300-415 practice questions 61–70

1. Question 61 · 382 in bank

   A bank is looking for improved customer experience for applications and reduce overhead related to compliance and security. Which key feature or features of the Cisco SD-WAN solution will help the bank to achieve their goals?

   • AIntegration with PaaS providers to offer the best possible application experience
   • BQoS including application prioritization and meeting critical applications SLA for selecting optimal path
   • CImplementation of BGP across the enterprise routing for selecting optimal path
   • DImplementation of a modern age core banking system

   Show answer

   Answer: B

   Explanation

   While you can improve app experience with A & B, B doesn't reduce overhead related to compliance & security. Integration via PaaS does, since the Cloud providers take care of the regulatory needs. so this should be A I think

   Source: Adapted from community discussion — serieus

   References

   • Cisco documentation
   • Cisco documentation

   Next question

2. Question 62 · 382 in bank

   Select 2

   When software is upgraded on a vManage NMS, which two image-adding options store images in a local vManage software repository? (Choose two.)

   • ATo be downloaded over an ICMP connection
   • BTo be downloaded over a SNMP connection
   • CTo be downloaded over a control plane connection
   • DTo be downloaded over an out-of-band connection
   • ETo be downloaded over a SMTP connection

   Show answer

   Answer: CD

   Explanation

   Reference: https://sdwan-docs.cisco.com/Product_Documentation/vManage_Help/Release_18.2/Maintenance/Software_Repository

   References

   • Cisco documentation

   Next question

3. Question 63 · 382 in bank

   Which logs verify when a device was upgraded?

   • AACL
   • BEmail
   • CSNMP
   • DAudit

   Show answer

   Answer: D

   Next question

4. Question 64 · 382 in bank

   Which protocol is used to measure loss, latency, jitter, and liveliness of the tunnel between WAN Edge router peers?

   • AOMP
   • BNetFlow
   • CBFD
   • DIP SLA

   Show answer

   Answer: C

   Explanation

   Reference: https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2019/pdf/TECCRS-2014.pdf

   Next question

5. Question 65 · 382 in bank

   Select 2

   Which two algorithms authenticate a user when configuring SNMPv3 monitoring on a WAN Edge router? (Choose two.)

   • AAES-256
   • BMD5
   • CSHA-2
   • DAES-128
   • ESHA-1

   Show answer

   Answer: AE

   Explanation

   https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/snmp/snmp-book/snmp-book_2.html Choose the authentication mechanism for the user: MD5 digest. SHA-1 message digest. SHA-256 message digest. SHA-256 - introduced in 20.5.1 MD5 - depracated 20.3.2 Official Cisco SD-WAN course: https://www.cisco.com/c/en/us/training-events/training-certifications/training/training-services/courses/implementing-cisco-sd-wan-solutions-ensdwi.html The course lab environment is built using Cisco vEdge Cloud routers and Cisco SD-WAN 20.3 code. They use 20.3, so SHA-256 has not been there yet, I would go with MD5 and SHA-1, but IMO every combination SHA1/SHA2/MD5 is correct, it depends on the software version that you choose, so this question is really dumb and very Cisco-way of making exams.

   Source: Adapted from community discussion — Chefff

   References

   • Cisco documentation
   • Cisco documentation
   • cisco.com documentation

   Next question

6. Question 66 · 382 in bank

   

   Refer to the exhibit. A network administrator is configuring OMP in vManage to advertise all the paths for the same prefix from a site that has two WAN Edge devices. Each WAN Edge device is connected to three ISPs and two private MPLS transports. What is the minimum value for `Number of Paths advertised per Prefix` that should be configured?

   • A2
   • B3
   • C5
   • D10

   Show answer

   Answer: D

   Explanation

   D is the correct answer - See the documentation Number of Paths Advertised per Prefix Specify the maximum number of equal-cost routes to advertise per prefix. vEdge routers advertise routes to vSmart controllers, and the controllers redistribute the learned routes, advertising each route-TLOC tuple. A vEdge router can have up to four TLOCs, and by default advertises each route-TLOC tuple to the vSmart controller. If a local site has two vEdge routers, a vSmart controller could potentially learn eight route-TLOC tuples for the same route. If the configured limit is lower than the number of route-TLOC tuples, the best route or routes are advertised. Range: 1 through 16 Default: 4 https://sdwan-docs.cisco.com/Product_Documentation/vManage_Help/Release_18.3/Configuration/Templates/OMP

   Source: Adapted from community discussion — kcobain87

   References

   • cisco.com documentation

   Next question

7. Question 67 · 382 in bank

   In Cisco SD-WAN, which protocol is used for control connections between Cisco SD-WAN devices?

   • ABGP
   • BDTLS
   • COSPF
   • DOMP

   Show answer

   Answer: B

   Explanation

   In the reference link under the 'Control Plane Authentication' part, you can find the following: Then, during the automatic authentication process, as pairs of devices (routers and controllers) are establishing DTLS control connections, each device compares the serial numbers (and for routers, the chassis numbers) to those in the files installed on the router. DTLS is the connection that facilitates the exchange of OMP information between the devices. In vManage the number of control connections also shows the amount of DTLS connections to/from a device. OMP is not the control connection, it's the control plane management protocol. B is correct, DTLS

   Source: Adapted from community discussion — TheNetworkStudent

   References

   • Cisco documentation

   Next question

8. Question 68 · 382 in bank

   Select 2

   Which two products that perform lifecycle management for virtual instances are supported by WAN Edge cloud routers? (Choose two.)

   • AAWS
   • BAzure
   • CVMware vCenter
   • DOpenStack
   • EIBM Cloud

   Show answer

   Answer: CD

   Explanation

   Reference: https://www.cisco.com/c/en/us/solutions/collateral/enterprise-networks/sd-wan/nb-07-cloud-router-data-sheet-cte-en.html

   Source: Adapted from community discussion — A_Wolf

   References

   • Cisco documentation

   Next question

9. Question 69 · 382 in bank

   Which secure connection should be used to access the REST APIs through the Cisco vManage web server?

   • Aauthenticated DTLS
   • Bauthenticated HTTPS
   • CJSON Inspector interface
   • DHTTP inspector interface

   Show answer

   Answer: B

   References

   • cisco.com documentation

   Next question

10. Question 70 · 382 in bank

    Select 2

    Which two prerequisites must be met before the Cloud onRamp for IaaS is initiated on vManage to expand to the AWS cloud? (Choose two.)

    • AAttach an OSPF feature template to the AWS cloud Edge router template.
    • BAttach the ג€AmazonCreateVPCג€ and ג€AmazonProvisionEC2ג€ permission policy to the IAM account.
    • CSubscribe to the SD-WAN Edge router AMI in the AWS account.
    • DAttach a device template to the cloud WAN Edge router to be deployed in the AWS.
    • EPreprovision the transit VPC in the AWS region.

    Show answer

    Answer: CD

    Explanation

    C is confirmed via https://www.cisco.com/c/en/us/td/docs/solutions/CVD/SDWAN/Cisco_Cloud_onRamp_for_IaaS_AWS_Version2.html Under Procedure 1: " You must subscribe to the Cisco SD-WAN Edge router Amazon machine images (AMIs) in your account within the AWS Marketplace." D is confirmed via the Exam Guide or the Procedure 3 in the previous link. Exam Guide: "Configure a device template for the Cisco WAN Edge Cloud routers that will be used within the transit VPC" After this the guide specifies that you also need to deploy the template which I'm guessing also means "attach"ing it. So it's C & D

    Source: Adapted from community discussion — TheNetworkStudent

    References

    • Cisco documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-415 practice, question 61. 382 questions available.