[Q130-Q149] The Best Valid 300-415 Dumps for Helping Passing 300-415 Exam!

Rate this post

The Best Valid 300-415 Dumps for Helping Passing 300-415 Exam!

UPDATED Cisco 300-415 Exam Questions & Answer

Q130. An engineer modifies a data policy for DIA in VPN 67. The location has two Internet-bound circuits. Only the web browsing traffic must be admitted for DIA. without further discrimination about which transport to use.
Here is the existing data policy configuration:

Which policy configuration sequence meets the requirements?

Option A

Option B

Option C

Option D

Q131. Which template configures the out-of-band management VPN?
A)

B)

C)

D)

Option A

Option B

Option C

Option D

Q132. Which feature template configures OMP?
A)

B)

C)

D)

Option A

Option B

Option C

Option D

Q133. Which two mechanisms are used to guarantee the integrity of data packets in the Cisco SD-WAN architecture data plane? {Choose two )

transport locations

authentication headers

certificates

TPM chip

encapsulation security payload

Q134. An engineer is configuring a data policy IPv4 prefixes for a site WAN edge device on a site with edge devices.
How is this policy added using the policy configuration wizard?

In vManage NMS select (he configure policies screen, select the centralized policy tab and click add policy

In vBood orchestrator. select the configure > policies screen select the localized policy tab. and click add policy

In vManage NMS. select the configure policies screen. select the localized policy tab- and click add policy

In vSmart controller select tie configure policies screen, select the localized policy tab, and click add policy

Q135. An engineer configures the wireless LAN controller to perform 802.1x user authentication. Which option must be enabled to ensure that client devices can connect to the wireless, even when WLC cannot communicate with the RADIUS?

local EAP

authentication caching

рrе-authentication

Cisco Centralized Key Management

Local EAP is an authentication method that allows users and wireless clients to be authenticated locally on the controller. It is designed for use in remote offices that want to maintain connectivity to wireless clients when the backend system becomes disrupted or the external authentication server goes down. When you enable local EAP, the controller serves as the authentication server and the local user database, so it removes dependence on an external authentication server.
Reference: http://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/100590- ldap-eapfast-config.html

Q136. In a Cisco SD-WAN architecture, what is the role of the WAN Edge?

It provides orchestration to assist in automatic provisioning of WAN Edge routers and overlay

It is the management plane responsible for centralized configuration and monitoring

It is the control plane that builds and maintains network topology

It is the data plane that is responsible for forwarding traffic

Q137. Drag and drop the Cisco SD-WAN components from the left onto their functions on the right.

Q138. An engineer must avoid routing loops on the SD-WAN fabric for routes advertised between data center sites Which BGP loop prevention attribute must be configured on the routers to meet this requirement?

same OMP overlay-as on WAN Edge routers of all data centers

static routing on al WAN Edge routers instead of BGP

same BGP AS between all WAN Edge routers and CE routers

same BGP AS between all CE and PE routers

Q139. Which two image formats are supported for controller codes? (Choose two.)

.nxos

.qcow2

.iso

.ova

.bin

Section: Controller Deployment

Q140. Refer to the exhibit.

Which QoS treatment results from this configuration after the access list acl-guest is applied inbound on the vpn1 interface?

A UDP packet sourcing from 172.16.20.1 and destined to 172.16.10.1 is accepted

A TCP packet sourcing from 172.16.10.1 and destined to 172.16.20.1 is dropped

A UDP packet souring from 172.16.10.1 and destined to 172.16.20.1 is dropped.

A TCP packet sourcing from 172.16.20.1 and destined to 172.16.10.1 is accepted

Q141. Refer to the exhibit.

Which configuration change is needed to configure the tloc-extention on Branch1-Edge1?

Option A

Option B

Option C

Option D

Q142. Drag and drop the policies from the left onto the correct policy types on the right.

Explanation
strict hubandspoke topology
prefer voice and video via MPLS link
perform shaping on traffic
service firewall insertion

Q143. On which device is a service FW address configured to insert firewall service at the hub?

vSmart at the branch

vEdge at the branch

vEdge at the hub

vSmart at the hub

Section: Router Deployment
Explanation/Reference: https://sdwan-docs.cisco.com/Product_Documentation/Software_Features/ Release_18.4/07Policy_Applications/02Service_Chaining/Service_Chaining_Configuration_Examples

Q144.

Refer to the exhibit A small company was acquired by a large organization As a result, the new organization decided to update information on their Enterprise RootCA and generated a new certificate using openssl Which configuration updates the new certificate and issues an alert in vManage Monitor | Events Dashboard?

Option A

Option B

Option C

Option D

Q145. A network administrator is configuring a centralized control policy based on match action pairs for multiple conditions, Which order must be configured to prefer Prefix List over TLOC and TLOC over Origin?

highest to lowest sequence number

nonsequential order

deterministic order

lowest to highest sequence number

Q146. Refer to the exhibit.

Refer to the exhibit. Which configuration stops Netconf CLI logging on WAN Edge devices during migration?

Option A

Option B

Option C

Option D

https://www.cisco.com/c/en/us/td/docs/routers/sdwan/command/sdwan-cr-book/config-cmd.html#wp3867250313

Q147. Which command disables the logging of syslog messages to the local disk?

no system logging disk enable

no system logging disk local

system logging disk disable

system logging server remote

Reference:
https://sdwan-docs.cisco.com/Product_Documentation/Software_Features/SD-WAN_Release_16.3/02System_and_Interfaces/08Configuring_System_Logging

Q148. Which two algorithms authenticate a user when configuring SNMPv3 monitoring on a WAN Edge router? (Choose two.)

AES-256

SHA-1

AES-128

MDS

SHA-2

Q149. What address do PIM routers listen to in order to automatically discover the best RP for each multicast group?

224.0.0.13

224.0.1.39

224.0.0.14

224.0.1 40

Explanation/Reference: