Cisco 300-415 Online Practice Questions and Exam Preparation

Cisco 300-415 Online Questions & Answers

• Question 431:

  Company E wants to deploy Cisco SD-WAN with controllers in AWS The company's existing WAN is on private MPLS without Internet access to controllers m AWS An Internet circuit is added to a site in addition to the existing MPLS circuit. Which interface template establishes BFD neighbors over both transports?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  B. Option B

  ---

• Question 432:

  Refer to the exhibit.

  

  A Cisco SD-WAN network carries traffic for several departments and over 1200 users with several applications at site A and site B branches over the MPLS1 circuit. An engineer is provisioning a higher bandwidth on-demand metro circuit as a backup connection.

  Which two configurations must the engineer apply to implement the on- demand tunnels? (Choose two.)

  A. Spokes omp no shutdown ecmp-limit 16 system on-demand enable on-demand idle-timeout 10
  B. Hubs sdwan service TE vrf global exit
  C. Spokes sdwan service TE vrf global exit omp no shutdown ecmp-limit 16
  D. Hubs sdwan service TE vrf global exit system on-demand enable on-demand idle-timeout 10
  E. Spokes vpn 0 service TE exit omp no shutdown ecmp-limit 16
  B. Hubs sdwan service TE vrf global exit
  C. Spokes sdwan service TE vrf global exit omp no shutdown ecmp-limit 16

• Question 433:

  Refer to the exhibit.

  

  Which configuration stops Netconf CLI logging on WAN Edge devices during migration?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  B. Option B

  ---

  https://www.cisco.com/c/en/us/td/docs/routers/sdwan/command/sdwan-cr-book/config-cmd.html#wp3867250313

  

• Question 434:

  When a WAN Edge device joins the Cisco SD-WAN overlay, which Cisco SD-WAN component orchestrates the connection between the WAN Edge device and a vSmart controller?

  A. OMP
  B. vBond
  C. vManage
  D. APIC-EM
  B. vBond

  ---

  In Cisco SD-WAN, when a WAN Edge device (such as a router or appliance) joins the SD-WAN overlay, the component responsible for orchestrating the connection between the WAN Edge device and a vSmart controller is the vBond (or vBond Orchestrator).

  Here's how the process typically works:

  WAN Edge Device: The WAN Edge device is initially deployed in a branch office or data center.

  vBond Orchestrator: The WAN Edge device is configured with the address of the vBond Orchestrator. The vBond Orchestrator acts as the orchestrator for the WAN Edge devices and helps them establish secure connections with the other SD-WAN components.

  vSmart Controller: The vBond Orchestrator assists the WAN Edge device in establishing a secure connection with a vSmart controller. The vSmart controller is responsible for control plane functions in the SD-WAN, such as routing and policy distribution.

  vManage: The vManage controller is used for centralized management and monitoring of the SD-WAN network.

• Question 435:

  A network administrator is configuring an application-aware firewall between inside zones to an outside zone on a WAN edge router using vManage GUI. What kind of inspection is performed when the "inspect" action is used?

  A. Layer 7 inspection for TCP and Layer 4 inspection for UDP
  B. IPS inspection for TCP and-Layer 4 inspection for UDP
  C. stateful inspection for TCP and stateless inspection of UDP
  D. stateful inspection for TCP and UDP
  D. stateful inspection for TCP and UDP

  ---

  When the "inspect" action is used in the context of an application-aware firewall, it typically refers to stateful inspection for both TCP and UDP traffic. This allows the firewall to keep track of the state of network connections and make decisions based on the state of those connections.

• Question 436:

  An engineer must automate certificate signing through Cisco.

  Which vManage configuration achieves this task?

  A. vpn 0 dns 208.67.222.222 primary allow-service dns allow-service sshd allow-service netconf
  B. vpn 0 allow-service dns allow-service sshd allow-service netconf
  C. vpn 512 dns 208.67.222.222 primary allow-service dns allow-service sshd allow-service netconf
  D. vpn 512 allow-service dns allow-service sshd allow-service netconf
  C. vpn 512 dns 208.67.222.222 primary allow-service dns allow-service sshd allow-service netconf

  ---

  Automated certificate signing through Cisco Systems

  With this option, certificate signing requests are automatically sent to the Cisco PnP cloud service where the certificate is signed. The vManage then automatically retrieves the certificate and installs it. A DNS server needs to be configured to resolve the hostname, cloudsso.cisco.com and subsequently, apx.cisco.com. The vManage needs to reach both servers on TCP port 443.

  Account credentials are configured before this certificate option can be configured.

  Procedure 1: Verify Cisco server reachability

  1. Ensure that a DNS server is defined for VPN 0 on vManage via SSH or console: config terminal vpn 0 dns 208.67.222.222 primary commit and-quit

• Question 437:

  Refer to the exhibit.

  

  An engineer configures a hub-and-spoke SD-WAN topology with the requirement that traffic from router A branch to router B branch is guaranteed to flow through the network hub, router C. Which configuration meets the requirement for router A?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  D. Option D

• Question 438:

  Which third-party Enterprise CA server must be used for a cloud-based vSmart controller?

  A. RootCert
  B. VeriSign
  C. Microsoft
  D. RADIUS
  A. RootCert

  ---

  https://www.nterone.com/articles/cisco-sdwan-viptela-everything-you-wanted-to-know-about-certificates-deployment-but-were-afraid-to-ask

• Question 439:

  What are the two protocols redistributed into OMP? (Choose two.)

  A. OSPF
  B. RIP
  C. LDP
  D. RSVP
  E. EIGRP
  A. OSPF
  E. EIGRP

  ---

  

  https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/routing/ios-xe-17/routing-book-xe/m-unicast-routing.html

• Question 440:

  DRAG DROP

  Drag and drop the route verification output from show omp tlocs from the left onto the correct explanations on the right.

  Select and Place: