300-415 Question #415: Real Exam Question with Answer & Explanation

The correct answer is B: data prefix. To configure direct internet access for specific subnets in a branch using vManage, the engineer must define these subnets as 'data prefixes' under the 'Create groups of interest' section.

Policies

Question

Refer to the exhibit A network engineer configures direct internet access for users in a branch. Users in subnet 10.10.0.0/24 and 10.20.0.0/24 must have direct internet access. Which configuration must the engineer use to accomplish the task under the vManage "Create groups of interest" section?

Options

AVPN
Bdata prefix
Cpolicer
Dsite

Explanation

To configure direct internet access for specific subnets in a branch using vManage, the engineer must define these subnets as 'data prefixes' under the 'Create groups of interest' section.

Common mistakes.

A. VPN defines a virtual routing and forwarding instance, not specific IP subnets for policy matching within a VPN.
C. A policer is used for traffic rate limiting and shaping, not for defining groups of IP prefixes that require direct internet access.
D. A site defines a physical location in the SD-WAN fabric, not specific IP subnets that need direct internet access configuration.

Concept tested. Cisco SD-WAN direct internet access policy groups

Reference. https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/sdwan-xe-gs-book/c_dia_traffic_steering_sds.html

Topics

#SD-WAN Policies#vManage Groups of Interest#Direct Internet Access#Data Prefix

Community Discussion

No community discussion yet for this question.

Full 300-415 Practice