Cisco 300-415 Online Practice Questions and Exam Preparation

Cisco 300-415 Online Questions & Answers

• Question 31:

  Which two options are SD-WAN solution capabilities? (Choose two)

  A. Ability to provide and integrate security with complementary products and applications
  B. The separation of management plane, control plane and data plane to enable horizontal scaling
  C. Truck roll branch turn up for easy provisioning and new installations
  D. Cloud hosted or on-premise fully redundant management and control plane functions
  B. The separation of management plane, control plane and data plane to enable horizontal scaling
  D. Cloud hosted or on-premise fully redundant management and control plane functions

• Question 32:

  Refer to the exhibit.

  

  Cisco SD-WAN is deployed with controllers hosted in a data center. All branches have WAN Edge devices with dual connections to the data center: one via Internet and the other using MPLS. Three branches out of 20 have issues with their control connections on MPLS circuit. The local error refers to Control Connection Failure.

  Which action resolves the issue?

  A. Update the system IP on vManage and then resend it to the controllers.
  B. Rectify any issues with the underlay routing configuration.
  C. Match the TLOC color on the controllers and all WAN Edge devices.
  D. Math certificates for the DTLS connection and Root CA must be installed first on WAN Edge devices.
  B. Rectify any issues with the underlay routing configuration.

  ---

  Explanation

  DTLS Connection Failure (DCONFAIL)

  This is one of the common issues of control connectivity that does not come up. Probable causes include a firewall or some other connectivity issues.

  It could be that some or all packets are dropped/filtered somewhere. The example with larger ones is given intcpdump results here.

  1. The next hop (NH) router is not reachable.

  2. The default gateway is not installed in the Routing Information Base (RIB).

  3. The Datagram Transport Layer Security (DTLS) port is not open in the controllers.

• Question 33:

  How is multicast routing enabled on devices in the Cisco SD-WAN overlay network?

  A. The WAN Edge routers originate multicast service routes to the vSmart controller via OMP, which then forwards joins for requested multicast groups based on IGMP v2 or v3 toward the source or PIM-RP as specified in the original PIM join message.
  B. The WAN Edge routers originate multicast service routes to the vSmart controller via OMP, which then forwards joins for requested multicast groups based on IGMP v1 or v2 toward the source or PIM-RP as specified in the original PIM join message.
  C. The vSmart controller originates multicast service routes to the WAN Edge routers via OMP, which then forwards joins for requested multicast groups based on IGMP v1 or v2 toward the source or PIM-RP as specified in the original PIM join message.
  D. The vSmart controller originates multicast service routes to the WAN Edge routers via OMP, which then forwards joins for requested multicast groups based on IGMP v2 or v3 toward the source or PIM-RP as specified in the original PIM join message.
  A. The WAN Edge routers originate multicast service routes to the vSmart controller via OMP, which then forwards joins for requested multicast groups based on IGMP v2 or v3 toward the source or PIM-RP as specified in the original PIM join message.

  ---

  Explanation

  References:

  https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/routing/ios-xe-17/routing-book-xe/m-multicast-routing.html

• Question 34:

  What are the two prerequisites for a Cloud OnRamp for SaaS feature to show the accurate vQoE score? (Choose two.)

  A. internet exit in VPN0
  B. NAT in VPN 0
  C. Cloud OnRamp enabled on WAN Edge router
  D. static route tracker for SaaS application
  E. DNS in service VPN
  A. internet exit in VPN0
  B. NAT in VPN 0

• Question 35:

  Which platform cannot provide IPS and URL filtering capabilities?

  A. Cisco CSR 1000V
  B. Cisco ISR 1000
  C. Cisco ISR 4000
  D. Cisco Catalyst 8300
  B. Cisco ISR 1000

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/security/ios-xe-17/security-book-xe/security-overview.html

• Question 36:

  A company is using Catalyst SD-WAN Manager as its root certificate authority server and must generate a root certificate using the vShell (Linux) built into the CLI of Catalyst SD-WAN Manager.

  Which command must be issued to generate the root certificate?

  A. openssl req -x509 -new-nodes -key XYZ.pem -sha256 -days 365 \subj "/C=US/ST=DC/L=DC/O=Cisco /CN=device.lab"-out ABC.key
  B. openssl genrsa -out ROOTCA.pem 2048
  C. openssl req -x509 -new-nodes -key XYZ.key -sha256 -days 365 Isubj "/C-US/ST-DC/L-DC/O-Cisco /CN-device.lab" 1-out ABC.pem
  D. openssl genrsa -out ROOTCA.key 2048
  C. openssl req -x509 -new-nodes -key XYZ.key -sha256 -days 365 Isubj "/C-US/ST-DC/L-DC/O-Cisco /CN-device.lab" 1-out ABC.pem

• Question 37:

  SIMULATION

  A network is configured with CoPP to protect the CORE router route processor for stability and DDoS protection. As a company policy, a class named class-default is preconfigured and must not be modified or deleted.

  Troubleshoot CoPP to resolve the issues introduced during the maintenance window to ensure that:

  

  

  WAN

  

  

  

  CORE

  

  

  MGMT

  

  A. See the solution below in explanation.
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. See the solution below in explanation.

  ---

  Explanation

  CORE

  policy-mao CoPP

  class CoPP-CRITICAL

  police 1000000 50000 50000 conform-action transmit exceed-action transmit

  

  CORE# Copy run start

  TESTING:

  CORE

  

  MGMT

  

• Question 38:

  Refer to the exhibit.

  

  The SD-WAN network is configured with a default full-mesh topology. The SD-WAN engineer wants the Barcelona WAN Edge to use the MPLS TLOC as the preferred TLOC when communicating with the Rome site.

  Which configuration must the engineer use to create a list to select MPLS color toward the Rome TLOC?

  

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  C. Option C

• Question 39:

  When VPNs are grouped to create destination zone in Zone-Based Firewall, how many zones can a single VPN be part of?

  A. two
  B. four
  C. one
  D. three
  C. one

  ---

  Explanation

  References:

  https://sdwan-docs.cisco.com/Product_Documentation/Software_Features/Release_18.4/Security/Enterprise_Firewall_with_Application_Awareness

• Question 40:

  Which platform is a Cisco SD-WAN virtual platform?

  A. Cisco ISR 4000
  B. Cisco Nexus 1000V
  C. Cisco CSR 1000V
  D. Cisco ASR 1000
  C. Cisco CSR 1000V