300-415 Exam Questions

A customer has 1 to 100 service VPNs and wants to restrict outbound updates for VPN1. Which control policy configuration restricts these updates?

What is the default value for the number of paths advertised per prefix in the OMP feature template?

Which two vRoute attributes should be matched or set in vSmart policies and modified by data policies? (Choose two.)

What are the two components of an application-aware firewall? (Choose two.)

What are the two prerequisites for a Cloud OnRamp for SaaS feature to show the accurate vQoE score? (Choose two.)

Which website allows access to visualize the geography screen from vManager using the internet?

Which queue must an engineer configure for control and BFD traffic for convergence on a WAN Edge router?

Refer to the exhibit. A company requires a data traffic policy that uses the "mpls" and "biz-internet" colors for Google Apps if the SLA is met. A link with the "public-internet" c...

How are custom application ports monitored in Cisco SD-WAN controllers?

Which storage format is used when vManage is deployed as a virtual machine on a KVM hypervisor?

An engineer must configure the SD-WAN Edge router to identify DSCP 26 traffic coming from the router's local site and then change the DSCP value to DSCP 18 before sending it over t...

Which two resource data types are used to collect information for monitoring using REST API in Cisco SD-WAN? (Choose two.)

Refer to the exhibit. An engineer must block FTP traffic coming in from a particular Service VPN on a WAN Edge device. Which set of steps achieves this goal?

Which feature delivers traffic to the Cisco Umbrella SIG cloud from a Cisco SD-WAN domain?

What must an engineer consider when deploying an SD-WAN on-premises architecture based on ESXi hypervisor?

Which protocol detects path status (up/down), measures loss/latency/jitter, and measures the quality of the IPsec tunnel MTU?

Refer to the exhibit. vManage and vBond have an issue establishing a connection to vSmart. Which two actions does the administrator take to fix the issue? (Choose two.)

Refer to the exhibit. An engineer is troubleshooting a control connection issue on a WAN Edge that device shows socket errors. The packet capture shows some ICMP packets dropped be...

Which color type is assigned when a TLOC is configured behind NAT?

Which attribute is used to tie all the controllers together by vManage?

An engineer is applying QoS scheduling for the transport-side tunnel interfaces to enable scheduling and shaping for a WAN Edge cloud router. Which command accomplishes the task?

The Cisco SD-WAN engineer is configuring service chaining for a next-generation firewall located at the headquarters. Which configuration creates the service?

Which component of the Cisco SD-WAN network assures that only valid customer nodes are participating in the overlay network?

How many vManage NMSs should be installed in each domain to achieve scalability and redundancy?

Which REST API call checks the status of an action that is performed on a device?

Which two actions must be taken to allow certain department to require firewall protection when interacting with data center networks without including other departments? (Choose t...

Which behavior describes a WAN Edge router running dual DIA when its DPI engine has identified a cloud SaaS application?

Which Cisco SD-WAN component centralizes policy configuration?

Which multicast component is irrelevant when defining a multicast replicator outside the local network without any multicast sources or receivers?

An organization wants to discover, monitor, and track the applications running on the WAN Edge device on the LAN. Which configuration achieves the goal?

What are the components of zone configuration in an application-aware firewall?

Which configuration on the WAN Edge meets the requirement?

QUESTION 329 Which data policy configuration influences BGP routing traffic flow from LAN to WAN?

Which cloud-based component in Cisco SD-WAN is responsible for establishing a secure connection to each WAN Edge router and distributes routes and policy information via OMP?

What is the main purpose of using TLOC extensions in WAN Edge router configuration?

Which control policy assigned to branches in the out direction establishes a strict hub-and-spoke topology for VPN2?

Refer to the exhibit. Company ABC has a hub-and-spoke topology in place and currently is load balancing their data traffic at the hub site over MPLS and the public Internet. The le...

Refer to the exhibit. Which configuration must the engineer use to form underlay connectivity for the Cisco SD-WAN network?

Refer to the exhibit. An engineer must configure a QoS policy between the hub and site A (spoke) over a standard Internet circuit where traffic shaping is adjusted based on availab...

An engineer must configure VRRP for redundancy on WAN Edge router 1 running an earlier version than 20.6, considering WAN Edge router2 is configured correctly. Which configuration...

Which set of key security components of authentication, encryption, and integrity is used to establish an IPsec tunnel in the Cisco SD-WAN solution?

How many vBond controllers must be installed when vManager is installed in a multitenancy environment for four tenants?

What is the advantage of installing the controller on-premises?

How many concurrent sessions does a vManager REST API have before it invalidates the least recently used session if the maximum concurrent session number is reached?

An engineer creates this data policy for DIA for VPN 10: data-policy DIA vpn-list VPN-10 sequence 10 match destination-data-prefix-list INTERNAL-NETWORKS ! action accept Which poli...

An engineer must avoid routing loops on the SD-WAN fabric for routes advertised between data center sites. Which BGP loop prevention attribute must be configured on the routers to...

Which routing protocol has the highest default administrative distance?

How should the IP addresses be assigned for all members of a Cisco vManager cluster located in the same data center?

Which encryption algorithm is used for encrypting SD-WAN data plane traffic?

A WAN Edge device has several service VPNs with no routing protocol configured in the service VPN. The device must be configured so that all connected routes visible in OMP for VPN...