300-415 ENSDWI Implementing Cisco SD-WAN Solutions Online Questions

Pdfprep2021-05-07T09:05:34+00:00

Implementing Cisco SD-WAN Solutions 300-415 ENSDWI online questions have been updated, which can help you test your knowledge of Cisco’s SD-WAN solution including SD-WAN architecture, controller deployment, WAN Edge router deployment, policies, security, quality of service, multicast, and management and operations. Learn the Cisco certification 300-415 ENSDWI exam free updated online questions below.

Page 1 of 14

1. Which feature builds transport redundancy by using the cross link between two redundant WAN Edge routers?

OMP

zero-touch provisioning

quality of service

TLOC extension

2. When redistribution is configured between OMP and BGP at two Data Center sites that have Direct Connection interlink, which step avoids learning the same routes on WAN Edge routers of the DCs from LAN?

Define different VRFs on both DCs

Set same overlay AS on both DC WAN Edge routers

Set down-bit on Edge routers on DC1

Set OMP admin distance lower than BGP admin distance

3. Refer to the exhibit.

电脑屏幕的手机截图

描述已自动生成

Which two configurations are needed to get the WAN Edges registered with the controllers when certificates are used? (Choose two)

Generate a CSR manually within vManage server

Generate a CSR manually on the WAN Edge

Request a certificate manually from the Enterprise CA server

Install the certificate received from the CA server manually on the WAN Edge

Install the certificate received from the CA server manually on the vManage

4. Refer to the exhibit.

图形用户界面, 文本, 应用程序

描述已自动生成

A network administrator is configuring OMP in vManage to advertise all the paths for the same prefix from a site that has two WAN Edge devices Each WAN Edge device is connected to three ISPs and two private MPLS transports .

What is the minimum value for 'Number of Paths advertised per Prefix" that should be configured?

5. DRAG DROP

Drag and drop the policies from the left onto the correct policy types on the right.

图表

描述已自动生成

6. For data plane resiliency, what does the Cisco SD-WAN software implement?

BFD

establishing affinity between vSmart controllers and WAN Edge routers

multiple vBond orchestrators

OMP

7. In which device state does the WAN edge router create control connections, but data tunnels are not created?

valid

backup

active

staging

8. Which protocol is used to measure loss latency, Jitter, and liveliness of the tunnel between WAN Edge router peers?

OMP

IP SLA

NetFlow

BFD

9. Which configuration changes the packet loss priority from low to highly?

A)

文本

描述已自动生成

Option A

Option B

Option C

Option D

10. Which device information is requited on PNP/ZTP to support the zero-touch onboarding process?

serial and chassis numbers

interface IP address

public DNS entry

system IP address

Page 2 of 14

11. Refer to the exhibit.

图形用户界面, 文本, 应用程序

描述已自动生成

Which configuration routes Site 2 through the firewall in Site 1?

文本

描述已自动生成

Option A

Option B

Option C

Option D

12. Refer to the exhibit.

文本

描述已自动生成

Which QoS treatment results from this configuration after the access list acl-guest is applied inbound on the vpn1 interface?

A UDP packet sourcing from 172.16.20.1 and destined to 172.16.10.1 is accepted

A TCP packet sourcing from 172.16.10.1 and destined to 172.16.20.1 is dropped

A UDP packet souring from 172.16.10.1 and destined to 172.16.20.1 is dropped.

A TCP packet sourcing from 172.16.20.1 and destined to 172.16.10.1 is accepted

13. DRAG DROP

Drag and drop the vManage policy configuration procedures from the left onto the correct definitions on the right.

表格

描述已自动生成

14. When software is upgraded on a vManage NMS, which two image-adding options store images in a local vManage software repository? (Choose two.)

To be downloaded over a SMTP connection

To be downloaded over a SNMP connection

To be downloaded over an out-of-band connection

To be downloaded over a control plane connection

To be downloaded over an ICMP connection

15. Which pathway under Monitor > Network > Select Device is used to verify service insertion configuration?

Real Time

System Status

ACL Logs

Events

16. Which component of the Cisco SD-WAN control plane architecture should be located in a public Internet address space and facilitates NAT-traversal?

vBond

WAN Edge

vSmart

vManage

17. Refer to the exhibit .

图示

描述已自动生成

Which configuration extends the INET interface on R1 to be used by R2 for control and data connections?

