300-415 practice questions 181–190

1. Question 181 · 382 in bank

   Select 2

   Which two actions must be taken to allow certain department to require firewall protection when interacting with data center networks without including other departments? (Choose two.)

   • AUse classification, policing, and marking
   • BAdvertise to vSmart controllers.
   • CThe regional hub advertises the availability of the firewall service.
   • DApply data policies at vEdge.
   • EDeploy a service-chained firewall service per VPN.

   Show answer

   Answer: CE

   Explanation

   I'm so confused with the answers that people suggest and even makes me second guess my thoughts the further I have progressed through the list of questions. Also, not to mention the answers that the "dump" supposedly provides.

   Source: Adapted from community discussion — nbvolz

   Next question

2. Question 182 · 382 in bank

   Which behavior describes a WAN Edge router running dual DIA when its DPI engine has identified a cloud SaaS application?

   • AThe gateway WAN Edge router DPI engine accepts the DNS query for SaaS applications, and DNS queries for noncloud applications follow the explicit path.
   • BThe WAN Edge DPI engine never selects a subperforming DIA circuit for the first application, and the WAN Edge router finds the SaaS application.
   • CExisting flows change the path and drop the traffic when the performance of the chosen path degrades.
   • DApplication traffic flows are routed over best performing DIA circuit, which makes the routing decision based on the best performing path.

   Show answer

   Answer: D

   Explanation

   When a user onsite connects for the first time to one of the Software-as-a-Service apps, the user's device initiates a DNS query for the apps' URL, and the following chain of events visualized below happen: 1. The WAN edge router's DPI engine intercepts the user's DNS query. If the host DNS query is for the Cloud onRamp SaaS application, the vEdge router forwards it over the best performing circuit to the DNS server that is defined for this ISP. 2. DNS queries for non-Cloud onRamp applications are forwarded according to the routing table towards the SD-WAN overlay fabric The answer is D

   Source: Adapted from community discussion — blove

   References

   • Cisco documentation

   Next question

3. Question 183 · 382 in bank

   Which Cisco SD-WAN component centralizes policy configuration?

   • ACisco DNA Center
   • BvBond
   • CWAN Edge
   • DvSmart

   Show answer

   Answer: D

   Explanation

   All responses are false. Only vManage centralizes policies. vSmart has Control policies (currently applied) but not Data policies which are on the WAN routers.

   Source: Adapted from community discussion — Knowledge33

   Next question

4. Question 184 · 382 in bank

   Which multicast component is irrelevant when defining a multicast replicator outside the local network without any multicast sources or receivers?

   • Aoverlay BFD
   • BPIM interfaces
   • COMP
   • DTLOC

   Show answer

   Answer: B

   Explanation

   When defining a multicast replicator outside the local network without any multicast sources or receivers, the multicast component that is irrelevant is: B. PIM interfaces PIM (Protocol Independent Multicast) interfaces are used to enable multicast routing within a network. However, when there are no multicast sources or receivers, PIM interfaces become unnecessary for the multicast replicator function outside the local network.

   Source: Adapted from community discussion — colipto

   References

   • Cisco documentation

   Next question

5. Question 185 · 382 in bank

   What is the default value (in milliseconds) set for the poll interval in the BFD basic configuration?

   • A300,000
   • B600,000
   • C900,000
   • D1,200,000

   Show answer

   Answer: B

   Next question

6. Question 186 · 382 in bank

   What are the components of zone configuration in an application-aware firewall?

   • Adestination zone, interface zone, source zone, and zone pair
   • Bsource zone, interface zone, and zone pair
   • Cdestination zone, interface zone, and zone pair
   • Dsource zone, destination zone, and zone pair

   Show answer

   Answer: D

   Explanation

   Zone configuration consists of the following components: Source zone—A grouping of VPNs where the data traffic flows originate. Destination zone—A grouping of VPNs where the data traffic flows terminate. Zone pair—A container that associates a source zone with a destination zone and that applies a firewall policy to the traffic that flows between the two zones. Firewall policy—A security policy, similar to a localized security policy, that defines the conditions that the data traffic flow from the source zone must match to allow the flow to continue to the destination zone. https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/security/vedge-20-x/security-book/ent-firewall-app-aware.html#:~:text=Zone%20configuration%20consists%20of%20the,the%20data%20traffic%20flows%20terminate.

   Source: Adapted from community discussion — Knowledge33

   References

   • Cisco documentation

   Next question

7. Question 187 · 382 in bank

   Which cloud-based component in Cisco SD-WAN is responsible for establishing a secure connection to each WAN Edge router and distributes routes and policy information via OMP?

   • AvBond
   • BWAN Edge
   • CvManage
   • DvSmart

   Show answer

   Answer: B

   Next question

8. Question 188 · 382 in bank

   What is the main purpose of using TLOC extensions in WAN Edge router configuration?

   • Atransports control traffic to remote-site WAN Edge routers
   • Bcreates an IPsec tunnel from WAN Edge to vBond Orchestrator
   • Ccreates hardware-level transport redundancy at the local site
   • Dtransports control traffic to a redundant vSmart Controller

   Show answer

   Answer: C

   Explanation

   Option [A] TLOC Extensions allows a WAN edge router to communicate over the WAN transport (connected to the adjacent WAN Edge router) through a TLOC-extension interface Cisco Guide:- https://www.cisco.com/c/en/us/support/docs/routers/sd-wan/220333-configure-layer-3-tloc-extension.html#:~:text=The%20TLOC%20extension%20allows%20a,have%20redundancy%20on%20transport%20side.

   Source: Adapted from community discussion — NetArch_Teck

   References

   • Cisco documentation

   Next question

9. Question 189 · 382 in bank

   Which TLOC color is used for site-to-site communication in a Google Cloud integration with Cisco SD-WAN?

   • Aprivate1
   • Bprivate2
   • Cprivate3
   • Dprivate4

   Show answer

   Answer: A

   References

   • Cisco documentation

   Next question

10. Question 190 · 382 in bank

    Which plane builds and maintains the network topology and makes decisions on traffic flows?

    • Adata
    • Borchestration
    • Cmanagement
    • Dcontrol

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-415 practice, question 181. 382 questions available.