300-415 Implementing Cisco SD-WAN Solutions (300-415 ENSDWI) Questions and Answers

What is a key element used in a vBond Orchestrator redundancy topology?

Refer to the exhibit.

The network team must configure branch B WAN Edge device 103 to establish dynamic full-mesh IPsec tunnels between all colors with branches over MPLS and Internet circuits. The branch ts configured with:

Which configuration meets the requirement?

A)

B)

C)

D)

Drag and drop the policies from the left onto the correct policy types on the right.

Which protocol advertises WAN edge routes on the service side?

Which two actions are necessary to set the Controller Certificate Authorization mode to indicate a root certificate? (Choose two)

An engineer wants to track tunnel characteristics within an SLA-based policy for convergence. Which policy configuration will achieve this goal?

What is the role of the Session Traversal Utilities for NAT server provided by the vBond orchestrator?

Which two metrics must a cloud Edge router use to pick the optimal path for a SaaS application reachable via a gateway site? (Choose two.)

How are custom application ports monitored in Cisco SD-WAN controllers?

What is a requirement for deployment of on-premises vBond controllers through the Cisco Plug and Play Connect process?

Which set of elements are verified by the controller to confirm the identity of edge devices?

Which two virtualized environments are available for a company to install the controllers using the on-premises model? (Choose two )

Which device information is required on PNP/ZTP to support the zero-touch onboarding process?

An enterprise has several sites with multiple VPNs that are isolated from each other A new requirement came where users in VPN 73 must be able to talk to users in VPN 50 Which configuration meets this requirement?

An engineer is adding a tenant with location ID 399533345 in vManage. What is the maximum number of alphanumeric characters that is accepted in the tenant name filed?

In a customer retail network with multiple data centers, what does the network administrator use to create a regional hub topology?

Drag and drop the route verification output from show omp tlocs from the left onto the correct explanations on the right.

Refer to the exhibit.

The Cisco SD-WAN network is configured with a default full-mesh topology. An engineer wants Paris WAN Edge to use the Internet HOC as the preferred TLOC for MSN Messenger and AOL Messenger traffic. Which policy achieves this goal?

A)

B)

C)

D)

What is the default value for the Multiplier field of the BFD basic configuration in vManage?

An engineer must deploy a QoS policy with these requirements:

• policy name: App-police

• police rate: 1000000

• burst: 1000000

• exceed: drop

Which configuration meets the requirements?

Which platform cannot provide IPS and URL filtering capabilities?

In the Cisco SD_WAN solution, vSmart controller is responsible for which two actions? (Choose two.)

Which routing protocol is used to exchange control plane information between vSmart controllers and WAN Edge routers in the Cisco SD-WAN secure extensible network?

Refer to the exhibit.

Which shaping-rate does the engineer use to shape traffic at 9 Mbps?

A network is configured with IP connectivity, and the routing protocol between devices started having problems right after the maintenance window to implement network changes. Troubleshoot and resolve to a fully functional network to ensure that:

R4

R5

An engineer is configuring a data policy for IPv4 prefixes for a single WAN Edge device on a site with multiple WAN Edge devices How is this policy added using the policy configuration wizard?

A WAN Edge device has several service VPNs with no routing protocol configured in the service VPNs The device must be configured so that all connected routes are visible in OMP for VPN 10 Which configuration meets the requirement?

A)

B)

C)

D)

Refer to the exhibit. The network administrator has configured a centralized topology policy that results in the displayed routing table at a branch office. Which two configurations are verified by the output? [Choose two.)

Refer to the exhibit A small company was acquired by a large organization As a result, the new organization decided to update information on their Enterprise RootCA and generated a new certificate using openssl Which configuration updates the new certificate and issues an alert in vManage Monitor | Events Dashboard?

Which pathway under Monitor > Network > Select Device is used to verify service insertion configuration?

Drag and drop the BFD parameters from the left onto the BFD configurations on the right.

REST applications communicate over HTTP or HTTPS to make calls between network devices. Which two HTTPS standard methods are included? (Choose two.)

Exhibit.

The SD-WAN network Is configured with a default full-mesh topology. The network engineer wants the Rome WAN Edge to use the MPLS TLOC as the preferred TLOC when ….. Telnet traffic as long as me MPLS Ink has these, characteristics:

Loss: 5%

Latency: 100ms

Jitter: 100 ms

Which configuration must the network engineer use to create a list that that classifies the MPLS link characteristics?

A)

B)

C)

D)

Which destination UDP port is used by WAN Edge router to make a DTLS connection with vBond Orchestrator?

What is the maximum number of IPsec that are temporarily created and converged on a new set if IPsec Sas in the pairwise keys process during a simultaneous rekey?

An organization wants to use the cisco SD-WAN regionalized service-chaining feature to optimize cost and user experience with application in the network, which allows branch routers to analyze and steer traffic toward the required network function. Which feature meets this requirement?

