Cisco 300-415 ENSDWI Exam Material has been Updated

dumps2022-04-07T02:32:08+00:00

The updated Cisco 300-415 ENSDWI exam material is the latest version in the whole market. Candidates who want to take 300-415 exam need to study the updated version. Free updated Cisco 300-415 exam material is below.

Page 1 of 7

1. Which secure connection should be used to access the REST APIs through the Cisco vManage web server?

HTTP inspector interface

authenticated HTTPS

authenticated DTLS

JSON Inspector interface

2. What is the minimum Red Hat Enterprise Linux operating system requirement for a Cisco SD-WAN controller deployment via KVM?

RHEL7.5

RHEL 6.5

RHEL4.4

RHEL 6.7

3. In a customer retail network with multiple data centers, what does the network administrator use to create a regional hub topology?

control policy on vManage

control policy on vSmart

data policy on vSmart

app route policy on vSmart

4. A network administrator is creating an OMP feature template from the vManage GUI to be applied to WAN edge routers.

Which configuration attribute will avoid the redistribution of the routes back into the OMP from the LAN side?

configure "Number of Paths Advertised per Prefix"

configure "Overlay AS Number"

configure "Send Backup Paths"

configure "ECMP limit"

5. Refer to the exhibit.

An MPLS connection on R2 must extend to R1 Users behind R1 must have dual connectivity for data traffic.

Which configuration provides R1 control connectivity over the MPLS connection?

A)

Option A

Option B

Option C

Option D

6. A bank is looking for improved customer experience for applications and reduce overhead related to compliance and security.

Which key feature or features of the Cisco SD-WAN solution will help the bank to achieve their goals?

Integration with PaaS providers to offer the best possible application experience

QoS including application prioritization and meeting critical applications SLA for selecting optimal path.

implementation of a modem age core banking system

implementation of BGP across the enterprise routing for selecting optimal path

7. Which platforms are managed by a single vManage dashboard?

ISR4351, ASR1002HX, vEdge2000, vEdge Cloud

ISR4321, ASR1001, Nexus, ENCS

ISR4321, ASR1001, ENCS, ISRv

ISR4351, ASR1009, vEdge2000, CSR1000v

8. An engineer must configure a centralized policy on a site in which all HTTP traffic should use the Public Internet circuit if the loss on this circuit is below 10%. otherwise MPLS should be used.

Which configuration wizard fulfils this requirement?

Create Applications or Groups of Interest > Configure Traffic Rules > Apply Policies to Sites and VPNs

Configure VPN Membership > Apply Policies to Sites and VPNs

Create Applications or Groups of interest > Configure Traffic Data > Apply Policies to Sites and VPNs

Configure Topology > Apply Policies to Sites and VPNs

9. DRAG DROP

Drag and drop the route verification output from show omp tlocs from the left onto the correct explanations on the right.

10. Refer to the exhibit.

Which command allows traffic through the IPsec tunnel configured in VPN 0?

service local

service FW address 1.1.1.1

service netsvc1 vpn 1

service netsvc1 address 1.1.1.1

Page 2 of 7

11. Which hardware component is involved in the Cisco SD-WAN authentication process for ISR platforms?

TPMD

ZTP

TPC

SUDI

12. A Cisco SD-WAN customer has a requirement to calculate the SHA value for files as they pass through the device to see the returned disposition and determine if the file is good, unknown or malicious. The customer also wants to perform real-time traffic analysis and generate alerts when threats are detected.

Which two Cisco SD-WAN solutions meet the requirements? (Choose two.)

Cisco Trust Anchor Module

Cisco Threat Grid

Cisco Snort IPS

Cisco AMP

Cisco Secure Endpoint

13. A voice packet requires a latency of 50 msec.

Which policy is configured to ensure that a voice packet is always sent on the link with less than a 50 msec delay?

centralized control

localized data

localized control

centralized data

14. Which VPN connects the transport-side WAN Edge interface to the underlay/WAN network?

VPN 1

VPN 511

VPN 0

VPN 512

15. In which device state does the WAN edge router create control connections, but data tunnels are not created?

valid

backup

active

staging

16. A vEdge platform is sending VRRP advertisement messages every 10 seconds.

Which value configures the router back to the default timer?

2 seconds

3 seconds

1 second

5 seconds

17. Refer to exhibit.

An engineer is troubleshooting tear down of control connections even though a valid Certificate Serial Number is entered.

Which two actions resolve the Issue? (Choose two)

Enter a valid serial number on the controllers for a given device

Remove the duplicate IP in the network.

Enter a valid product ID (model) on the PNP portal

Match the serial number file between the controllers

Restore network reachability for the controller

18. Refer to the exhibit.

vManage logs are available for the past few months. A device name change deployed mistakenly at a critical site.

How is the device name change tracked by operation and design teams?

A)

Option A

Option B

Option C

Option D

19. Refer to the exhibit

An engineer is getting a CTORGNMMIS error on a controller connection.

Which action resolves this issue?

