300-415 practice questions 161–170

1. Question 161 · 382 in bank

   How are custom application ports monitored in Cisco SD-WAN controllers?

   • ACustomers add custom application ports in vAnalytics and vSmart.
   • BCisco adds custom application ports in vAnalytis and vManage.
   • CCustomers add custom application ports in vAnalytics and vManage.
   • DCisco adds custom application ports in vAnalytics and vSmart.

   Show answer

   Answer: C

   References

   • Cisco documentation

   Next question

2. Question 162 · 382 in bank

   Which storage format is used when vManage is deployed as a virtual machine on a KVM hypervisor?

   • A.iso
   • B.tgz
   • C.ova
   • D.qcow2

   Show answer

   Answer: D

   References

   • Cisco documentation

   Next question

3. Question 163 · 382 in bank

   Select 2

   Which two resource data types are used to collect information for monitoring using REST API in Cisco SD-WAN? (Choose two.)

   • APOST
   • BPUT
   • Cscalar
   • Darray
   • EDELETE

   Show answer

   Answer: CD

   References

   • cisco.com documentation

   Next question

4. Question 164 · 382 in bank

   

   Refer to the exhibit. An engineer must block FTP traffic coming in from a particular Service VPN on a WAN Edge device. Which set of steps achieves this goal?

   • ACreate a localized policy and add it to the interface feature template.
   • BCreate a localized policy, add it to VPN template, and add an ACL to the interface feature template.
   • CCreate a prefix list, add it to the localized policy, and add it to the interface feature template.
   • DCreate a localized policy, add it to the device template, and add an ACL to the interface feature template.

   Show answer

   Answer: D

   Explanation

   The exhibit already shows a localized policy created in VManage, their is no need to create a new one. You only need to create an ACLthat block's FTP traffic (Port 20/21) ingress on an interface (in VManage add it to the localized, then interface feature) Option [C] is the answer here.

   Source: Adapted from community discussion — NetArch_Teck

   Next question

5. Question 165 · 382 in bank

   Which feature delivers traffic to the Cisco Umbrella SIG cloud from a Cisco SD-WAN domain?

   • AL2TPv3 tunnel
   • BIPsec tunnel
   • Clocal umbrella agent
   • Dsource NAT

   Show answer

   Answer: B

   References

   • Cisco documentation

   Next question

6. Question 166 · 382 in bank

   What must an engineer consider when deploying an SD-WAN on-premises architecture based on ESXI hypervisor?

   • ACisco must provision the backup and snapshots platform for the SD-WAN architecture.
   • BThe IT team will be given access by Cisco to a vManage for configuration templates and policies configuration.
   • CThe IT team is required to provision the SD-WAN controllers and is responsible for backups and disaster recovery implementation.
   • DThe managed service provider must provision controllers with their appropriate certificates.

   Show answer

   Answer: C

   Explanation

   Obvious answer, however for those who are very new to this technology, you would need to download the SD-WAN Orchestrator and use the necessary guides to complete your installation, including provisioning the correct environment, Disaster Recovery and Snapshots of the SD-WAN Controller VM for on prem. Option [C] is the answer!

   Source: Adapted from community discussion — NetArch_Teck

   Next question

7. Question 167 · 382 in bank

   Which protocol detects path status (up/down), measures loss/latency/jitter, and measures the quality of the IPsec tunnel MTU?

   • ADTLS
   • BBFD
   • COMP
   • DIP-SLA

   Show answer

   Answer: B

   References

   • Cisco documentation

   Next question

8. Question 168 · 382 in bank

   Select 2

   

   Refer to the exhibit. vManage and vBond have an issue establishing a connection to vSmart. Which two actions does the administrator take to fix the issue? (Choose two.)

   • AReconfigure the vSmart from CLI with the proper Hostname & System IP.
   • BManually resync vManage and vBond.
   • CInstall the certificate received from the certificate server.
   • DDelete and re-add vSmart. Click Generate and validate CSR.
   • ERequest a certificate from the certificate server based on the CSR for the vSmart.

   Show answer

   Answer: CE

   Next question

9. Question 169 · 382 in bank

   Which component of the Cisco SD-WAN secure extensible network provides a single pane of glass approach to network monitoring and configuration?

   • AAPIC-EM
   • BvSmart
   • CvManage
   • DvBond

   Show answer

   Answer: C

   Next question

10. Question 170 · 382 in bank

    

    Refer to the exhibit. vManage and vBond have an issue establishing a connection to each other. Which configuration resolves the issue?

    

    • AConfigure the timezone on vBond to Europe/London.
    • BConfigure the encapsulation ipsec command under the tunnel interface on vManage.
    • CConfigure a default route on vBond pointing to 172.16.2.254.
    • DRemove the encapsulation ipsec command under the tunnel interface of vBond.

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-415 practice, question 161. 382 questions available.