Cisco
300-415 · Question #238
An engineer modifies a data policy for DIA in VPN 67. The location has two Internet-bound circuits. Only the web browsing traffic must be admitted for DIA, without further discrimination about which t
Sign in or unlock 300-415 to reveal the answer and full explanation for question #238. The question stem and answer options stay visible for context.
Policies
Question
An engineer modifies a data policy for DIA in VPN 67. The location has two Internet-bound circuits. Only the web browsing traffic must be admitted for DIA, without further discrimination about which transport to use. Here is the existing data policy configuration: data-policy DIA vpn-list VPN-67 sequence 10 match destination-data-prefix-list INTERNAL-NETWORKS ! default-action drop Which policy configuration sequence meets the requirements?
Exhibit
Options
- Asequence 5 match destination-port 80 443 destination-ip 0.0.0.0/0 ! action accept nat use-vpn 0
- Bsequence 20 match destination-port 80 443 source-ip 0.0.0.0/0 ! action accept set local-tloc-list color biz-internet
- Csequence 20 match destination-port 80 443 destination-ip 0.0.0.0/0 ! action accept nat use-vpn 0
- Dsequence 5 match destination-port 80 443 source-ip 0.0.0.0/0 ! action accept set local-tloc-list color biz-internet
Unlock 300-415 to see the answer
You've previewed enough free 300-415 questions. Unlock 300-415 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#SD-WAN Data Policy#Direct Internet Access (DIA)#Policy Sequencing#NAT use-vpn 0