Cisco 300-415 Implementing Cisco SD-WAN Solutions (300-415 ENSDWI) Exam Practice Test
Implementing Cisco SD-WAN Solutions (300-415 ENSDWI) Questions and Answers
What is a benefit of the application aware firewall feature in the Cisco SD-WAN solution?
Which set of platforms must he in separate VMS as of release 16.1?
The network administrator is configuring a QoS scheduling policy on traffic received from transport side tunnels on WAN Edge 5000 routers at location 406141498 Which command must be configured on these devices?
What are the two components of an application-aware firewall? (Choose two.)
An engineer must configure egress QoS for voice traffic. Which queue must the engineer configure on the WAN Edge router to accomplish the task?
An engineer is creating a policy for VPN1 users. Their scavenger traffic at site 101 must pass through a firewall. Which two match conditions must be selected to enable this policy? (Choose two.)
Which configuration changes the packet loss priority from low to highly?
A)
B)
C)
D)
Refer to the exhibit.
vManage and vBond have an issue establishing a connection to each other. Which configuration resolves the issue?
An engineer creates a data policy to prevent communication from the 172.20.21.0/24 network to the 172.20.41.0/24 network. Which configuration accomplishes this task?
Drag and drop the BFD parameters from the left onto the BFD configurations on the right.
Refer to the exhibit.
Customer XYZ cannot provison dual connectivity on both Its routers due to budget constratnts but wants to use tnth RI and R2 interface for users behind them for load toward the hub site Which configurauon achieves this objectives?
A)
B)
C)
D)
What is a default protocol for control plane connection?
Refer to the exhibit.
cEdge101 has six possible routes to connect to spokes. However, only four routes are currently in use. Which CLI configuration ensures that all six routes are used?
An engineer must configure a centralized policy on a site in which all HTTP traffic should use the Public Internet circuit if the loss on this circuit is below 10%. otherwise MPLS should be used Which configuration wizard fulfils this requirement?
Which feature builds transport redundancy by using the cross link between two redundant WAN Edge routers?
Drag and drop the attributes from the left that make each transport location unique onto the right. Not all options are used.
Which application list is preconfigured?
How many vManage NMSs should be installed in each domain to achieve scalability and redundancy?
An organization requires the use of integrated preventative engines, exploit protection, and the most updated and advanced signature-based antivirus with sandboxing and threat intelligence to stop malicious attachments before they reach users and get executed. Which Cisco SD-WAN solution meets the requirements?
A customer wants to use AWS for Cisco SD-WAN laaS services by deploying virtual SD-WAN routers in a transit AWS VPC The transit VPC then connects via site-to-site IPsec tunnels to an AWS transit gateway Which transit VPC connects via site-to-site IPsec tunnels to an AWS transit gateway?
Which protocol is used for the vManage to connect to the vSmart Controller hosted in Cloud?
Which component is used for stateful inspection of TCP, UDP. and ICMP flows in Cisco SD-WAN firewall policies?
Refer to the exhibit.
vManage and vSmart have an issue establishing a connection to vBond. Which configuration resolves the issue?
Refer to the exhibit.
An enterprise has enabled load balancing over MPLS and Internet links. Which feature from the monitoring tool does an engineer use to visualize the available links utilized by the data traffic between Service VPNs?
An administrator must configure an ACL for traffic coming in from the service-side VPN on a specific WAN device with circuit ID 391897770. Which policy must be used to configure this ACL?
Which control policy assigned to Drenches in the out direction establishes a strict hub-and-spoke topology tor VPN2?
A)
B)
C)
D)
Refer to the exhibit.
An engineer is troubleshooting a control connection Issue. What does "connect" mean in this how control connections output?
Refer to the exhibit.
The engineer must assign community tags to 3 of its 74 critical server networks as soon as that are advertised to BGP peers. These server networks must not be advertised outside AS. Which configuration fulfill this requirement?
A)
B)
C)
D)
Which issue triggers the Cisco Umbrella resolver to toward DNS requests to the intelligent proxy?
Which issue triggers the Cisco Umbrella resolver to toward DNS requests to the intelligent proxy?
