300-415 practice questions 261–270

1. Question 261 · 382 in bank

   What is the role of the Session Traversal Utilities for NAT server provided by the vBond orchestrator?

   • AIt prevents SD-WAN Edge routers from forming sessions with public transports among different service providers.
   • BIt facilitates SD-WAN Edge routers to stay behind a NAT-enabled firewall while the transport addresses of the SD-WAN controller are unNAT-ed.
   • CIt allows WAN Edge routers to form sessions among MPLS TLOCs using only public IP addresses.
   • DIt facilitates SD-WAN routers and controllers to discover their own mapped or translated IP addresses and port numbers.

   Show answer

   Answer: D

   Next question

2. Question 262 · 382 in bank

   Which application list is preconfigured?

   • ACisco_Apps
   • BP2P_Apps
   • CMicrosoft_Office365
   • DGoogle_Apps

   Show answer

   Answer: D

   Next question

3. Question 263 · 382 in bank

   The application team is getting ready to deploy a new business-critical application to the network. To protect the traffic, the network team must add another queue to the QoS map and then deploy the map to the fabric. Which configuration step must be completed prior to adding the queue to the QoS map and applying it?

   • AThe relationship between the new QoS class and the hardware queue must be configured from the "lists" page of the Local Policy section of vManage. The QoS map is then applied to the WAN interface.
   • BThe relationship between the new QoS class and the hardware queue must be configured from the "lists" page of the Local Policy section of vManage. The QoS map is then applied to the service-side interface.
   • CThe relationship between the new QoS class and the hardware queue must be configured from the "lists" page of the Centralized Policy section of vManage. The QoS map is then applied to the service-side interface.
   • DThe relationship between the new QoS class and the hardware queue must be configured from the "lists" page of the Centralized Policy section of vManage. The QoS map is then applied to the WAN interface.

   Show answer

   Answer: A

   Explanation

   Logically approaching this answer; -It would be a local policy so that rules out C,D -You would apply the QoS on the WAN interface 99% of the time in any network as that where the bottle neck will be.

   Source: Adapted from community discussion — Networkchamp87

   References

   • Cisco documentation

   Next question

4. Question 264 · 382 in bank

   Which type of service provider is responsible for secure, private connections between data centers, access regions, and cloud providers in Cisco SD-WAN Multi-Region Fabric?

   • Adistributed network providers
   • Bmiddle-mile network providers
   • Clast-mile network providers
   • Dfirst-mile network providers

   Show answer

   Answer: B

   References

   • Cisco documentation

   Next question

5. Question 265 · 382 in bank

   DRAG DROP - Drag and drop the devices from the left onto the correct functions on the right. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2019/pdf/LTRCRS-3550.pdf slide 8

   

   Next question

6. Question 266 · 382 in bank

   An engineer is troubleshooting a vEdge router and identifies a `DCONFAIL `" DTLS connection failure` message. What is the problem?

   • Amemory issue
   • Bcertificate mismatch
   • Corganization mismatch
   • Dconnectivity issue

   Show answer

   Answer: D

   Explanation

   D DTLS Connection Failure (DCONFAIL) This is one of the common issues of control connectivity that does not come up. Probable causes include firewall or some other connectivity issues. https://www.cisco.com/c/en/us/support/docs/routers/sd-wan/214509-troubleshoot-control-connections.html

   Source: Adapted from community discussion — Roger95

   References

   • Cisco documentation

   Next question

7. Question 267 · 382 in bank

   DRAG DROP - Drag and drop the phases of TrustSec from the left onto the targets on the right. Not all options are used.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   References

   • Cisco documentation

   

   Next question

8. Question 268 · 382 in bank

   Which type of route represents prefixes received from a local site via an SD-WAN Edge router in a Cisco SD-WAN architecture?

   • ATLOC routes
   • BvRoutes
   • Cmulticast routes
   • Dservice routes

   Show answer

   Answer: B

   References

   • Cisco documentation

   Next question

9. Question 269 · 382 in bank

   What is the first step for setting up traffic flows when enabling TLS Proxy in SD-WAN for security?

   • AThe sender authenticates the devices and individual users, and the receiver verifies the signature by decrypting the message with the public key of the sender.
   • BCertificate authorities in TLS Proxy issue certificates for authentication to all entitles such as hosts, network devices, or users.
   • CWhen decryption policy is enabled for the flow, a client hello packet is received by Unified Threat Defense to define the decryption action.
   • DThe TCP connection is established between the client and the proxy, and between the proxy and the server.

   Show answer

   Answer: D

   References

   • Cisco documentation

   Next question

10. Question 270 · 382 in bank

    Select 2

    Which two protocols are supported for software image delivery when images are hosted on a remote server? (Choose two.)

    • ATFTP
    • BSSL
    • CHTTPS
    • DHTTP
    • EFTP

    Show answer

    Answer: DE

    Explanation

    On a remote server: From Cisco vManage Release 20.7.1, you can store software images on a remote file server that is reachable through an FTP or HTTP URL https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/Monitor-And-Maintain/monitor-maintain-book/maintain.html

    Source: Adapted from community discussion — snakeyz

    References

    • Cisco documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-415 practice, question 261. 382 questions available.