[Feb 12, 2024] 100% Latest Most updated 300-415 Questions and Answers
Try with 100% Real Exam Questions and Answers
NEW QUESTION # 212
Drag and drop the policies from the left onto the correct policy types on the right.
Answer:
Explanation:
NEW QUESTION # 213
An administrator must configure an ACL for traffic coming in from the service-side VPN on a specific WAN device with circuit ID 391897770. Which policy must be used to configure this ACL?
- A. app-aware policy
- B. local data policy
- C. central data policy
- D. central control policy
Answer: B
Explanation:
https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/policies/vedge/policies-book/Policy-basics.html
NEW QUESTION # 214
What is a benefit of the application aware firewall feature in the Cisco SD-WAN solution?
- A. application monitoring
- B. application visibility
- C. control policy enforcement
- D. application malware protection
Answer: B
Explanation:
NEW QUESTION # 215
An administrator needs to configure SD-WAN to divert traffic from the company's private network to an ISP network. What action should be taken to accomplish this goal?
- A. configure the application aware policy
- B. configure the data security policy
- C. configure the control policy
- D. configure the data policy
Answer: D
NEW QUESTION # 216
Which two protocols are supported for software image delivery when images are hosted on a remote server? (Choose two.)
- A. HTTP
- B. SSL
- C. HTTPS
- D. FTP
- E. TFTP
Answer: D,E
NEW QUESTION # 217
Refer to the exhibit.
vManage and vBond have an issue establishing a connection to each other. Which configuration resolves the issue?
- A. Configure the encapsulation ipsec command under the tunnel interface on vManage.
- B. Configure a default route on vBond pointing to 172.16.2.254.
- C. Configure the timezone on vBond to Europe/London.
- D. Remove the encapsulation ipsec command under the tunnel interface of vBond.
Answer: B
NEW QUESTION # 218
An engineer is configuring a data policy for IPv4 prefixes for a single WAN Edge device on a site with multiple WAN Edge devices How is this policy added using the policy configuration wizard?
- A. In vManage NMS. select the configure * policies screen select the centralized policy tab and click add policy
- B. In vSmart controller, select the configure * policies screen, select the localized policy tab. and click add policy
- C. In vBond orchestrator. select the configure * policies screen, select the localized policy tab. and click add policy
- D. ln vManage NMS, select the configure * policies screen, select the localized policy tab and click add policy
Answer: D
NEW QUESTION # 219
Which command verifies a policy that has been pushed to the vEdge router?
- A. vEdge#show running-config data policy
- B. vSmart# show running-config policy
- C. vEdge#show policy from-vsmart
- D. vSmart# show running-config apply-policy
Answer: A
NEW QUESTION # 220
An engineer is configuring a new mobility anchor for a WLAN on the CLI with the config wlan mobility anchor add 3 10.10.10.10 command, but the command is failing. Which two conditions must be met to be able to enter this command? (Choose two.)
- A. The WLAN ID must be enabled.
- B. The indicated WLAN ID must be present on the controller.
- C. The anchor controller must be in the same mobility group.
- D. The mobility group keepalive must be configured.
- E. The anchor controller IP address must be within the management interface subnet.
Answer: C,E
NEW QUESTION # 221
Drag and drop the steps from the left into the order on the right to upload software on vManage repository that is accessible from maintenance > Software Repository.
Answer:
Explanation:
NEW QUESTION # 222
Refer to the exhibit
Refer to the exhibit Which NAT types must the engineer configure for the vEdge router to bring up the data plane tunnels?
- A. Use private color on the TLOC
- B. Enable Symmetric MAT on the vEdge interface
- C. Use public color on the TLOC
- D. Enable Full Cone NAT on the vEdge interface
Answer: D
NEW QUESTION # 223
Drag and drop the devices from the left onto the correct functions on the right.
Answer:
Explanation:
Reference:
https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2019/pdf/LTRCRS-3550.pdf slide 8
NEW QUESTION # 224
Refer to the exhibit.
Which configuration change is needed to configure the tloc-extention on Branch1-Edge1?
- A. Option A
- B. Option C
- C. Option D
- D. Option B
Answer: D
NEW QUESTION # 225
Which combination of platforms ate managed by vManage?
