nerdexam
Cisco

300-440 · Question #65

300-440 Question #65: Real Exam Question with Answer & Explanation

The correct answer is C. TLOC 11.0.1.1 is rejected by a policy in vSmart. E. The control policy is applied at the inbound direction at vSmart.. The control-policy on vSmart explicitly matches and rejects TLOC 10.1.0.2 (the "blue" Internet TLOC) in the inbound direction, preventing it from being used for packet forwarding to Branch2. The policy is applied inbound on vSmart for the site, blocking the TLOC advertisement and

Question

Refer to the exhibit. An engineer is analyzing the packet flow from the Cisco Edge router named Branch1 on a Cisco vSmart controller. The engineer discovers that traffic destined for the Cisco Edge router named Branch2 is only routed through the MPLS tunnel and not routed through an IPsec tunnel over the Internet. What are the two causes of the issue? (Choose two.)

Exhibits

300-440 question #65 exhibit 1
300-440 question #65 exhibit 2

Options

  • ATLOC 11.0.1.1 is rejected by a policy on Branch 1 router.
  • BBranch 1 router sends a different TLOC color for Branch 2 router to the vSmart.
  • CTLOC 11.0.1.1 is rejected by a policy in vSmart.
  • DBranch 1 router has no established control connection with vSmart.
  • EThe control policy is applied at the inbound direction at vSmart.

Explanation

The control-policy on vSmart explicitly matches and rejects TLOC 10.1.0.2 (the "blue" Internet TLOC) in the inbound direction, preventing it from being used for packet forwarding to Branch2. The policy is applied inbound on vSmart for the site, blocking the TLOC advertisement and thus restricting packet flow to only the MPLS tunnel (TLOC 11.0.1.1).

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 300-440 Practice