300-415 Exam Questions
455 real 300-415 exam questions with expert-verified answers and explanations. Page 4 of 10.
- Question #151Controller Deployment
Which third-party Enterprise CA server must be used for a cloud-based vSmart controller?
vSmart controllerCertificate AuthorityPKICloud deployment - Question #152Architecture
How is multicast routing enabled on devices in the Cisco SD-WAN overlay network?
Multicast routingSD-WAN overlayOMPIGMP - Question #153Policies
An engineer must configure a centralized policy on a site in which all HTTP traffic should use the Public Internet circuit if the loss on this circuit is below 10%, otherwise MPLS...
SD-WAN PolicyApplication-Aware Routing (AAR)SLA-based RoutingvManage Configuration - Question #154Policies
An engineer must use data prefixes to configure centralized data policies using the vManage policy configuration wizard. What is the first step to accomplish this task?
vManage policiesdata policy configurationpolicy workflowgroups of interest - Question #155Policies
Refer to the exhibit. The Cisco SD-WAN network is configured with a default full-mesh topology. Islamabad HQ and Islamabad WAN Edges must be used as the hub sites. Hub sites MPLS T...
SD-WAN PolicyApplication-Aware RoutingTLOC PreferenceSLA Class - Question #156Policies
Refer to the exhibit. Which command allows traffic through the IPsec tunnel configured in VPN 0?
Cisco SD-WANService ChainingData PolicyVPN 0 - Question #157Policies
An enterprise has several sites with multiple VPNs that are isolated from each other. A new requirement came where users in VPN 73 must be able to talk to users in VPN 50. Which co...
SD-WAN Control PolicyRoute LeakingInter-VPN RoutingvSmart Policy - Question #158Security and Quality of Service
The network administrator is configuring a QoS scheduling policy on traffic received from transport side tunnels on WAN Edge 5000 routers at location:405608122. Which command must...
QoSSD-WANWAN EdgeCLI Commands - Question #159Security and Quality of Service
Refer to the exhibit. A network administrator is setting the queuing value for voice traffic for one of the WAN Edge routers using vManage GUI. Which queue value be set to accompli...
QoSVoice PrioritizationWAN EdgevManage - Question #160Security and Quality of Service
An engineer is configuring a shaping rate of 1 Mbps on the WAN link of a WAN Edge router. Which configuration accomplishes this task?
WAN EdgeQoSShapingCLI Configuration - Question #161Management and Operations
Which two privilege types can be assigned to a user group in vManage?
vManage User GroupsRBACPermissionsAccess Control - Question #162WAN Edge Router Deployment
An administrator must deploy the controllers using the On-Prem method while vManage can access the PnP portal from inside. Which are the two WAN Edge authorized allowed lists to be...
WAN Edge DeploymentPlug and Play (PnP)Device OnboardingvManage Configuration - Question #163
Company E wants to deploy Cisco SD-WAN with controllers in AWS. The company's existing WAN is on private MPLS without Internet access to controllers in AWS. An Internet circuit is...
- Question #164WAN Edge Router Deployment
Which secure tunnel type should be used to connect one WAN Edge router to other WAN Edge routers?
SD-WAN TunnelsControl Plane SecurityWAN Edge ConnectivityTLS - Question #165WAN Edge Router Deployment
What is the default value (in milliseconds) set for the poll interval in the BFD basic configuration?
BFD ConfigurationSD-WAN ProtocolsDefault Timers - Question #166Architecture
Which plane builds and maintains the network topology and makes decisions on traffic flows?
SD-WAN planescontrol planenetwork architecturetraffic flow decisions - Question #167Architecture
How is TLOC defined?
TLOCSD-WAN ArchitectureTransport LocatorWAN Edge Components - Question #168Controller Deployment
Which vBond system configuration under VPN 0 allows for a routable public IP address even if the DNS name, hostname, or IP address of the vBond orchestrator are omitted?
vBond OrchestratorController ConfigurationPublic IPSystem VPN 0 - Question #169Policies
Refer to the exhibit showing a GUI configuration snippet with 'Address Family' set to On and 'ipv4-unicast', 'Route Policy In' and 'Route Policy Out' set to On, and 'Policy Name' a...
BGP CommunitiesRoute PolicyPrefix ListsBGP Advertisement Control - Question #170WAN Edge Router Deployment
WAN Edge routers are configured manually to use UDP port offset to use nondefault offset values when IPsec tunnels are created. What is the offset range?
SD-WANWAN Edge configurationIPsecUDP port offset - Question #171WAN Edge Router Deployment
An enterprise needs DIA on some of its branches with a common location ID: A042:B49C:D02E::72. Which WAN Edge configuration requirement?
SD-WAN DIAVPN 0Service VPNNAT - Question #172Controller Deployment
Refer to the exhibit. vManage and vSmart have an issue establishing a connection to vBond. Which configuration resolves the issue? vManage system system-ip 10.11.11.1 host-name vMa...
SD-WAN Control PlaneController ConfigurationSystem IPvBond Connectivity - Question #173WAN Edge Router Deployment
Which destination UDP port is used by WAN Edge router to make a DTLS connection with vBond Orchestrator?
WAN EdgevBond OrchestratorDTLSPort numbers - Question #174Policies
Which policy is configured to ensure that a voice packet is always sent on the link with less than a 50 msec delay?
SD-WAN PoliciesCentralized Data PolicyQoSVoice Traffic - Question #175Security and Quality of Service
An organization requires the use of integrated preventative engines, exploit protection, and the most updated and advanced signature-based antivirus with sandboxing and threat inte...
