300-415 Question #333: Real Exam Question with Answer & Explanation

The correct answer is A: apply-policy site-list Rome data-policy ROME-POLICY from-service. To allow traffic flow from the Rome internal network towards other sites using a data policy, the apply-policy command must specify from-service for the data policy.

Policies

Question

An engineer configured a data policy called ROME-POLICY. Which configuration allows traffic flow from the Rome internal network toward other sites?

Options

Aapply-policy site-list Rome data-policy ROME-POLICY from-service
Bapply-policy site-list Rome data-policy ROME-POLICY from-tunnel
Csite-list Rome control-policy ROME-POLICY out
Dsite-list Rome control-policy ROME-POLICY in

Explanation

To allow traffic flow from the Rome internal network towards other sites using a data policy, the apply-policy command must specify from-service for the data policy.

Common mistakes.

B. The from-tunnel option applies the data policy to traffic coming from the SD-WAN tunnel (from other sites) towards the local site, which is the opposite direction needed.
C. This command syntax is for applying a control policy, not a data policy, and out typically refers to outbound control plane traffic.
D. This command syntax is for applying a control policy, not a data policy, and in typically refers to inbound control plane traffic.

Concept tested. Cisco SD-WAN data policy application direction

Reference. https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/sdwan-xe-17-book/sdwan-policy-config.html

Topics

#SD-WAN Data Policy#Policy Application#Traffic Direction#vSmart Configuration

Community Discussion

No community discussion yet for this question.

Full 300-415 Practice