For data plane resiliency, what does the Cisco SD-WAN software implement?

How is a TLOC uniquely identified from a WAN Edge router to the SD-WAN transport network?

Which Cisco SD-WAN component the initial communication between WAN Edge devices to join the fabric?

Which two vRoute attributes should be matched or set in vSmart policies and modified by data policies? (Choose two.)

What is a default protocol for control plane connection?

Refer to the exhibit.

What does the BFD value of 8 represent?

Refer to the exhibit. A network administrator is configuring OSPF advanced configuration pararmeters from a template using the vManager GUI for a branch WAN Edge router to calculate the cost of summary routes to an ASBR. Which action achieves this configuration?

When software is upgraded on a vManage NMS, which two image-adding options store images in a local vManage software repository? (Choose two.)

An engineer must avoid routing loops on the SD-WAN fabric for routes advertised between data center sites Which BGP loop prevention attribute must be configured on the routers to meet this requirement?

Refer to the exhibit The network team must configure application-aware routing for the Service VPN 50.0.0.0/16 The SLA must prefer MPLS for video traffic but the remaining traffic must use a public network What must be defined other than applications before the application-aware policy is create?

What prohibits deleting a VNF image from the software repository?

Which component of the Cisco SD-WAN architecture oversees the control plane of overlay network to establish, adjust, and maintain the connections between the WAN Edge devices that form the Cisco SD-WAN fabric?

Which component is used to optimize the multicast distribution tree enabled through the multicast network?

A customer wants to use AWS for Cisco SD-WAN laaS services by deploying virtual SD-WAN routers in a transit AWS VPC The transit VPC then connects via site-to-site IPsec tunnels to an AWS transit gateway Which transit VPC connects via site-to-site IPsec tunnels to an AWS transit gateway?

In which VPN is the NAT operation on an outgoing interface configured for direct Interne! access?

Refer to the exhibit.

Customer XYZ cannot provison dual connectivity on both Its routers due to budget constratnts but wants to use tnth RI and R2 interface for users behind them for load toward the hub site Which configurauon achieves this objectives?

A)

B)

C)

D)

An engineer must configure the SD-WAN Edge router to identify DSCP 26 traffic coming from the router's local site and then change the DSCP value to DSCP 18 before sending it over to the SD-WAN fabric. What are the two ways to create the required configuration? (Choose two).

Refer to the exhibit. An administrator is configuring a policy in addition to an existing hub-and-spoke policy for two sites that should directly communicate with each other. How is this policy configured?

How are policies deployed on cloud-tiosted Cisco SD-WAN controllers?

Which feature allows reachability to an organization’s internally hosted application for an active DNS security policy on a device?

Which protocol detects path status (up/down), measures loss/latency/jitter, and measures the quality of the IPsec tunnel MTU?

An engineer is adding a tenant with location JD 306432373 in vManage. What is the maximum number of alphanumeric characters that are accepted in the tenant name field?

What are the two advantages of deploying cloud-based Cisco SD-WAN controllers? (Choose two.)

An engineer configures policing with a rate of 125 Bps and a burst rate of 8000 bits, as shown here:

Which configuration completes this task?

An engineer is applying QoS policy for the transport-side tunnel interfaces to enable scheduling and shaping for a WAN Edge cloud router Which command accomplishes the task?

Which secure connection should be used to access the REST APIs through the Cisco vManage web server?

Refer to the exhibit.

The tunnel interface configuration on both WAN Edge routers is:

Which configuration for WAN Edge routers will connect to the Internet?

Which combination of platforms are managed by vManage?

Which configuration step is taken on vManage after WAN Edge list is uploaded?

Which type of route advertisement of OMP can be verified?

An engineer wants to change the configuration of the certificate authorization mode from manual to automated. Which GUI selection will accomplish this?

How do WAN Edge devices operate when vSmart is inaccessible or fails to be reached by the WAN Edge?

A network administrator is configuring VRRP to avoid a traffic black hole when the transport side of the network is down on the master device. What must be configured to get the fastest failover to standby?

Drag and drop the devices from the left onto the correct functions on the right.

Which secure tunnel type should be used to connect one WAN Edge router to other WAN Edge routers?

Which component of the Cisco SD-WAN control plane architecture should be located in a public Internet address space and facilitates NAT-traversal?

What is an attribute of TLOC’?

Which application list is preconfigured?

Which policy tracks path characteristics such as loss, latency, and jitter in vManage?

An engineer must create a QoS policy by creating a class map and assigning it to the LLQ queue on a WAN Edge router Which configuration accomplishes the task?

A)

B)

C)

D)

An enterprise has these three WAN connections:

public Internet

business internet

MPLS

An engineer must configure two available links to route traffic via both links. Which configuration achieves this objective?

An organization wants to discover monitor and track the applications running on the WAN Edge device on the LAN Which configuration achieves this goal?