A)

文本, 信件

描述已自动生成

Option A

Option B

Option C

18. A network administrator is bringing up one WAN Edge for branch connectivity .

Which types of tunnels form when the WAN edge router connects to the SD-WAN fabric?

DTLS or TLS tunnel with vBond controller and IPsec tunnel with vManage controller.

DTLS or TLS tunnel with vBond controller and IPsec tunnel with other WAN Edge routers.

DTLS or TLS tunnel with vSmart controller and IPsec tunnel with other Edge routers.

DTLS or TLS tunnel with vSmart controller and IPsec tunnel with vBond controller.

19. Refer to the exhibit.

文本

描述已自动生成

The network administrator has configured a centralized topology policy that results in the displayed routing table at a branch office .

Which two configurations are verified by the output? [Choose two.)

The routing table is for the transport VP

The default route is learned via OM

This routing table is from a cEdge router.

The default route is configured locally.

The configured policy is adding a route tag of 300 to learned routes.

20. Refer to the exhibit.

图示

描述已自动生成

The tunnel interface configuration on both WAN Edge routers is:

文本

描述已自动生成

Which configuration for WAN Edge routers will connect to the Internet?

文本

描述已自动生成

Option A

Option B

Option C

Option D

Page 3 of 14

21. Which type of route advertisement of OMP can be verified?

OMP, VP

and origin

Origin, TLOC, and VPN

Origin, TLOC, and service

OMP, TLOC and service

22. What are the two advantages of deploying cloud-based Cisco SD-WAN controllers? (Choose two.)

centralized control and data plane

distributed authentication policies

management of SLA

infrastructure as a service

centralized raid storage of data

23. DRAG DROP

Drag and drop the attributes from the left that make each transport location unique onto the right. Not all options are used.

表格

描述已自动生成

24. At which layer does the application-aware firewall block applications on a WAN Edge?

25. Company ABC has decided to deploy the controllers using the On-Prem method .

How does the administrator upload the WAN Edge list to the vManage?

A)

图形用户界面, 应用程序

描述已自动生成

Option A

Option B

Option C

Option D

26. Refer to the exhibit.

文本

描述已自动生成

What binding is created using the tloc-extension command?

between ge 0/2.101 of port-type service and ge 0/0 of port-type service

between ge 0/2.101 of port-type transport and ge 0/0 of port-type service

between ge 0/2.101 of port-type service and ge 0/0 of port-type transport

between ge 0/2.101 of port-type transport and ge 0/0 of port-type transport

27. DRAG DROP

Drag and drop the REST API calls from the left onto the functions on the right.

图示

中度可信度描述已自动生成

28. DRAG DROP

Drag and drop the components from the left onto the corresponding Cisco NFV infrastructure Building Blocks on the right. Not all options are used.

图示

描述已自动生成

29. Which policy blocks TLOCs from remotes and allows TLOCs from the data center to form hub-and-spoke peering?

localized control policy

localized data policy

centralized data policy

centralized control policy

30. An engineer is tasked to improve throughput for connection-oriented traffic by decreasing round-trip latency .

Which configuration will achieve this goal?

turn on "Enable TCP Optimization"

turn off "Enhance ECMP Keying"

turn off "Enable TCP Optimization"

turn on "Enhance ECMP Keying"

Page 4 of 14

31. Two sites have one WAN Edge each WAN Edge has two public TLOCs with no restriction configured. There is full reachability between the TLOCs .

How many data tunnels are formed on each Edge router?

32. Which combination of platforms are managed by vManage?

ISR4321, ASR1001, ENCS, lSRv

ISR4351, ASR1002HX, vEdge2000, vEdge Cloud

ISR4321, ASR1001, Nexus, ENCS

lSR435l, ASRl009, vEdge2000, CSR1000v

33. Where on vManage does an engineer find the details of control node failure?

Alarms

Events

Audit log

Network

34. Which two requirements must be met for DNS inspection when integrating with cisco umbrella? (Choose two)

Upload the WAN Edge serial allow list to the Umbrella portal.

Attach security policy to the device template.

Configure the Umbrella token on the vManage

Create and attach a System feature template with the Umbrella registration credentials.

