Pass 300-415 Exam with Updated 300-415 Exam Dumps PDF 2022
300-415 Exam Dumps - Free Demo & 365 Day Updates
NEW QUESTION 54
What is a benefit of the application aware firewall feature in the Cisco SD-WAN solution?
- A. control policy enforcement
- B. application malware protection
- C. application visibility
- D. application monitoring
Answer: C
Explanation:
NEW QUESTION 55
Drag and drop the vManage policy configuration procedures from the left onto the correct definitions on the right.
Answer:
Explanation:
NEW QUESTION 56
Which Cisco SD-WAN WAN Edge platform supports LTE and Wi-Fi?
- A. ISR 1101
- B. ASR 1001
- C. vEdge 2000
- D. CSR 1000v
Answer: A
Explanation:
Section: Architecture
NEW QUESTION 57
When software is upgraded on a vManage NMS, which two image-adding options store images in a local vManage software repository? (Choose two.)
- A. To be downloaded over an ICMP connection
- B. To be downloaded over a SMTP connection
- C. To be downloaded over a control plane connection
- D. To be downloaded over a SNMP connection
- E. To be downloaded over an out-of-band connection
Answer: C,E
NEW QUESTION 58
Which value is verified in the certificates to confirm the identity of the physical WAN Edge device?
- A. Chassis-ID
- B. System-IP
- C. OTP
- D. Serial Number
Answer: D
Explanation:
https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/sdwan-xe-gs-book/manage-certificates.html
NEW QUESTION 59
Which pathway under Monitor > Network > Select Device is used to verify service insertion configuration?
- A. Events
- B. Real Time
- C. System Status
- D. ACL Logs
Answer: D
NEW QUESTION 60
Refer to the exhibit.
What is the 1.1.1.1 IP address?
- A. the controller AР-manager IP address
- B. the controller virtual interface IP address
- C. the lightweight AP IP address
- D. the wireless client IP address
- E. the controller management IP address
- F. the RADIUS server IP address
Answer: B
Explanation:
Web Authentication Process
This is what occurs when a user connects to a WLAN configured for web authentication:
The user opens a web browser and enters a URL, for example, http://www.cisco.com. The client sends out a DNS request for this URL to get the IP for the destination. The WLC bypasses the DNS request to the DNS server and the DNS server responds back with a DNS reply, which contains the IP address of the destination www.cisco.com. This, in turn, is forwarded to the wireless clients.
The client then tries to open a TCP connection with the destination IP address. It sends out a TCP SYN packet destined to the IP address of www.cisco.com.
The WLC has rules configured for the client and hence can act as a proxy for www.cisco.com. It sends back a TCP SYN-ACK packet to the client with source as the IP address of www.cisco.com. The client sends back a TCP ACK packet in order to complete the three way TCP handshake and the TCP connection is fully established.
The client sends an HTTP GET packet destined to www.cisco.com. The WLC intercepts this packet and sends it for redirection handling. The HTTP application gateway prepares a HTML body and sends it back as the reply to the HTTP GET requested by the client. This HTML makes the client go to the default webpage URL of the WLC, for example, http://<Virtual-Server-IP>/login.html.
The client closes the TCP connection with the IP address, for example, www.cisco.com.
Now the client wants to go to http://1.1.1.1/login.html. Therefore, the client tries to open a TCP connection with the virtual IP address of the WLC. It sends a TCP SYN packet for 1.1.1.1 to the WLC.
The WLC responds back with a TCP SYN-ACK and the client sends back a TCP ACK to the WLC in order to complete the handshake.
The client sends a HTTP GET for /login.html destined to 1.1.1.1 in order to request for the login page.
This request is allowed up to the Web Server of the WLC, and the server responds back with the default login page. The client receives the login page on the browser window where the user can go ahead and log in.
Reference: http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/69340-web-auth- config.html#backinfo
NEW QUESTION 61
Drag and drop the definitions from the left to the configuration on the right.
Answer:
Explanation:
NEW QUESTION 62
In Cisco SD-WAN, which protocol is used for control connections between Cisco SD-WAN devices?
- A. DTLS
- B. BGP
- C. OSPF
- D. OMP
Answer: D
Explanation:
Section: Management and Operations
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/security/vedge/security-book/ security-overview.html#:~:text=The%20Overlay%20Management%20Protocol%20is,described%20in%
20Overlay%20Routing%20Overview.
NEW QUESTION 63
Which two features does the application firewall provide? (Choose two.)
- A. classification of 1400+ layer 7 applications
- B. classification of 1000+ layer 4 applications
- C. blocks traffic by application or application-family
- D. numbered sequences of match-action pairs
- E. application match parameters
Answer: A,C
Explanation:
NEW QUESTION 64
Refer to the exhibit.
