300-415 practice questions 271–280

1. Question 271 · 382 in bank

   An engineer is troubleshooting a certificate issue on vEdge. Which command is used to verify the validity of the certificates?

   • Ashow control local-properties
   • Bshow control summary
   • Cshow certificate installed
   • Dshow certificate status

   Show answer

   Answer: A

   Explanation

   For me "A" is correct since the question is about certificate on VEdge. The option "C" is related to certificate on controllers vsmar, vbond, vmanger. show certificate installed show certificate installed—Display the decoded certificate signing request installed on a vBond orchestrator, vManage NMS or vSmart controller. https://www.cisco.com/c/en/us/td/docs/routers/sdwan/command/sdwan-cr-book/operational-cmd.html#r_show_certificate_installed_3978.xml

   Source: Adapted from community discussion — wcorrea

   References

   • Cisco documentation

   Next question

2. Question 272 · 382 in bank

   What is the primary function of an AppNav cluster?

   • Aconnecting applications to navigation systems
   • Boptimizing traffic
   • Cmonitoring application logs
   • Ddistributing packet flow

   Show answer

   Answer: D

   References

   • Cisco documentation

   Next question

3. Question 273 · 382 in bank

   Select 2

   Which two features are not supported when FIPS mode is enabled on a Cisco IOS XE SD-WAN device? (Choose two.)

   • ASXP reflectors
   • BSXP over IPv6
   • CCisco TrustSec
   • DStatic IP-SGT mapping
   • EРАС Authentication Key

   Show answer

   Answer: CE

   References

   • Cisco documentation

   Next question

4. Question 274 · 382 in bank

   Which Cisco SD-WAN feature propagates packets with SGTs through the network?

   • ASXP
   • BTrustSec Inline Tagging
   • CQoE
   • DSGT Enforcement

   Show answer

   Answer: B

   References

   • Cisco documentation

   Next question

5. Question 275 · 382 in bank

   Select 2

   Which two REST API functions are performed for Cisco devices in an overlay network? (Choose two.)

   • Aattaching a device configuration template
   • Bquerying a device and aggregating statistics
   • Cdistributing a Snort image among devices
   • Dmonitoring device certificates
   • Emanaging connections for smart licensing

   Show answer

   Answer: AB

   Next question

6. Question 276 · 382 in bank

   

   Refer to the exhibit. An engineer is troubleshooting a control connection issue. What does `connect` mean in this show control connections output?

   • AControl connection is down
   • BControl connection is up
   • CControl connection attempt is in progress
   • DControl connection is connected

   Show answer

   Answer: C

   Explanation

   Control connections might not come up if the overlay network has routing issues. If this is the case, the State column in the show control connections command output has a value of "connect", which indicates that a connection attempt is in progress. If the control connection is up, the State column shows a value of "up".

   Source: Adapted from community discussion — Xhizors

   Next question

7. Question 277 · 382 in bank

   Which requirement must be met before deploying data redundancy elimination in SD-WAN?

   • AEnsure that routing is symmetric between locations.
   • BDisable shaping in the queue assigned for the application.
   • CEnsure that traffic is sent through a GRE tunnel
   • DCreate a DRE feature template in vManage

   Show answer

   Answer: A

   Explanation

   Answer is A. First comment under 'Restrictions for DRE' -> DRE is a dual-side solution. Therefore, flow symmetry is required to configure DRE optimization. DRE isn’t supported for asymmetric flows. https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/appqoe/ios-xe-17/appqoe-book-xe/m-integration-of-dre-with-cisco-sd-wan-tcp-optimization.html

   Source: Adapted from community discussion — snakeyz

   References

   • Cisco documentation

   Next question

8. Question 278 · 382 in bank

   

   Refer to the exhibit. Which issue is shown, and which action must an engineer take to resolve the issue?

   • AA connectivity issue; verify and resolve the reachability to the controller
   • BA certificate issue; verify and correct the certificate attributes
   • CAn IPsec issue; verify and resolve the tunnel configurations on devices
   • DAn organization name issue; verify and correct the configuration on the devices

   Show answer

   Answer: D

   References

   • Cisco documentation

   Next question

9. Question 279 · 382 in bank

   How is a TLOC uniquely identified from a WAN Edge router to the SD-WAN transport network?

   • ASD-WAN site ID
   • BOMP
   • Csystem IP address
   • DVPN ID

   Show answer

   Answer: C

   Next question

10. Question 280 · 382 in bank

    Select 2

    A network administrator is configuring a WAN Edge router with two WAN connections and two TLOCs Which two attributes of TLOCs must be configured? (Choose two.)

    • Agroup-id
    • Bsite-id
    • Cencapsulation
    • Dtloc-ip
    • Ecolor

    Show answer

    Answer: CE

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-415 practice, question 271. 382 questions available.