35. Which OSPF command makes the WAN Edge router a less preferred exit from a site with a dual WAN Edge design?

A)

文本

中度可信度描述已自动生成

Option A

Option B

Option C

Option D

36. Refer to the exhibit.

图形用户界面, 应用程序

描述已自动生成

The ge0/0 interface connects to a 30-MB link. A network administrator wants to always have 10 MB available for high priority traffic. When lower-priority traffic busts exceed 20 MB. Traffic should be redirected to the second WAN interface ge0/1 .

Which set of configurations accomplishes this task?

A)

图形用户界面, 文本, 应用程序

描述已自动生成

Option A

Option B

Option C

Option D

37. Which two features does the application firewall provide? (Choose two.)

classification of 1400+ layer 7 applications

blocks traffic by application or application-family

numbered sequences of match-action pairs

classification of 1000+ layer 4 applications

application match parameters

38. What is an advantage of using auto mode versus static mode of power allocation when an access point is connected to a PoE switch port?

It detects the device is a powered device

All four pairs of the cable are used

Power policing is enabled at the same time

The default level is used for the access point

39. Which alarm setting is configured to monitor serious events that affect but do not shut down, the operation of a network function?

Minor

Major

Medium

Critical

40. Which Cisco SD-WAN WAN Edge platform supports LTE and Wi-Fi?

vEdge2000

ASR1001

CSR 1000v

ISR 1101

Page 5 of 14

41. Which policy configures an application-aware routing policy under Configuration > Policies?

Localized policy

Centralized policy

Data policy

Control policy

42. In Cisco SD-WAN, what protocol is used for control connections between SD-WAN devices?

DTLS

OMP

BGP

OSPF

43. On which device is a service FW address configured to Insert firewall service at the hub?

vEdge at the branch

vSmart at the hub

vEdge at the hub

vSmart at the branch

44. When VPNs are grouped to create destination zone in Zone-Based Firewall, how many zones can a single VPN be part of?

two

four

one

three

45. What is the purpose of ‘’vpn 0’’ in the configuration template when onboarding a WAN edge node?

It carries control traffic over secure DTLS or TLS connections between vSmart controllers and vEdge routers, and between vSmart and vBond

It carries control out-of-band network management traffic among the Viptela devices in the overlay network.

It carries control traffic over secure IPsec connections between vSmart controllers and vEdge routers, and between vSmart and vManager

It carries control traffic over secure IPsec connections between vSmart controllers and vEdge routers, and between vSmart and vBond

46. Which two image formats are supported for controller codes? (Choose two.)

.nxos

.qcow2

.ova

.bin

Tgz

47. An engineer is troubleshooting a certificate issue on vEdge .

Which command is used to verify the validity of the certificates?

show control local-properties

show control summary

show certificate installed

show certificate status

48. Which component of the Cisco SD-WAN control plane architecture facilitates the storage of certificates and configurations for network components?

vSmart

vBond

WAN Edge

vManage

49. Refer to the exhibit.

图片包含表格

描述已自动生成

Which configuration change is needed to configure the tloc-extention on Branch1-Edge1?

A)

文本

描述已自动生成

Option A

Option B

Option C

Option D

50. An engineer wants to track tunnel characteristics within an SLA-based policy for convergence .

Which policy configuration will achieve this goal?

App-route policy

VPN membership policy

Control policy

Data policy

Page 6 of 14

51. Which scheduling method is configured by default for the eight queues in the cloud vEdge router1?

low latency queue

priority queue

weighted random early detection

weighted round robin

52. Which logs verify when a device was upgraded?

Audit

ACL

SNMP

53. Refer to the exhibit.

图示

描述已自动生成

An engineer is configuring service chaining .

Which set of configurations is required for all traffic from Site ID 1 going toward Site ID 2 to get filtered through the firewall on the hub site?

A)

文本

描述已自动生成

Option A

Option B

Option C

Option D

54. DRAG DROP

Drag and drop the Cisco SD-WAN components from the left onto their functions on the right.

图示

描述已自动生成

55. A large retail organization decided to move some of the branch applications to the AWS cloud .

How does the network architect extend the in-house Cisco SD-WAN branch to cloud network into AWS?