Configure a valid serial number on the WAN Edge

Configure a valid organization name

Configure a valid certificate on vSMART

Configure a valid product ID

20. Refer to the exhibit.

Which QoS treatment results from this configuration after the access list acl-guest is applied inbound on the vpn1 interface?

A UDP packet sourcing from 172.16.20.1 and destined to 172.16.10.1 is accepted

A TCP packet sourcing from 172.16.10.1 and destined to 172.16.20.1 is dropped

A UDP packet souring from 172.16.10.1 and destined to 172.16.20.1 is dropped.

A TCP packet sourcing from 172.16.20.1 and destined to 172.16.10.1 is accepted

Page 3 of 7

21. Which alarm setting is configured to monitor serious events that affect but do not shut down, the operation of a network function?

Minor

Major

Medium

Critical

22. An engineer is adding a tenant with location JD 306432373 in vManage.

What is the maximum number of alphanumeric characters that are accepted in the tenant name field?

128

256

23. How is TLOC defined?

It is represented by a unique identifier to specify a site in as SD-WAN architecture.

It specifies a Cisco SD-WAN overlay in a multitenant vSMART deployment.

It is a unique collection of GRE or iPsec encapsulation, link color, and system IP address.

It is represented by group of QoS policies applied to a WAN Edge router.

24. Refer to the exhibit.

A network administrator is configuring OMP in vManage to advertise all the paths for the same prefix from a site that has two WAN Edge devices Each WAN Edge device is connected to three ISPs and two private MPLS transports.

What is the minimum value for 'Number of Paths advertised per Prefix" that should be configured?

25. Which two metrics must a cloud Edge router use to pick the optimal path for a SaaS

application reachable via a gateway site? (Choose two.)

HTTP loss and latency metrics to the SaaS application

ICMP loss and latency metrics to the SaaS application

BFD loss and latency metrics to the gateway site

BFD loss and latency metrics to the SaaS application

HTTP loss and latency metrics to the gateway site

26. Refer to the exhibit.

Which configuration stops Netconf CLI logging on WAN Edge devices during migration?

Option A

Option B

Option C

Option D

27. Which destination UDP port is used by WAN Edge router to make a DTLS connection with vBond Orchestrator?

12343

12345

12346

12347

28. Which combination of platforms are managed by vManage?

ISR4321, ASR1001, ENCS, lSRv

ISR4351, ASR1002HX, vEdge2000, vEdge Cloud

ISR4321, ASR1001, Nexus, ENCS

lSR435l, ASRl009, vEdge2000, CSR1000v

29. On which device is a service FW address configured to Insert firewall service at the hub?

vEdge at the branch

vSmart at the hub

vEdge at the hub

vSmart at the branch

30. Refer to the exhibit.

Which configuration sets up direct Internet access for VPN 1?

Option A

Option B

Option C

Page 4 of 7

31. DRAG DROP

Drag and drop the functions from the left onto the correct templates on the right.

32. Which two WAN Edge devices should be deployed in a cloud? (Choose two.)

vEdge 5000v

ASR 1000v

CSR 1000v

vEdge 100wm

vEdge cloud

33. DRAG DROP

Drag and drop the BFD parameters from the left onto the BFD configurations on the right.

34. An engineer is troubleshooting a certificate issue on vEdge.

Which command is used to verify the validity of the certificates?

show control local-properties

show control summary

show certificate installed

show certificate status

35. Which configuration step is taken on vManage after WAN Edge list is uploaded?

Send the list to controllers

Enable the ZTP process

Verify the device certificate

Set the device as valid

36. Which secure tunnel type should be used to connect one WAN Edge router to other WAN Edge routers?

TLS

DTLS

SSL VPN

IPsec

37. Refer to the exhibit.

The ge0/0 interface connects to a 30-MB link. A network administrator wants to always have 10 MB available for high priority traffic. When lower-priority traffic busts exceed 20 MB. Traffic should be redirected to the second WAN interface ge0/1.

Which set of configurations accomplishes this task?

A)

Option A

Option B

Option C

Option D

38. Which routing protocol is used to exchange control plane information between vSmart controllers and WAN Edge routers in the Cisco SD-WAN secure extensible network?

BGP

OSPF

BFD

OMP

39. When a WAN Edge device joins the SD-WAN overlay, which Cisco SD-WAN components orchestrates the connection between the WAN Edge device and a vSmart controller?

vManage

vBond

OMP

APIC-EM

40. An engineer is configuring a WAN Edge router for DIA based on matching QoS parameters.

Which two actions accomplish this task? (Choose two.)

Apply a QoS map policy.

Configure a control policy.

Configure a centralized data policy.

Configure NAT on the transport interface.

Apply a data policy on WAN interface.

Page 5 of 7

41. How does the replicator role function in cisco SD-WAN?

WAN Edge devices advertise the rendezvous point to all the receivers through the underlay network.

vSmart Controllers advertise the rendezvous point to all the receivers through the overlay network.