AMPThreat GridMalware PreventionSandboxing - Question #176Controller Deployment
What is the minimum Red Hat Enterprise Linux operating system requirement for a Cisco SD-WAN controller deployment via KVM?
SD-WAN ControllerKVMRHEL RequirementsDeployment Prerequisites - Question #177Controller Deployment
An engineer must automate certificate signing through Cisco. Which vManage configuration achieves this task?
vManageManagement VPN (VPN 0)DNS configurationCertificate automation - Question #178Security and Quality of Service
Which issue triggers the Cisco Umbrella resolver to toward DNS requests to the intelligent proxy?
Cisco UmbrellaIntelligent ProxyDNS SecurityGrey-listed Domains - Question #179Controller Deployment
How many vCPUs and how much RAM are recommended to run the vSmart controller on the KVM server for 251 to 1000 devices in software version 20.4.x?
vSmart controllerResource requirementsScalabilityKVM virtualization - Question #180Policies
Refer to the exhibit. vManage and vBond have an issue establishing a connection to each other. Which configuration resolves the issue?
vManage vBond ConnectivityCentralized PolicySD-WAN Control PlaneTroubleshooting - Question #181Controller Deployment
Refer to the exhibit. (Exhibit shows network diagram and vManage/vBond configuration snippets). Which configuration change is required?
vBondController ConnectivityDefault RouteRouting Configuration - Question #182Security and Quality of Service
An engineer must deploy a QoS policy with these requirements: - policy name: App-police - CIR rate: 1000000 - burst: 1000000 - exceed: drop Which configuration meets the requiremen...
Cisco SD-WANQoSPolicingData Policy - Question #183Management and Operations
How is an event monitored and reported for an individual device in the overlay network at site HQ_54000T0E4EF36?
SD-WAN monitoringvManage functionsEvent reportingCisco SD-WAN architecture - Question #184Policies
Refer to the exhibit. A customer wants to implement primary and secondary Cisco SD-WAN overlay routing for prefixes that are advertised for both data centers. The east data center...
SD-WAN PoliciesControl PolicyTLOC PreferenceRoute Manipulation - Question #185Controller Deployment
An engineer must apply the configuration for certificate installation to vBond Orchestrator and vSmart Controller. Which configuration accomplishes this task?
SD-WAN Control PlaneVPN 0Controller InterfaceCertificate Deployment - Question #186WAN Edge Router Deployment
Refer to the exhibit showing a network diagram with Customer XYZ, R1, R2, INET, MPLS, and a TLOC Extension. Customer XYZ cannot provision dual connectivity on both of its routers d...
SD-WAN TLOC ExtensionWAN Edge DeploymentMulti-homingLoad Balancing - Question #187WAN Edge Router Deployment
Which protocol is configured on tunnels by default to detect loss, latency, jitter, and path failures in Cisco SD-WAN?
Cisco SD-WANBFDTunnel MonitoringWAN Edge Routers - Question #188Policies
An administrator wants to create a policy to add a traffic policer called "policer-ccnp" to police data traffic on the WAN Edge. Which configuration accomplishes this task in vSmar...
SD-WANData PolicyTraffic PolicingvSmart - Question #189Architecture
Which table is used by the vSmart controller to maintain service routes of the WAN Edge routers in the hub and local branches?
vSmart controllerservice routesRIBOMP - Question #190Architecture
Refer to the exhibit showing a network diagram with Overlay AS 10666, BGP AS21, BGP AS100, BGP AS20, BGP AS104, R100, VE100, VE104, R104, and various IP prefixes and links. An engi...
OMPAS-PATHBGP RedistributionSD-WAN Overlay AS - Question #191Policies
Which policy tracks path characteristics such as loss, latency, and jitter in vManage?
vManage policiesApplication-aware routingPath characteristicsSD-WAN performance - Question #192WAN Edge Router Deployment
Which two sets of identifiers OMP carry when it advertises TLOC routes between WAN Edge routers? (Choose two.)
OMPTLOCSD-WAN RoutingWAN Edge Attributes - Question #193WAN Edge Router Deployment
How many subnets are necessary in Azure VNet for a WAN Edge device to function in the cloud deployment?
WAN Edge Cloud DeploymentAzure VNetSubnet RequirementsSD-WAN Architecture - Question #194Security and Quality of Service
Drag and drop the security terminologies from the left onto the PCI-compliant network features and devices on the right.
PCI ComplianceNetwork SecuritySecurity TerminologySecurity Features - Question #195WAN Edge Router Deployment
An engineer must configure two branch WAN Edge devices where an Internet connection is available and the controllers are in the headquarters. The requirement is to have IPsec VPN t...
SD-WAN TLOCWAN Edge ConfigurationTunnel Interface ColorsIPsec VPN - Question #196Architecture
Which controller manages the orchestration plane of Cisco SD-WAN in a cloud deployment?
Cisco SD-WANvBondOrchestration planeController roles - Question #197Architecture
What are two components of vSmart? (Choose two.)
vSmart ControllerSD-WAN ArchitectureControl PlaneKey Management - Question #198Policies
Which policy allows communication between TLOCs of data centers and spokes and blocks communication between spokes?
SD-WAN PoliciesCentralized Control PolicyHub-and-Spoke TopologyRoute Control - Question #199Management and Operations
Which SD-WAN component detects path performance information in the organization to report the issue to the service provider at site ID:123456?
Cisco SD-WANvAnalyticsPerformance MonitoringNetwork Operations - Question #200WAN Edge Router Deployment
An enterprise has these three WAN connections: - public Internet - business Internet - MPLS An engineer must configure two available links to route traffic via both links. Which co...
SD-WANOMPECMPWAN Edge routing