300-415 practice questions 191–200

1. Question 191 · 382 in bank

   Which set of key security components of authentication, encryption, and integrity is used to establish an IPsec tunnel in the Cisco SD-WAN solution?

   • AAuthentication is 1024-bit key; encryption is AES-128 cipher, and integrity is ESP, HMAC-MD5.
   • BAuthentication is 1024-bit key; encryption is AES-256 cipher, and integrity is ESP, HMAC-MD5.
   • CAuthentication is 2048-bit key; encryption is AES-256 cipher, and integrity is ESP, HMAC-SHA1.
   • DAuthentication is 2048-bit key; encryption is AES-128 cipher, and integrity is ESP, HMAC-SHA1.

   Show answer

   Answer: C

   References

   • Cisco documentation

   Next question

2. Question 192 · 382 in bank

   Which VPNs must be configured outside the workflow to complete the SD-WAN overlay setup when using the Quick Connect workflow?

   • Aservice VPNs
   • Btransport VPNs
   • Cservice and transport VPNs
   • Dmanagement VPNs

   Show answer

   Answer: A

   Explanation

   Restrictions for Quick Connect Workflow The Quick Connect workflow is limited to configuring WAN settings (VPN 0). To be able to complete the Cisco Catalyst SD-WAN overlay bring up process, you also need to configure service-side VPN templates. https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/sdwan-xe-gs-book/m-quick-connect-workflow.html

   Source: Adapted from community discussion — Outlaw_87

   References

   • Cisco documentation

   Next question

3. Question 193 · 382 in bank

   How many vBond controllers must be installed when vManager is installed in a multitenancy environment for four tenants?

   • AOne vBond controller is shared between the tenants.
   • BMultitenancy deployment requires three vBand controllers.
   • CEach tenant requires two vBond controllers for redundancy.
   • DEach tenant requires a dedicated vBond controller.

   Show answer

   Answer: A

   References

   • Cisco documentation

   Next question

4. Question 194 · 382 in bank

   What is the advantage of installing the controller on-premises?

   • Aautomatic geographical redundancy and security
   • Bfull control of the data plane and the control plane
   • Cscalability and a cost-saving
   • Dease of deployment and management

   Show answer

   Answer: B

   Next question

5. Question 195 · 382 in bank

   How many concurrent sessions does a vManager REST API have before it invalidates the least recently used session if the maximum concurrent session number is reached?

   • A150
   • B200
   • C250
   • D300

   Show answer

   Answer: C

   References

   • cisco.com documentation
   • cisco.com documentation

   Next question

6. Question 196 · 382 in bank

   An engineer must avoid routing loops on the SD-WAN fabric for routes advertised between data center sites. Which BGP loop prevention attribute must be configured on the routers to meet this requirement?

   • Astatic routing on all WAN Edge routers instead of BGP
   • Bsame BGP AS between all CE and PE routers
   • Csame OMP overlay-as on WAN Edge routers of all data centers
   • Dsame BGP AS between all WAN Edge routers and CE routers

   Show answer

   Answer: C

   References

   • Cisco documentation

   Next question

7. Question 197 · 382 in bank

   Which routing protocol has the highest default administrative distance?

   • AIS-IS
   • BOMP
   • CIBGP
   • Dexternal EIGRP

   Show answer

   Answer: B

   Next question

8. Question 198 · 382 in bank

   How is TLOC defined?

   • AIt is represented by a unique identifier to specify a site in a SD-WAN architecture.
   • BIt specifies a Cisco SD-WAN overlay in a multitenant vSMART deployment.
   • CIt is represented by a group of QoS policies applied to a WAN Edge router.
   • DIt is a unique collection of GRE or IPsec encapsulations, link color, and system IP address.

   Show answer

   Answer: D

   Next question

9. Question 199 · 382 in bank

   How should the IP addresses be assigned for all members of a Cisco vManager cluster located in the same data center?

   • Ain overlapping IPs
   • Bin different subnets
   • Cin the same subnet
   • Din each controller with a /32 subnet

   Show answer

   Answer: C

   References

   • Cisco documentation
   • Cisco documentation

   Next question

10. Question 200 · 382 in bank

    Select 2

    What are the two functions of smart? (Choose two.)

    • AIt ensures that valid WAN Edge routers can build the control plane connectivity.
    • BIt validates that the WAN Edge trying to join the overlay is authorized to join.
    • CIt orchestrates connectivity between WAN Edge routers using policies to create network topology.
    • DIt uses TLOCs to uniquely identify the circuit interface to control plane and data plane information.
    • EIt builds control plane connections with WAN Edge routers using TLS or DTLS.

    Show answer

    Answer: CE

    References

    • Cisco documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-415 practice, question 191. 382 questions available.