Create virtual WAN Edge devices Cloud through the AWS online software store

Create virtual instances of vSmart Cloud through the AWS online software store

Create GRE tunnels to AWS from each branch over the Internet

Install the AWS Cloud Router in the main data center and provide the connectivity from each branch

56. An engineer wants to automate the onboarding process for a WAN Edge router with vManage .

Which command will accomplish this?

request vedge-cloud activate chassis-number <chassis-number> serial <serial>

request vedge-cloud activate chassis-number <chassis-number> token <token-number>

request vedge-cloud activate serial <serial> token <token-number>

request vedge-cloud activate chassis-number <chassis-number> organization <organization>

57. When a WAN Edge device joins the SD-WAN overlay, which Cisco SD-WAN components orchestrates the connection between the WAN Edge device and a vSmart controller?

vManage

vBond

OMP

APIC-EM

58. Which device in the SD- WAN solution receives and categorizes event reports, and

generates alarms?

WAN Edge routers

vSmart controllers

vManage NMS

vBond controllers

59. DRAG DROP

Drag and drop the steps from the left into the order on the right to upload software on vManage repository that is accessible from maintenance > Software Repository.

表格

描述已自动生成

60. DRAG DROP

Drag and drop the functions from the left onto the correct templates on the right.

表格

描述已自动生成

Page 7 of 14

61. Which combination of platforms are managed by vManage?

ISR4351, ASR1002HX, vEdge2000, vEdge Cloud

ISR4321, ASR1001, Nexus, ENCS

ISR4321, ASR1001, ENCS, ISRv

ISR4351, ASR1009, vEdge2000, CSR1000v

62. What is the default interval for BFD packets?

1 second

15 second

10 second

5 second

63. Which two platforms can host a vEdge Cloud Router? (Choose two)

Microsoft Azure

Dream host

AWS

DigitalCloud

Google

64. Which two services are critical for zero touch provisioning onboarding? (Choose two)

SNMP

AAA

DHCP

DNS

65. Which statement about VRRP is true?

It supports load balancing

It can be configured with HSRP on a switch or switch stack

It supports IPv4 and IPv6

It supports encrypted authentication

66. Where does the Cisco V-Edge Router perform QoS traffic classification?

Per VPN

Per vEdge

Egress interface

Ingress interface

67. Which on-the-box security feature is supported by the Cisco ISR 4451 SD-WAN device and not on vEdge?

Cloud Express service

Enterprise Firewall with Application Awareness

reverse proxy

iPsec/GRE cloud proxy

68. A policy is created to influence routing in the network using a group of prefixes.

What policy application will achieve this goal when applied to a site list?

Vpn-membership policy

Control-policy

cflowd-template

App-route policy

69. Which secure connection should be used to access the REST APIs through the Cisco vManage web server?

HTTP inspector interface

authenticated HTTPS

authenticated DTLS

JSON Inspector interface

70. Which two products that perform lifecycle management for virtual instances are supported by WAN Edge cloud routers? (Choose two.)

OpenStack

AWS

VMware vCenter

Azure

IBM Cloud

Page 8 of 14

71. What is a description of vManage NMS?

It is accessible only from VPN 512 (the management VPN).

A cluster requires device templates to be created on and attached to the same server

It is a software process on a dedicated WAN Edge router in the network.

A cluster consists of a minimum of two vManage NMSs

72. In which device state does the WAN edge router create control connections, but data tunnels are not created?

valid

backup

active

staging

73. Which two WAN Edge devices should be deployed in a cloud? (Choose two.)

vEdge 5000v

ASR 1000v

CSR 1000v

vEdge 100wm

vEdge cloud

74. Which port is used for vBond under controller certificates if no alternate port is configured?

12345

12347

12346

12344

75. A network administrator is creating an OMP feature template from the vManage GUI to be applied to WAN edge routers.

Which configuration attribute will avoid the redistribution of the routes back into the OMP from the LAN side?

configure "Number of Paths Advertised per Prefix"

configure "Overlay AS Number"

configure "Send Backup Paths"

configure "ECMP limit"

76. Which device information is requited on PNP/ZTP to support the zero touch onboarding process?

serial and chassis numbers

interface IP address

public DNS entry

system IP address

77. An engineer is configuring a centralized policy to influence network route advertisement.

Which controller delivers this policy to the fabric?

