300-415 practice questions 1–10

1. Question 1 · 382 in bank

   Which component of the Cisco SD-WAN architecture oversees the control plane of overlay network to establish, adjust, and maintain the connections between the WAN Edge devices that form the Cisco SD-WAN fabric?

   • AAPIC-EM
   • BvSmart
   • CvManage
   • DvBond

   Show answer

   Answer: B

   Explanation

   The vSmart controller is the brain of the overlay network, establishing, adjusting, and maintaining the connections that form the fabric of the overlay network. In these functions, it oversees the control plane of the Cisco SD-WAN overlay network. The vSmart controller participates only in the overlay network and has no direct peering relationships with any of the devices that an edge router is connected to on the host-facing side.

   Source: Adapted from community discussion — mimo1000

   Next question

2. Question 2 · 382 in bank

   Which port is used for vBond under controller certificates if no alternate port is configured?

   • A12344
   • B12345
   • C12347
   • D12346

   Show answer

   Answer: D

   Explanation

   Reference: https://community.cisco.com/t5/networking-documents/sd-wan-controller-setup-guide-on-prem-non-cloud-managed/ta-p/3921360

   Next question

3. Question 3 · 382 in bank

   When the VPN membership policy is being controlled at the vSmart controller, which policy disallows VPN 1 at sites 20 and 30? A.

   

   B.

   

   C.

   

   D.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer:

   Explanation

   Reference: https://sdwan-docs.cisco.com/Product_Documentation/Software_Features/Release_17.2/04Segmentation/03Segmentation_(VPN) _Configuration_Examples

   Source: Adapted from community discussion — DBla

   References

   • Cisco documentation
   • Cisco documentation

   Next question

4. Question 4 · 382 in bank

   Which policy is configured to ensure that a voice packet is always sent on the link with less than a 50 msec delay?

   • Alocalized data policy
   • Bcentralized control policy
   • Clocalized control policy
   • Dcentralized data policy

   Show answer

   Answer: D

   Next question

5. Question 5 · 382 in bank

   DRAG DROP - Drag and drop the functions from the left onto the correct templates on the right. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

6. Question 6 · 382 in bank

   When VPNs are grouped to create destination zone in Zone-Based Firewall, how many zones can a single VPN be part of?

   • Atwo
   • Bfour
   • Cone
   • Dthree

   Show answer

   Answer: C

   Explanation

   Reference: https://sdwan-docs.cisco.com/Product_Documentation/Software_Features/Release_18.4/Security/Enterprise_Firewall_with_Application_Awareness

   References

   • Cisco documentation

   Next question

7. Question 7 · 382 in bank

   An engineer wants to track tunnel characteristics within a SLA-based policy for convergence. Which policy configuration will achieve this goal?

   • Aapp-route policy
   • BVPN membership policy
   • Ccontrol policy
   • Ddata policy

   Show answer

   Answer: A

   Explanation

   I agree. Answer is A . An application-aware routing policy matches applications with an SLA, that is, with the data plane tunnel performance characteristics that are necessary to transmit the applications' data traffic. The primary purpose of application-aware routing policy is to optimize the path for data traffic being transmitted by Cisco SD-WAN devices.

   Source: Adapted from community discussion — CCNPWILL

   References

   • Cisco documentation

   Next question

8. Question 8 · 382 in bank

   An administrator needs to configure Cisco SD-WAN to divert traffic from the company's private network to an ISP network. Which action should be taken to accomplish this goal?

   • Aconfigure the security policy
   • Bconfigure the control policy
   • Cconfigure the data policy
   • Dconfigure the application aware policy

   Show answer

   Answer: C

   Explanation

   I think the intention of this question is, to forward traffic from the LAN-Side to the Service-Provider (Underlay). This configuration would be done in a Traffic-Data-Policy. Answer C can be the only option. The AAR-Policy is only for SLA-Routing Side-To-Side

   Source: Adapted from community discussion — JP4CCNP

   Next question

9. Question 9 · 382 in bank

   DRAG DROP - Drag and drop the definitions from the left to the configuration on the right. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/security/vedge/security-book/ent-firewall-app-aware.html#:~:text=Source%20zone %E2%80%94A%20grouping%20of,part%20of%20only%20one%20zone.&text=A%20VPN%20can%20be%20part%20of%20only%20one%20zone.,-Firewall% 20policy%E2%80%94A

   Source: Adapted from community discussion — timbo2000

   References

   • Cisco documentation

   

   Next question

10. Question 10 · 382 in bank

    An engineer is configuring a centralized policy to influence network route advertisement. Which controller delivers this policy to the fabric?

    • AvSmart
    • BvBond
    • CvManage
    • DWAN Edge

    Show answer

    Answer: A

    Explanation

    Reference: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/policies/vedge-20-x/policies-book/policy-overview.html

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-415 practice, question 1. 382 questions available.