemon
  B. OMP
  C. SNMP
  D. NETCONF
  A. vdaemon

  ---

  Explanation

  A Cisco SD-WAN daemon running on each vSmart controller and router creates and maintains the secure DTLS or TLS connections between the devices. This daemon is called vdaemon.

• Question 358:

  Which REST API call checks the status of an action that is performed on a device?

  A. admin status
  B. troubleshoot status
  C. configuration status
  D. monitor status
  D. monitor status

  ---

  Explanation

  The REST API call that checks the status of an action performed on a device in a Cisco SD-WAN environment is typically referred to as a "monitor status" API call. This call is used to check the status of various operations or actions that have been initiated on the device and monitor their progress or completion.

• Question 359:

  Which hardware component is involved in the Cisco SD-WAN authentication process for ISR platforms?

  A. ZTP
  B. OTPC
  C. SUDI
  D. TPMD
  C. SUDI

  ---

  Explanation

  The hardware component involved in the Cisco SD-WAN authentication process for ISR (Integrated Services Router) platforms is the SUDI (Signed Unique Device Identifier).

  SUDI is a mechanism used for device authentication and is often employed in Cisco SD-WAN deployments. It helps verify the authenticity of the device and is part of the secure onboarding process.

  References:

  https://www.cisco.com/c/dam/en/us/td/docs/solutions/CVD/SDWAN/sdwan-wan-edge-onboarding-deploy-guide-2020nov.pdf

• Question 360:

  Which Certificate of Authority (CA) option is used when configuring a TLS proxy in the Cisco Catalyst SD-WAN environment?

  A. SD-WAN Manager as CA
  B. SD-WAN Controller as CA
  C. vController as CA
  D. WAN Edge as CA
  A. SD-WAN Manager as CA