WAN Edge devices advertise the rendezvous point to all receivers through the overlay network.

vSmart Controllers advertise the rendezvous point to all the receivers through the underlay network.

42. An engineer wants to change the configuration of the certificate authorization mode from manual to automated.

Which GUI selection will accomplish this?

Maintenance > Security

Configuration > Certificates

Administration > Settings

Tools > Operational Commands

43. How is the scalability of the vManage increased in Cisco SD-WAN Fabric?

Increase licensing on the vManage

Deploy multiple vManage controllers in a cluster

Deploy more than one vManage controllers on different physical server.

Increase the bandwidth of the WAN link connected to the vManage

44. Which component of the Cisco SD-WAN secure extensible network provides a single pane of glass approach to network monitoring and configuration?

APIC-EM

vSmart

vManage

vBond

45. Refer to the exhibit.

Which two configurations are needed to get the WAN Edges registered with the controllers when certificates are used? (Choose two)

Generate a CSR manually within vManage server

Generate a CSR manually on the WAN Edge

Request a certificate manually from the Enterprise CA server

Install the certificate received from the CA server manually on the WAN Edge

Install the certificate received from the CA server manually on the vManage

46. Which two features does the application firewall provide? (Choose two.)

classification of 1400+ layer 7 applications

blocks traffic by application or application-family

numbered sequences of match-action pairs

classification of 1000+ layer 4 applications

application match parameters

47. When software is upgraded on a vManage NMS, which two image-adding options store images in a local vManage software repository? (Choose two.)

To be downloaded over a SMTP connection

To be downloaded over a SNMP connection

To be downloaded over an out-of-band connection

To be downloaded over a control plane connection

To be downloaded over an ICMP connection

48. A network administrator is bringing up one WAN Edge for branch connectivity.

Which types of tunnels form when the WAN edge router connects to the SD-WAN fabric?

DTLS or TLS tunnel with vBond controller and IPsec tunnel with vManage controller.

DTLS or TLS tunnel with vBond controller and IPsec tunnel with other WAN Edge routers.

DTLS or TLS tunnel with vSmart controller and IPsec tunnel with other Edge routers.

DTLS or TLS tunnel with vSmart controller and IPsec tunnel with vBond controller.

49. Which logs verify when a device was upgraded?

Audit

ACL

SNMP

50. Which configuration allows users to reach YouTube from a local Internet breakout?

A)

Option A

Option B

Option C

Option D

Page 6 of 7

51. Refer to the exhibit.

The network team must configure branch B WAN Edge device 103 to establish dynamic full-mesh IPsec tunnels between all colors with branches over MPLS and Internet circuits.

The branch ts configured with:

Which configuration meets the requirement?

A)

Option A

Option B

Option C

Option D

52. In which VPN is the NAT operation on an outgoing interface configured for direct Interne! access?

512

53. DRAG DROP

Drag and drop the policies from the left onto the correct policy types on the right.

54. What is an attribute of TLOC’?

encryption

local preference

tag

service

55. Which device in the SD- WAN solution receives and categorizes event reports, and generates alarms?

WAN Edge routers

vSmart controllers

vManage NMS

vBond controllers

56. Refer to the exhibit.

The control connection is failing.

Which action resolves the issue?

import vSmart in vManager

Validate the certificates authenticity on vSmart

Upload the WAN Edge list on vManage.

Restore the reachability to the vSmart

57. An engineer is configuring a list that matches all IP prefixes with lengths from /1 to /16 in a centralized control policy.

Which list accomplishes this task?

0.0.0.0/1 le 16

0.0.0.0/0 ge 1

0.0.0.0/0 le l6

0.0.0.0/16 ge 1

58. An engineer is configuring a data policy for packets that must be captured through the policy.

Which command accomplishes this task?

policy > data-policy > vpn-list > sequence > default-action > drop

policy > data-policy > vpn-list > sequence > action

policy > data-policy > vpn-list > sequence > default-action > accept

policy > data-policy > vpn-list > sequence > match

59. Refer to the exhibit.

Which configuration value is used to change the administrative distance of iBGP routes to 20?

Configure internal Routes Distance to 20

Configure Propagate AS Path to off

Configure Local Distance to 20

Configure External routes distance 20

60. An engineer is configuring a centralized policy to influence network route advertisement.

Which controller delivers this policy to the fabric?

vSmart

vManage

WAN Edge

vBond

Page 7 of 7

61. For data plane resiliency, what does the Cisco SD-WAN software implement?

BFD

establishing affinity between vSmart controllers and WAN Edge routers

multiple vBond orchestrators

OMP

62. Which set of elements are verified by the controller to confirm the identity of edge devices?

certificates, organization name and serial number of the device

organization name serial number and system IP of the device

certificates, organization name, and vBond domain

certificates, system IP, and vBond domain

Cisco 300-415 ENSDWI Exam Material has been Updated

Cisco 300-415 ENSDWI Exam Material has been Updated

Share this post

Leave a Reply Cancel reply

Related Posts