What is a benefit of the application aware firewall feature in the Cisco SD-WAN solution?

A policy is created to influence routing in the network using a group of prefixes. What policy application will achieve this goal when applied to a site list?

What is the default value (in milliseconds) set tor the poll interval in the BFD basic configuration?

Which two algorithms authenticate a user when configuring SNMPv3 monitoring on a WAN Edge router? (Choose two.)

What is a restriction when configuring a tunnel interface?

An application team is getting ready to deploy a new business-critical application to the network. To protect the traffic, the network team must add another queue to the QoS map and then deploy the map to fabric Which configuration slop must be completed prior to adding the queue to the QoS map and applying If

Which component of the Cisco SD-WAN secure extensible network provides a single pane of glass approach to network monitoring and configuration?

What is the purpose of ‘’vpn 0’’ in the configuration template when onboarding a WAN edge node?

Refer to the exhibit The network team must configure El GRP peering at HQ with devices in the service VPN connected to WAN Edge CSRv. CSRv is currently configured with

A)

B)

C)

D)

A policy is created to influence routing path in the network using a group of prefixes. What policy application will achieve this goal when applied to a site List?

An engineer must create a QoS policy by creating a class map and assigning it to the LLQ queue on a WAN Edge router Which configuration accomplishes the task?

A)

B)

C)

D)

Refer to the exhibit Which configuration ensures that OSPF routes learned from Site2 are reachable at Sitel and vice-versa?

Refer to the exhibit.

An engineer configured OMP with an overlay-as of 10666. What is the AS-PATH for prefix 104.104.104.104/32 on R100?

An administrator must configure an ACL for traffic coming in from the service-side VPN on a specific WAN device with circuit ID 391897770. Which policy must be used to configure this ACL?

In a Cisco SD-WAN architecture, what is the role of the WAN Edge?

Which two architectural components are part of an SD-WAN high availability vManage cluster? (Choose two.)

Which queue must an engineer configure for control and BFD traffic for convergence on a WAN Edge router?

Refer to the exhibit. An enterprise decides to use the Cisco SD-WAN Cloud onRamp for SaaS feature and utilize H.Q site Biz iNET to reach SaaS Cloud for branch C. currently reaching SaaS Cloud directly. Which role must be assigned to devices at both sites in vManage Cloud Express for this solution to work?

Refer to exhibit. An engineer is troubleshooting tear of control connection even though a valid CertificateSerialNumber is entered. Which two actions resolve Issue? (Choose two)

Which two REST API functions are performed for Cisco devices in an overlay network? (Choose two)

If Smart Account Sync is not used, which Cisco SD-WAN component is used to upload an authorized serial number file?

Company E wants to deploy Cisco SD-WAN with controllers in AWS The company's existing WAN is on private MPLS without Internet access to controllers m AWS An Internet circuit is added to a site in addition to the existing MPLS circuit. Which interface template establishes BFD neighbors over both transports?

A)

B)

C)

Miss

D)

An engineer builds a three-node vManage cluster and then realizes that multiple nodes are unnecessary for the size of the company. How should the engineer revert the setup to a single vManage?

Which website allows access to visualize the geography screen from vManager using the internet?

Which configuration defines the groups of interest before creation of the access list or route map?

A)

B)

C)

D.

Which configuration change allows direct internet access at the branch site for YouTube traffic?

In which device state does the WAN edge router create control connections, but data tunnels are not created?

Which command on a WAN Edge device displays the information about the colors present in the fabric that are learned from vSmart via OMP?

An enterprise is continuously adding new sites to its Cisco SD-WAN network. It must configure any cached routes flushed when OMP peers have lost adjacency Which configuration allows the cached OMP routes to be flushed after every 24 hours from its routing table?

An engineer must apply the configuration for certificate installation to vBond Orchestrator and vSmart Controller. Which configuration accomplishes this task?

What are two benefits of installing Cisco SD-WAN controllers on cloud-hosted services? (Choose two.)

Which two prerequisites must be met before the Cloud onRamp for laaS is initiated on vManage to expand to the AWS cloud? (Choose two)

Which API call retrieves a list of all devices in the network?

An engineer must configure local redundancy on a site. Which configuration accomplish this task?

Which protocol is used for the vManage to connect to the vSmart Controller hosted in Cloud?

Refer to the exhibit.

Customer XYZ cannot provision dual connectivity on both of its routers due to budget constraints but wants to use both R1 and R2 interlaces for users behind them for load balancing toward the hub site. Which configuration achieves this objective?

Refer to the exhibit. Which configuration extends the INET interface on R1 to be used by R2 for control and data connections?

A)

B)

C)

What is the OMP graceful restart default value on vSmart controllers and WAN Edge routers?

What is the size of SGT data in the metadata header?

What is the function of colocation in Cloud OnRamp SaaS?