Cisco 300-415 Online Practice Questions and Exam Preparation

Cisco 300-415 Online Questions & Answers

• Question 71:

  Which issue triggers the Cisco Umbrella resolver to forward DNS requests to the intelligent proxy?

  A. A domain is locally reachable.
  B. A domain is block-listed.
  C. A domain is nonexistent.
  D. A domain is grey-listed.
  D. A domain is grey-listed.

  ---

  Explanation

  References:

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_data_umbrbran/configuration/xe-16/sec-data-umbrella-branch-xe-16-book/sec-data-umbrella-bran.pdf

• Question 72:

  Refer to the exhibit.

  

  

  A small company was acquired by a large organization. As a result, the new organization decided to update information on their Enterprise RootCA and generated a new certificate using openssl.

  Which configuration updates the new certificate and issues an alert in vManage Monitor | Events Dashboard?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  B. Option B

  ---

  Explanation

  References:

  https://www.cisco.com/c/en/us/td/docs/solutions/CVD/SDWAN/cisco-sdwan-controller-cert-deploy-guide.html

• Question 73:

  A voice packet requires a latency of 50 msec.

  Which policy is configured to ensure that a voice packet is always sent on the link with less than a 50 msec delay?

  A. localized data policy
  B. centralized control policy
  C. localized control policy
  D. centralized data policy
  D. centralized data policy

  ---

  Explanation

  Centralized data policies allow you to define rules and conditions for application-aware routing, QoS (Quality of Service), and traffic optimization. In this case, you would set up the policy to prioritize voice traffic and select the link with a delay of less than 50 milliseconds as the preferred path for voice packets.

  https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/policies/ios-xe-17/policies-book-xe/application-aware-routing.html

• Question 74:

  DRAG DROP

  Drag and drop the security terminologies from the left onto the PCI-compliant network features and devices on the right.

  Select and Place:

  

  

• Question 75:

  Which protocol runs between the vSmart controllers and WAN Edge routers when the vSmart controller acts like a route reflector?

  A. OMP outside the DTLS/TLS control connection
  B. BGP inside the DTLS/TLS
  C. IPsec inside the DTLS/TLS control connection
  D. OMP inside the DTLS/TLS control connection
  D. OMP inside the DTLS/TLS control connection

• Question 76:

  Refer to the exhibit.

  

  A Cisco SD-WAN network carries traffic for several departments and over 1200 users with several applications at site A and site B branches over the MPLS1 circuit. An engineer is provisioning a higher bandwidth on-demand metro circuit as a backup connection.

  Which two configurations must the engineer apply to implement the on-demand tunnels? (Choose two.)

  A. Spokes omp no shutdown ecmp-limit 16 system on-demand enable on-demand idle-timeout 10
  B. Hubs sdwan service TE vrf global exit
  C. Spokes sdwan service TE vrf global exit omp no shutdown ecmp-limit 16
  D. Hubs sdwan service TE vrf global exit system on-demand enable on-demand idle-timeout 10
  E. Spokes vpn 0 service TE exit omp no shutdown ecmp-limit 16
  B. Hubs sdwan service TE vrf global exit
  C. Spokes sdwan service TE vrf global exit omp no shutdown ecmp-limit 16

• Question 77:

  Which component is used to optimize the multicast distribution tree enabled through the multicast network?

  A. IGMP client
  B. vManage controllers
  C. VPN concentrator
  D. OMP replicator
  D. OMP replicator

• Question 78:

  What is a key element used in a vBond Orchestrator redundancy topology?

  A. load-balancer with health probes
  B. DHCP server
  C. fully qualified domain name
  D. stun server
  C. fully qualified domain name

• Question 79:

  An engineer must configure a centralized policy on a site in which all HTTP traffic should use the Public Internet circuit if the loss on this circuit is below 10%, otherwise MPLS should be used.

  Which configuration wizard fulfills this requirement?

  A. Create Applications or Groups of Interest > Configure Traffic Data > Apply Policies to Sites and VPNs.
  B. Configure VPN Membership > Apply Policies to Sites and VPNs.
  C. Create Applications or Groups of Interest > Configure Traffic Rules > Apply Policies to Sites and VPNS.
  D. Configure Topology > Apply Policies to Sites and VPNs.
  C. Create Applications or Groups of Interest > Configure Traffic Rules > Apply Policies to Sites and VPNS.

  ---

  Explanation

  References:

  https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/policies/vedge/policies-book/data-policies.html#id_107211

• Question 80:

  An engineer must automate certificate signing through Cisco.

  Which vManage configuration achieves this task?

  A. vpn 0 dns 208.67.222.222 primary allow-service dns allow-service sshd allow-service netconf
  B. vpn 0 allow-service dns allow-service sshd allow-service netconf
  C. vpn 512 dns 208.67.222.222 primary allow-service dns allow-service sshd allow-service netconf
  D. vpn 512 allow-service dns allow-service sshd allow-service netconf
  C. vpn 512 dns 208.67.222.222 primary allow-service dns allow-service sshd allow-service netconf

  ---

  Explanation

  Automated certificate signing through Cisco Systems With this option, certificate signing requests are automatically sent to the Cisco PnP cloud service where the certificate is signed. The vManage then automatically retrieves the certificate and installs it. A DNS server needs to be configured to resolve the hostname, cloudsso.cisco.com and subsequently, apx.cisco.com. The vManage needs to reach both servers on TCP port 443.

  Account credentials are configured before this certificate option can be configured.

  Procedure 1: Verify Cisco server reachability 1. Ensure that a DNS server is defined for VPN 0 on vManage via SSH or console:

  config terminal

  vpn 0

  dns 208.67.222.222 primary

  commit and-quit