Which QoS treatment results from this configuration after the access list acl-guest is applied inbound on the vpn1 interface?
- A. A TCP packet sourcing from 172.16.10.1 and destined to 172.16.20.1 is dropped
- B. A UDP packet souring from 172.16.10.1 and destined to 172.16.20.1 is dropped.
- C. A UDP packet sourcing from 172.16.20.1 and destined to 172.16.10.1 is accepted
- D. A TCP packet sourcing from 172.16.20.1 and destined to 172.16.10.1 is accepted
Answer: A
NEW QUESTION 65
An engineer is configuring a centralized policy to influence network route advertisement. Which controller delivers this policy to the fabric?
- A. vBond
- B. WAN Edge
- C. vManage
- D. vSmart
Answer: D
Explanation:
NEW QUESTION 66
An engineer is configuring a data policy for packets that must be captured through the policy. Which command accomplishes this task?
- A. policy > data-policy > vpn-list > sequence > match
- B. policy > data-policy > vpn-list > sequence > default-action > accept
- C. policy > data-policy > vpn-list > sequence > default-action > drop
- D. policy > data-policy > vpn-list > sequence > action
Answer: D
Explanation:
https://www.cisco.com/c/dam/en/us/td/docs/routers/sdwan/configuration/config-18-4.pdf#page=357
NEW QUESTION 67
When redistribution is configured between OMP and BGP at two Data Center sites that have Direct Connection Interlink, which step avoids learning the same routes on WAN Edge routers of the DCs from LAN?
- A. Define different VRFs on both DCs
- B. Set OMP admin distance lower than BGP admin distance
- C. Set down-bit on Edge routers on DC1
- D. Set same overlay AS on both DC WAN Edge routers
Answer: A,D
Explanation:
Section: Router Deployment
NEW QUESTION 68
Refer to the exhibit.
Which configuration extends the INET interface on R1 to be used by R2 for control and data connections?
- A. Option B
- B. Option D
- C. Option C
- D. Option E
- E. Option A
Answer: D
NEW QUESTION 69
Which device information is required on PNP/ZTP to support the zero touch onboarding process?
- A. serial and chassis numbers
- B. public DNS entry
- C. interface IP address
- D. system IP address
Answer: A
Explanation:
Section: Router Deployment
Explanation/Reference: https://www.cisco.com/c/dam/en/us/td/docs/solutions/CVD/SDWAN/sd-wan-wan-edge-onboarding- deploy-guide-2020jan.pdf
NEW QUESTION 70
An administrator needs to configure SD-WAN to divert traffic from the company's private network to an ISP network. What action should be taken to accomplish this goal?
- A. configure the data policy
- B. configure the data security policy
- C. configure the control policy
- D. configure the application aware policy
Answer: A
NEW QUESTION 71
A network administrator is tasked to make sure that an OMP peer session is dosed after missing three consecutive keepalive messages in 3 minutes. Additionally, route updates must be sent every minute. If a WAN Edge router becomes unavailable, the peer must use last known information to forward packets for 12 hours. Which set of configuration commands accomplishes this task?
- A. Option A
- B. Option B
- C. Option D
- D. Option C
Answer: A
NEW QUESTION 72
An engineer wants to change the configuration of the certificate authorization mode from manual to automated. Which GUI selection will accomplish this?
- A. Tools > Operational Commands
- B. Administration > Settings
- C. Maintenance > Security
- D. Configuration > Certificates
Answer: D
NEW QUESTION 73
Which combination of platforms are managed by vManage?
- A. ISR4351, ASR1002HX, vEdge2000, vEdge Cloud
- B. lSR435l, ASRl009, vEdge2000, CSR1000v
- C. ISR4321, ASR1001, Nexus, ENCS
- D. ISR4321, ASR1001, ENCS, lSRv
Answer: D
Explanation:
Reference:
https://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise-networks/sd-wan/nb-06-sw-defined-wan-faq-cte-en.pdf
NEW QUESTION 74
Which type of route advertisement of OMP can be verified?
- A. Origin, TLOC, and service
- B. OMP, VPN. and origin
- C. Origin, TLOC, and VPN
- D. OMP, TLOC and service
Answer: D
NEW QUESTION 75
......
300-415 Dumps - Pass Your Certification Exam: https://www.braindumpquiz.com/300-415-exam-material.html
Free Sales Ending Soon - Use Real 300-415 PDF Questions: https://drive.google.com/open?id=1qTlE0iPfn9YgFhluA0yG5GQcikF8hn4H