vSmart

vManage

WAN Edge

vBond

78. An engineer is tasked to improve throughput for connection-oriented traffic by decreasing round-trip latency Which configuration will achieve this goal?

turn on "Enable TCP Optimization"

turn off "Enhance ECMP Keying"

turn off "Enable TCP Optimization"

turn on "Enhance ECMP Keying"

79. Which VPN connects the transport-side WAN Edge interface to the underlay/WAN network?

VPN 1

VPN 511

VPN 0

VPN 512

80. Refer to the exhibit.

ccnp_300_415_ensdwi_14_12_202074_1

A network administrator is configuring OMP in vManage to advertise all the paths for the same prefix from a site that has two WAN Edge devices Each WAN Edge device is connected to three ISPs and two private MPLS transports.

What is the minimum value for 'Number of Paths advertised per Prefix" that should be configured?

Page 9 of 14

81. If Smart Account Sync is not used, which Cisco SD-WAN component Is used to upload an authorized serial number file?

WAN Edge

vManage

vSmart

vBond

82. Which feature builds transport redundancy by using the cross link between two redundant WAN Edge routers?

OMP

zero-touch provisioning

quality of service

TLOC extension

83. A network administrator is configuring a tunnel interface on a branch Cisco IOS XE router to run TLOC extensions.

Which configuration will extend a TLOC over a GRE tunnel to another router in the branch?

A)

ccnp_300_415_ensdwi_14_12_202075_1

Option A

Option B

Option C

Option D

84. Which component of the Cisco SD-WAN architecture oversees the control plane of overlay network to establish, adjust, and maintain the connections that form the Cisco SD-WAN fabric?

APIC-EM

vSmart

vManage

vBond

85. Which two hardware platforms support Cisco IOS XE SD-WAN images? (Choose two.)

ISR4000 series

ISR9300 series

vEdge-1000 series

ASR9000 series

ASR1000 series

86. What is a default protocol for control plane connection?

HTTPS

TLS

IPsec

DTLS

87. Which component of the Cisco SD-WAN control plane architecture should be located in a public Internet address space and facilitates NAT-traversal?

WAN Edge

vSmart

vBond

vManage

88. Which Cisco SD-WAN WAN Edge platform supports LTE and Wi-Fi?

ISR 1101

ASR 1001

CSR 1000v

vEdge 2000

89. Refer to the exhibit.

310-415鸿鹄论坛_ENSDWI_Oct_202015_1

What does the BFD value of 8 represent?

dead timer of BFD session

poll-interval of BFD session

hello timer of BFD session

number of BFD sessions

90. What are the two advantages of deploying cloud-based Cisco SD-WAN controllers? (Choose two.)

centralized control and data plane

infrastructure as a service

management of SLA

centralized raid storage of data

distributed authentication policies

Page 10 of 14

91. Which two image formats are supported for controller codes? (Choose two.)

.nxos

.qcow2

.iso

.ova

.tgz

92. Which two platforms for the Cisco SD-WAN architecture are deployable in a hypervisor on-premises or in IAAS Cloud? (Choose two.)

CSR 1000v

ISR 4431

vEdge 100c

vEdge 2000

vEdge Cloud

93. How is the scalability of the Manage increased in Cisco SD-WAN Fabric?

Increase the bandwidth of the WAN link connected to the vManage

Increase licensing on the vManage

Deploy more than one vManage controllers on different physical server

Deploy multiple vManage controllers in a cluster

94. Which component of the Cisco SD-WAN control plane architecture facilitates the storage of certificates and configurations for network components?

vSmart

WAN Edge

vManage

vBond

95. An engineer is troubleshooting a vEdge router and identifies a “DCONFAIL C DTLS connection failure” message.

What is the problem?

memory issue

certificate mismatch

organization mismatch

connectivity issue

96. An engineer is troubleshooting a certificate issue on vEdge.

Which command is used to verify the validity of the certificates?

show control local-properties

show control summary

show certificate installed

show certificate status

97. Refer to the exhibit.

ccnp_300_415_ensdwi_14_12_20208_1

An engineer is troubleshooting a control connection issue.

What does “connect” mean in this show control connections output?

Control connection is down

Control connection is up

Control connection attempt is in progress

Control connection is connected

98. A vEdge platform is sending VRRP advertisement messages every 10 seconds.

Which value configures the router back to the default timer?