An engineer is tasked to improve throughput for connection-oriented traffic by decreasing round-trip latency. Which configuration will achieve this goal?
Which data policy configuration influences BGP routing traffic flow from LAN to WAN?
A)
B)
C)
D)
Which protocol is used between redundant vSmart controllers to establish a permanent communication channel?
How does the replicator role function in cisco SD-WAN?
Which component of the Cisco SD-WAN secure extensible network provides a single pane of glass approach to network monitoring and configuration?
An engineer creates this data policy for DIA for VPN 10:
Which policy sequence enables DIA for external networks?
A network administrator configures SNMFV3 on a Cisco WAN Edge router from CL I for monitoring purposes How many characters are supported by the snmp user username command?
A bank is looking for improved customer experience for applications and reduce overhead related to compliance and security. Which key feature or features of the Cisco SD-WAN solution will help the bank to achieve their goals?
When VPNs are grouped to create destination zone in Zone-Based Firewall, how many zones can a single VPN be part of?
What is a benefit of the application-aware firewall?
What is a requirement for deployment of on-premises vBond controllers through the Cisco Plug and Play Connect process?
Which third-party Enterprise CA server must be used (or a cloud-based vSmart controller?
Refer to the exhibit A user has selected the options while configuring a VPN Interface Ethernet feature template What is the required configuration parameter the user must set in this template for this feature to function?
An engineer configured a data policy called ROME-POLICY. Which configuration allows traffic flow from the Rome internal network toward other sites?
Refer to the exhibit. An ongineer configured OMP with an ovorlay-as of 10666. What is tho AS-PATH for prefix 104.104.104.104/32 on R1007?
What do receivers request to join multicast streams in a Cisco SO-WAN network?
A customer has 1 to 100 service VPNs and wants to restrict outbound updates for VPN1 Which control policy configuration restricts these updates?
A)
B)
C)
D)
An engineer is configuring a data policy for packets that must be captured through the policy. Which command accomplishes this task?
Which command verifies a policy that has been pushed to the vEdge router?
Refer to the exhibit The network team must configure application-aware routing for the Service VPN 50.0.0.0/16 The SLA must prefer MPLS for video traffic but the remaining traffic must use a public network What must be defined other than applications before the application-aware policy is create?
How is the scalability of the vManage increased in Cisco SD-WAN Fabric?
What is the function of colocation in Cloud OnRamp SaaS?
Which behavior describes a WAN Edge router running dual DIA when its DPI engine has identified a cloud SaaS application?
Refer to the exhibit. The ge0/0 interface connects to a 30-MB link. A network administrator wants to always have 10 MB available for high priority traffic. When lower-priority traffic busts exceed 20 MB. Traffic should be redirected to the second WAN interface ge0/1. Which set of configurations accomplishes this task?
A)
B)
C)
D)
Which percentage for total memory or total CPU usage for a device is classified as normal in the WAN Edge Health pane?
What is a requirement for a WAN Edge to reach vManage, vBond, and vSmart controllers in a data center?
Which destination UDP port is used by WAN Edge router to make a DTLS connection with vBond Orchestrator?
Which combination of platforms are managed by vManage?
Company ABC has decided to deploy the controllers using the On-Prem method. How does the administrator upload the WAN Edge list to the vManage?
A)
B)
C)
D)
What are the two advantages of configuration groups in a Cisco SD-WAN deployment? (Choose two.)
Drag and drop the steps from the left Into the order on the right to delete a software image for a WAN Edge router starting with Maintenance > Software Upgrade > Device list on vManage.
Drag and drop the route verification output from show omp tlocs from the left onto the correct explanations on the right.
In Cisco SD-WAN, what protocol is used for control connections between SD-WAN devices?
What is an attribute of TLOC’?
Which attribute identifies the type of a vRoute?
Which Cisco SD-WAN configuration provides the advantages of day-zero deployment and reusable configuration components?
What is a description of vManage NMS?
Which two different states of a WAN Edge certificate are shown on vManage? (Choose two.)
Refer to the exhibit.
The Cisco SD-WAN network is configured with a default full-mesh topology. An engineer wants Paris WAN Edge to use the Internet HOC as the preferred TLOC for MSN Messenger and AOL Messenger traffic. Which policy achieves this goal?
A)
B)
C)
D)
A network administrator is creating an OMP feature template from the vManage GUI to be applied to WAN edge routers. Which configuration attribute will avoid the redistribution of the routes back into the OMP from the LAN side?
What is the main purpose of using TLOC extensions in WAN Edge router configuration?
Which type of lists are used to group related items via an application-aware routing policy under the policy lists command hierarchy on vSmart controllers?
A network administrator is configuring a centralized control policy based on match action pairs for multiple conditions, which order must be configured to prefer Prefix List over TLOC and TLOC over Origin?
Refer to the exhibit.
An engineer configured OMP with an overlay-as of 10666. What is the AS-PATH for prefix 104.104.104.104/32 on R100?
Which value of the IPsec rekey timer must be set by the engineer for an OMP graceful restart value set for 24 hours?
Where on vManage does an engineer find the details of control node failure?
What is a benefit of using REST APIs?
Which feature delivers traffic to the Cisco Umbrella SIG cloud from a Cisco SD-WAN domain?
Refer to the exhibit. An engineer is troubleshooting a control connection issue on a WAN Edge device that shows socket errors. The packet capture shows some ICMP packets dropped between the two devices. Which action resolves the issue?
Refer to the exhibit. Which issue is shown, and which action must an engineer take to resolve the issue?
Refer to the exhibit. Which configuration extends the INET interface on R1 to be used by R2 for control and data connections?
A)
B)
C)
Which VPN connects the transport-side WAN Edge interface to the underlay/WAN network?
Which SD-WAN component detects path performance information in the organization to report the issue to the service provider at site ID:S4288T5E44F04?
Refer to the exhibit Which configuration ensures that OSPF routes learned from Site2 are reachable at Sitel and vice-versa?
Refer to the exhibit. Which configuration value is used to change the administrative distance of iBGP routes to 20?
Refer to the exhibit. A Cisco SD-WAN network carries traffic for several departments and over 1200 users with several applications at site A and site B branches over the MPLS1 circuit. An engineer is provisioning a higher bandwidth on-demand metro circuit as a backup connection. Which two configurations must the engineer apply to implement the on-demand tunnels? (Choose two.)
Which type of route advertisement of OMP can be verified?
Which protocol runs between the vSmart controllers and WAN Edge routers when the vSmart controller acts like a route reflector?
What is the function of the AppNav Controller in the Cisco SD-WAN AppNav solution?
Refer to the exhibit. A customer wants to deploy service insertion at site1. Which traffic from VPN 10 must route to this site through a firewall. A policy must be in place to route VPN 10 traffic from all sites toward this firewall. Which configuration must be on the vSmart controller to meet this requirement?
Which Cisco router provides a distributed multicore architecture optimized for SD-WAN branch support?
Which two criteria ate supported to filter traffic on a Cisco Umbrella Cloud-delivered firewall? (Choose two )
Which two features does the application firewall provide? (Choose two.)
Which configuration defines the groups of interest before creation of the access list or route map?
A)
B)
C)
D.
Refer to the exhibit. Company ABC has a hub-and-spoke topology in place and currently is load balancing their data traffic at the hub site over MPLS and the public Internet. The leased circuit must be preferred over the shared circuit. Which configuration meets the requirement?
Which capability does Cisco SD-WAN Multi-Region Fabric provide?
When the VPN membership policy is being controlled at the vSmart controller, which policy disallows VPN 1 at sites 20 and 30?
A)
B)
C)
D)
Which template configures the out-of-band management VPN?
A)
B)
C)
D)
An engineering team must prepare a traffic engineering policy where an MPLS circuit is preferred for traffic coming from the Admin VLAN Internet should be used as a backup only. Which configuration fulfill this requirement?
A)
B)
C)
D)
Refer to the exhibit. An enterprise network is connected with an ISP network on an 80 Mbps bandwidth link. The network operation team observes 100 Mbps traffic on the 1Gig-ISP link during peak hours Which configuration provides bandwidth control to avoid traffic congestion during peak hours?
A)
B)
C)
D)
An engineer wants to change the configuration of the certificate authorization mode from manual to automated. Which GUI selection will accomplish this?
Which cloud based component in cisco SD-WAN is responsible for establishing a secure connection to each WAN edge router and distributes routers and policy information via omp?
A network administrator is configuring VRRP to avoid a traffic black hole when the transport side of the network is down on the master device. What must be configured to get the fastest failover to standby?
Which two requirements must be met for DNS inspection when integrating with cisco umbrella? (Choose two)
Refer to the exhibit.
Customer XYZ cannot provision dual connectivity on both of its routers due to budget constraints but wants to use both R1 and R2 interlaces for users behind them for load balancing toward the hub site. Which configuration achieves this objective?
Which secure connection should be used to access the REST APIs through the Cisco vManage web server?
Which plane builds and maintains the network topology and makes decisions on traffic flows?
In a Cisco SD-WAN architecture, what is the role of the WAN Edge?
Which action is performed during the onboarding process when a WAN Edge router is connected to ZTP server ztp.viptela com?
Refer to the exhibit.
The network team must configure branch B WAN Edge device 103 to establish dynamic full-mesh IPsec tunnels between all colors with branches over MPLS and Internet circuits. The branch ts configured with:
Which configuration meets the requirement?
A)
B)
C)
D)
What are two benefits of installing Cisco SD-WAN controllers on cloud-hosted services? (Choose two.)
What is the ZTP workflow for Cisco IOS XE-based devices?
A network administrator is configuring Qos on a vEdge 5000 router and needs to enable it on the transport side interface. Which policy setting must be selected to accomplish this goal?
Which feature template configures OMP?
A)
B)
C)
D)
Which device in the SD- WAN solution receives and categorizes event reports, and generates alarms?
Which component of the Cisco SD-WAN control plane architecture should be located in a public Internet address space and facilitates NAT-traversal?
How many subnets are necessary in Azure VNet for a WAN Edge device to function in the cloud deployment?
An organization wants to discover monitor and track the applications running on the WAN Edge device on the LAN Which configuration achieves this goal?
Refer to the exhibit Which configuration sets up direct Internet access for VPN 1?
Which protocol is used to measure jitter, loss, and latency on SD-WAN overlay tunnels?
Drag and drop the alarm states from the left onto the corresponding alarm descriptions on the right.
In the Cisco SD_WAN solution, vSmart controller is responsible for which two actions? (Choose two.)
What are the default username and password for vSmart Controller when it is installed on a VMware ESXi hypervisor'?
Configure individual VRFs for each customer according to the topology to achieve these goals :
R1
R2
SW1
SW2
SW3
An engineer must configure two branch WAN Edge devices where an Internet connection is available and the controllers are in the headquarters. The requirement is to have IPsec VPN tunnels established between the same colors. Which configuration meets the requirement on both WAN Edge devices?
Refer to the exhibit.
Which QoS treatment results from this configuration after the access list acl-guest is applied inbound on the vpn1 interface?
Which platform cannot provide IPS and URL filtering capabilities?
Refer to the exhibit. The Cisco SD-WAN is deployed using the default topology. The engineer wants to configure a service insertion policy such that all data traffic between Rome to Paris is forwarded through the NGFW located in London. Which configuration fulfills this requirement, assuming that the Service VPN ID is 1?
Options:
Which on-the-box security feature supported by the Cisco ISR 4451 SD-WAN device and not on vEdge?
Which encryption algorithm is used for encrypting SD-WAN data plane traffic?
An engineer modifies a data policy for DIA in VPN 67. The location has two Internet-bound circuits. Only the web browsing traffic must be admitted for DIA. without further discrimination about which transport to use.
Here is the existing data policy configuration:
Which policy configuration sequence meets the requirements?
Which controller is excluded from the process of checking against the authorized, allowed list?
Which protocol is used to propagate multicast join requests over the Cisco SD-WAN fabric?
Which SD-WAN devices require multicast PIM and IGMP configurations when setting up SD-WAN multicast?