- A. lSR435l, ASRl009, vEdge2000, CSR1000v
- B. ISR4321, ASR1001, Nexus, ENCS
- C. ISR4351, ASR1002HX, vEdge2000, vEdge Cloud
- D. ISR4321, ASR1001, ENCS, lSRv
Answer: A
NEW QUESTION # 226
Which template configures the out-of-band management VPN?
A)
B)
C)
D)
- A. Option B
- B. Option A
- C. Option D
- D. Option C
Answer: D
NEW QUESTION # 227 
Refer to the exhibit A vBond controller was added to the controller list with the same Enterprise Root CA certificate as vManage. The two controllers can reach each other via VPNO and share the same organization name, but the control connection is not initiated- Which action resolves the issue?
- A. Configure a valid vBond IP on vManage.
- B. Configure NTP on both controllers to establish a connection.
- C. Configure a valid systom IP on the vBond controller.
- D. Synchronize the WAN Edge list on vManage with controllers.
Answer: A
NEW QUESTION # 228
An engineer configured a data policy called ROME-POLICY. Which configuration allows traffic flow from the Rome internal network toward other sites?
- A. apply-policy site-list Rome data-policy ROME-POLICY from-service
- B. site-list Rome control-policy ROME-POLICY in
- C. site-list Rome control-policy ROME-POLICY out
- D. apply-policy site-list Rome data-policy ROME-POLICY from-tunnel
Answer: D
NEW QUESTION # 229
An administrator must deploy the controllers using the On-Prem method while vManage can access the PnP portal from inside How are the two WAN Edge authorized allowed lists to be made available to vManage?
(Choose two)
- A. Option C
- B. Option D
- C. Option A
- D. Option B
Answer: C,D
Explanation:
Explanation
https://sdwan-docs.cisco.com/Product_Documentation/vManage_Help/Release_18.4/Configuration/Devices
NEW QUESTION # 230
Which two hardware platforms support Cisco IOS XE SD-WAN images'' (Choose two)
- A. ISR9300 series
- B. ISR4000 series
- C. ASR1000 series
- D. ASR9000 series
- E. vEdge-1000 series
Answer: B,D
NEW QUESTION # 231
Refer to the exhibit.
An engineer is troubleshooting a control connection Issue. What does "connect" mean in this how control connections output?
- A. Control connection is up
- B. Control connection is connected
- C. Control connection attempt is in progress
- D. Control connection is down
Answer: C
NEW QUESTION # 232
An engineer is configuring a data policy for IPv4 prefixes for a single WAN Edge device on a site with multiple WAN Edge devices How is this policy added using the policy configuration wizard?
- A. In vSmart controller, select the configure ► policies screen, select the localized policy tab. and click add policy
- B. ln vManage NMS, select the configure ► policies screen, select the localized policy tab and click add policy
- C. In vManage NMS. select the configure ► policies screen select the centralized policy tab and click add policy
- D. In vBond orchestrator. select the configure ► policies screen, select the localized policy tab. and click add policy
Answer: B
NEW QUESTION # 233
Drag and drop the attributes from the left that make each transport location unique onto the right. Not all options are used.
Answer:
Explanation:
Explanation:
NEW QUESTION # 234
Drag and drop the policies from the left onto the correct policy types on the right.
Answer:
Explanation:
Explanation
strict hubandspoke topology
prefer voice and video via MPLS link
perform shaping on traffic
service firewall insertion
NEW QUESTION # 235
Refer to the exhibit.
What does the BFD value of 8 represent?
- A. poll-interval of BFD session .
- B. number of BFD sessions
- C. dead timer of BFD session
- D. hello timer of BFD session
Answer: B
NEW QUESTION # 236
Which feature allows reachability to an organization's internally hosted application for an active DNS security policy on a device?
- A. DHCP option 6
- B. local domain bypass
- C. DNSCrypt configurator
- D. data pokey with redirect
Answer: B
Explanation:
https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/security/ios-xe-16/security-book-xe/umbrella-integration.html
NEW QUESTION # 237
......
New Cisco 300-415 Dumps & Questions: https://vcetorrent.passreview.com/300-415-exam-questions.html