300-415 Online Practice Questions and Answers

Which two hardware platforms support Cisco IOS XE SD-WAN images? (Choose two.)

A. ISR4000 series

B. ISR9300 series

C. vEdge-1000 series

D. ASR9000 series

E. ASR1000 series

Which device information is required on PNP/ZTP to support the zero touch onboarding process?

A. serial and chassis numbers

B. interface IP address

C. public DNS entry

D. system IP address

Which two algorithms authenticate a user when configuring SNMPv3 monitoring on a WAN Edge router? (Choose two)

A. AES-256

B. SHA-1

C. AES-128

D. MD5

E. SHA-2

What is the purpose of "vpn 0" in the configuration template when onboarding a WAN edge node?

A. It carries control traffic over secure IPsec connections between vSmart controllers and vEdge routers, and between vSmart and vManager

B. It carries control out-of-bond network management traffic among the Viptela devices in the overlay network.

C. It carries control traffic over secure IPsec connections between vSmart controllers and vEdge routers, and between vSmart and vManager

D. It carries control traffic over secure DTLS or TLS connections between vSmart controllers and vEdge E. routers, and between vSmart and vBond

Which two services are critical for zero touch provisioning onboarding? (Choose two)

A. EMAIL

B. SNMP

C. AAA

D. DHCP

E. DNS

Refer to the exhibit.

A WAN Edge device was recently added to vManage, but a control connection could not be established. Which action resolves this issue?

A. Rectify the Root CA certificate mismatch on WAN Edge devices.

B. Resolve the ZTP reachability and rectify smart account credentials issue.

C. Install the bootstrap code on WAN Edge and check for CSR.

D. Send the serial number to vBond from the vManage controller.

The Cisco SD-WAN engineer is configuring service chaining for a next-generation firewall located at the headquarters. Which configuration creates the service?

A. Option A

B. Option B

C. Option C

D. Option D

Which two vRoute attributes should be matched or set in vSmart policies and modified by data policies? (Choose two.)

A. VPN

B. preference

C. site ID

D. origin

E. TLOC

An administrator modifies an application-aware routing policy to support newly deployed file servers. File transfers must be sent over the Internet-bound transports first and only use MPLS-bound transports as a backup. This policy is configured:

Which configuration sequence meets the requirements?

A. Option A

B. Option B

C. Option C

D. Option D

How must the application-aware enterprise firewall policies be applied within the same WAN Edge router?

A. within zone pair

B. within and between zones

C. between two VPN tunnels

D. between two VRFs

In a Cisco SD-WAN architecture, what is the role of the WAN Edge?

A. It provides orchestration to assist in automatic provisioning of WAN Edge routers and overlay

B. It is the management plane responsible for centralized configuration and monitoring

C. It is the control plane that builds and maintains network topology

D. It is the data plane that is responsible for forwarding traffic

Which Cisco SD-WAN component the initial communication between WAN Edge devices to join the fabric?

A. WAN Edge Router

B. vSmart Controller

C. vManage

D. vBond Orchestrator

An enterprise has several sites with multiple VPNs that are isolated from each other. A new requirement came where users in VPN 73 must be able to talk to users in VPN 50. Which configuration meets this requirement?

A. Option A

B. Option B

C. Option C

D. Option D

Refer to the exhibit.

The Cisco SD-WAN network is configured with a default full-mesh topology. An engineer wants Paris WAN Edge to use the Internet HOC as the preferred TLOC for MSN Messenger and AOL Messenger traffic. Which policy achieves this goal?

A. Option A

B. Option B

C. Option C

D. Option D

Refer to the exhibit.

The Cisco SD-WAN is deployed using the default topology. The engineer wants to configure a service insertion policy such that all data traffic between Rome to Paris is forwarded through the NGFW located in London. Which configuration fulfills this requirement, assuming that the Service VPN ID is 1?

A. Option A

B. Option B

C. Option C

D. Option D