2 seconds

5 seconds

1 second

3 seconds

99. Which OSPF command makes the WAN Edge router a less preferred exit from a site with a dual WAN Edge design?

A)

310-415鸿鹄论坛_ENSDWI_Oct_202013_1

Option A

Option B

Option C

Option D

100. Which two services are critical for zero touch provisioning on-boarding? (Choose two.)

SNMP

AAA

DHCP

DNS

Page 11 of 14

101. When redistribution is configured between OMP and BGP at two Data Center sites that have Direct Connection Interlink, which step avoids learning the same routes on WAN Edge routers of the DCs from LAN?

Set down-bit on Edge routers on DC1

Define different VRFs on both DCs

Set OMP admin distance lower than BGP admin distance

Set same overlay AS on both DC WAN Edge routers

102. Which device information is required on PNP/ZTP to support the zero touch onboarding process?

serial and chassis numbers

interface IP address

public DNS entry

system IP address

103. Which configuration step is taken on vManage after WAN Edge list is uploaded to support the on-boarding process before the device comes online?

Verify the device certificate

Enable the ZTP process

Set the device as valid

Send the list to controllers

104. On which device is a service FW address configured to insert firewall service at the hub?

vSmart at the branch

vEdge at the branch

vEdge at the hub

vSmart at the hub

105. Which attributes are configured to uniquely identify and represent a TLOC route?

system IP address, link color, and encapsulation

origin, originator, and preference

site ID, tag, and VPN

firewall, IPS, and application optimization

106. Which type of route advertisement of OMP can be verified?

Origin, TLOC, and VPN

Origin, TLOC, and service

OMP, VPN, and origin

OMP, TLOC, and service

107. When VPNs are grouped to create destination zone in Zone-Based Firewall, how many zones can a single VPN be part of?

two

four

one

three

108. Which template configures the out-of band management VPN?

A)

310-415鸿鹄论坛_ENSDWI_Oct_202027_1

Option A

Option B

Option C

Option D

109. Which on-the-box security feature is supported by the Cisco ISR 4451 SD-WAN device and not on vEdge?

Cloud Express service

Enterprise Firewall with Application Awareness

reverse proxy

iPsec/GRE cloud proxy

110. What is a benefit of the application-aware firewall?

It blocks traffic by MTU of the packet

It blocks encrypted traffic

It blocks traffic by application

It blocks traffic by MAC address

Page 12 of 14

111. Which value is verified in the certificates to confirm the identity of the device?

Serial Number

OTP

System-IP

Chassis-ID

112. Which hardware component is involved in the Cisco SD-WAN authentication process for ISR platforms?

ZTP

OTPC

SUDI

TPMD

113. Which alarm setting is configured to monitor serious events that affect, but do not shut down, the operation of a network function?

Critical

Medium

Major

Minor

114. Which command disables the logging of syslog messages to the local disk?

no system logging disk local

system logging server remote

no system logging disk enable

system logging disk disable

115. Which logs verify when a device was upgraded?

ACL

SNMP

Audit

116. Which protocol is used to measure loss, latency, jitter, and liveliness of the tunnel between WAN Edge router peers?

OMP

NetFlow

BFD

IP SLA

117. Which pathway under Monitor > Network > Select Device is used to verify service insertion configuration?

System Status

ACL Logs

Real Time

Events

118. Drag and drop the devices from the left onto the correct functions on the right.

310-415鸿鹄论坛_ENSDWI_Oct_202031_1

119. Drag and drop the vManage policy configuration procedures from the left onto the correct definitions on the right.

310-415鸿鹄论坛_ENSDWI_Oct_202032_1

120. Drag and drop the policies from the left onto the correct policy types on the right.

310-415鸿鹄论坛_ENSDWI_Oct_202033_1

Page 13 of 14

121. Drag and drop the route verification output from show omp tlocs from the left onto the correct explanations on the right.

310-415鸿鹄论坛_ENSDWI_Oct_202033_2

122. Drag and drop the actions from the left into the correct sequence on the right to create a data policy to direct traffic to the Internet exit

310-415鸿鹄论坛_ENSDWI_Oct_202034_1

123. Drag and drop the functions from the left onto the correct templates on the right.

310-415鸿鹄论坛_ENSDWI_Oct_202034_2

124. Which component of the Cisco SD-WAN secure extensible network provides a single pane of glass approach to network monitoring and configuration?

