Cisco 300-415 Online Practice Questions and Exam Preparation

Cisco 300-415 Online Questions & Answers

• Question 501:

  Company E wants to deploy Cisco SD-WAN with controllers in AWS The company's existing WAN is on private MPLS without Internet access to controllers m AWS An Internet circuit is added to a site in addition to the existing MPLS circuit.

  Which interface template establishes BFD neighbors over both transports?

  

  

  

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  B. Option B

• Question 502:

  In which device state does the WAN edge router create control connections, but data tunnels are not created?

  A. valid
  B. backup
  C. active
  D. staging
  D. staging

• Question 503:

  A policy is created to influence the routing path in the network using a group of prefixes.

  Which policy application will achieve this goal when applied to a site list?

  A. control-policy
  B. vpn-membership policy
  C. app-route policy
  D. cflowd-template
  A. control-policy

• Question 504:

  Which VPNs must be configured outside the workflow to complete the SD-WAN overlay setup when using the Quick Connect workflow?

  A. service and transport VPNs
  B. service VPNs
  C. transport VPNs
  D. management VPNs
  D. management VPNs

  ---

  Explanation

  The Quick Connect workflow in Cisco SD-WAN simplifies the initial setup process by automating many configuration steps. However, certain configurations still need to be performed outside of this automated workflow to ensure a complete and operational SD-WAN overlay.

  Management VPNs: Management VPNs, specifically VPN 512, are used for device management and are critical for the proper operation and management of the SD-WAN devices. These VPNs are typically configured outside of the Quick Connect workflow to ensure that all devices can be properly managed and monitored.

  Service and Transport VPNs: While service and transport VPNs are also important, they are often included within the Quick Connect workflow, which sets up the necessary configurations to enable data transport across the SD-WAN fabric.

• Question 505:

  Which command disables the logging of syslog messages to the local disk?

  A. no system logging disk local
  B. system logging server remote
  C. no system logging disk enable
  D. system logging disk disable
  C. no system logging disk enable

  ---

  Explanation

  References:

  https://sdwan-docs.cisco.com/Product_Documentation/Software_Features/SD-WAN_Release_16.3/02System_and_Interfaces/08Configuring_System_Logging

• Question 506:

  Which two different states of a WAN Edge certificate are shown on vManage? (Choose two.)

  A. inactive
  B. active
  C. staging
  D. invalid
  E. provisioned
  B. active
  E. provisioned

• Question 507:

  How are custom application ports monitored in Cisco SD-WAN controllers?

  A. Customers add custom application ports in vAnalytics and vSmart.
  B. Cisco adds custom application ports in vAnalytis and vManage.
  C. Customers add custom application ports in vAnalytics and vManage.
  D. Cisco adds custom application ports in vAnalytics and vSmart.
  C. Customers add custom application ports in vAnalytics and vManage.

  ---

  Explanation

  Custom Application Ports Created in VManage is activated immediately for application visibility functionality only (Monitoring Traffic).

• Question 508:

  How does the Cisco SD-WAN Cloud OnRamp solution rate the performance of a SaaS application from a branch office to the cloud via a given path?

  A. It computes a quality-of-experience score.
  B. It monitors the packet loss of priority queues.
  C. It counts the number of interface errors.
  D. It measures the delay and jitter of the path.
  A. It computes a quality-of-experience score.

• Question 509:

  A network administrator is bringing up one WAN Edge for branch connectivity.

  Which types of tunnels form when the WAN edge router connects to the SD-WAN fabric?

  A. DTLS or TLS tunnel with vBond controller and IPsec tunnel with vManage controller
  B. DTLS or TLS tunnel with vBond controller and IPsec tunnel with other WAN Edge routers
  C. DTLS or TLS tunnel with vSmart controller and IPsec tunnel with other Edge routers
  D. DTLS or TLS tunnel with vSmart controller and IPsec tunnel with vBond controller
  C. DTLS or TLS tunnel with vSmart controller and IPsec tunnel with other Edge routers

• Question 510:

  What are the components of zone configuration in an application-aware firewall?

  A. destination zone, interface zone, source zone, and zone pair
  B. source zone, interface zone, and zone pair
  C. destination zone, interface zone, and zone pair
  D. source zone, destination zone, and zone pair
  D. source zone, destination zone, and zone pair