300-415 Question #104: Real Exam Question with Answer & Explanation

The correct answer is D: policy > data-policy > vpn-list > sequence > match. In a Cisco SD-WAN data policy, the match command defines the criteria for identifying and capturing specific packets to which the policy's actions will apply.

Policies

Question

An engineer is configuring a data policy for packets that must be captured through the policy. Which command accomplishes this task?

Options

Apolicy > data-policy > vpn-list > sequence > default-action > drop
Bpolicy > data-policy > vpn-list > sequence > action
Cpolicy > data-policy > vpn-list > sequence > default-action > accept
Dpolicy > data-policy > vpn-list > sequence > match

Explanation

In a Cisco SD-WAN data policy, the match command defines the criteria for identifying and capturing specific packets to which the policy's actions will apply.

Common mistakes.

A. default-action drop is an action applied to traffic that does not match any explicit sequence, not the command to specify which traffic to capture.
B. The action command defines what operations (e.g., accept, drop, redirect) to perform on traffic that has already been matched, but it does not specify the matching criteria itself.
C. default-action accept is an action applied to traffic that does not match any explicit sequence, not the command to specify which traffic to capture.

Concept tested. SD-WAN data policy matching

Reference. https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/sdwan-xe-gs-book/m-sdwan-policies.html#Cisco_Concept.dita_b0d1101e-0556-42ac-9154-18f4317f2e1a

Topics

#SD-WAN Data Policy#Policy Configuration#Packet Matching#Traffic Capture

Community Discussion

No community discussion yet for this question.

Full 300-415 Practice