APIC-EM

vSmart

vManage

vBond

125. What is a benefit of the application aware firewall feature in the Cisco SD-WAN solution?

application monitoring

application malware protection

application visibility

control policy enforcement

126. A network administrator is configuring QoS on a Vedge 5000 router and needs to enable it on the transport side interface.

Which policy setting must be selected to accomplish this goal?

Cloud QoS Service side

Cloud QoS

Netflow

Application

127. A policy is created to influence routing path in the network using a group of prefixes.

What policy application will achieve this goal when applied to a site list?

control-policy

vpn-membership policy

app-route policy

cflowd-template

128. An engineer wants to track tunnel characteristics within a SLA-based policy for convergence.

Which policy configuration will achieve this goal?

Data policy

Control policy

App-route policy

VPN membership policy

129. Refer to the exhibit.

未标题-1

What binding is created using the tloc-extension command?

between ge0/2.101 of port-type transport and ge0/0 of port-type service

between ge0/2.101 of port-type service and ge0/0 of port-type service

between ge0/2.101 of port-type service and ge0/0 of port-type transport

between ge0/2.101 of port-type transport and ge0/0 of port-type transport

130. Which two algorithms authenticate a user when configuring SNMPv3 monitoring on a WAN Edge router? (Choose two)

AES-256

SHA-1

AES-128

MD5

SHA-2

Page 14 of 14

131. A network administrator is configuring an application-aware firewall between inside zones to an outside zone on a WAN edge router using vManage GUI.

What kind of inspection is performed when the ”inspect” action is used?

Layer 7 inspection for TCP and Layer 4 inspection for UDP

IPS inspection for TCP and-Layer 4 inspection for UDP

stateful inspection for TCP and stateless inspection of UDP

stateful inspection for TCP and UDP

132. What is the purpose of ”vpn 0” in the configuration template when onboarding a WAN edge node?

It carries control traffic over secure IPsec connections between vSmart controllers and vEdge routers, and between vSmart and vManager

It carries control out-of-bond network management traffic among the Viptela devices in the overlay network.

It carries control traffic over secure DTLS or TLS connections between vSmart controllers and vEdge routers, and between vSmart and vBond

133. In Cisco SD-WAN, what protocol is used for control connections between SD-WAN devices?

BGP

OSPF

DTLS

OMP

134. In an AWS cloud, which feature provision WAN Edge routers automatically in Cisco SD - WAN?

Cloud OnRamp

vAnalytics

Cloud app

Network Designer

135. When a WAN Edge device joins the SD-WAN overlay, which Cisco SD-WAN components orchestrates the connection between the WAN Edge device and a vSmart controller?

OMP

vBond

vManage

APIC-EM

136. A network administrator is bringing up one WAN Edge for branch connectivity.

Which types of tunnels form when the WAN edge router connects to the SD -WAN fabric?

DTLS or TLS tunnel with vBond controller and IPsec tunnel with vManage controller

DTLS or TLS tunnel with vBond controller and IPsec tunnel with other WAN Edge routers

DTLS or TLS tunnel with vSmart controller and IPsec tunnel with other Edge routers

DTLS or TLS tunnel with vSmart controller and IPsec tunnel with vBond controller

137. In the Cisco SD-WAN solution, vSmart controller is responsible for which two actions? (Choose two)

Authenticate and authorize vEdge routers.

Distribute the IP address from DHCP server to vEdge routers.

Distribute crypto key information among vEdge routers

Configure and monitor vEdge routers.

Distribute route and policy information via OM

138. Which device in the SD-WAN solution receives and categorizes event reports, and generates alarms?

vSmart controllers

WAN Edge routers

vBond controllers

vManage NMS

139. An administrator needs to configure SD-WAN to divert traffic from the company’s private network to an ISP network.

What action should be taken to accomplish this goal?

configure the data security policy

configure the application aware policy

configure the control policy

configure the data policy

140. Drag and drop the definitions from the left to the configuration on the right.

310-415鸿鹄论坛_ENSDWI_Oct_20206_1

300-415 ENSDWI Implementing Cisco SD-WAN Solutions Online Questions

Author