Cisco Implementing Cisco SD-WAN Solutions - 300-415 Exam Practice Test
A large retail organization decided to move some of the branch applications to the AWS cloud.
How does the network architect extend the in-house Cisco SD-WAN branch to cloud network into AWS?
How does the network architect extend the in-house Cisco SD-WAN branch to cloud network into AWS?
Correct Answer: C
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
Which type of policy must be applied on a WAN Edge application-aware firewall to control traffic between two or more VPNs?
Correct Answer: C
Vote an answer
Which two metrics must a cloud Edge router use to pick the optimal path for a SaaS application reachable via a gateway site? (Choose two.)
Correct Answer: C,E
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
An engineer wants to track tunnel characteristics within a SLA-based policy for convergence.
Which policy configuration will achieve this goal?
Which policy configuration will achieve this goal?
Correct Answer: A
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
An organization wants to use the cisco SD-WAN regionalized service-chaining feature to optimize cost and user experience with application in the network, which allows branch routers to analyze and steer traffic toward the required network function. Which feature meets this requirement?
Correct Answer: D
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
Which configuration change allows direct internet access at the branch site for YouTube traffic?
Correct Answer: A
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
Drag and Drop Question
Drag and drop the code snippets from the bottom onto the boxes in the configuration to prevent ICMP packets from the internet circuit from reaching users in VPN10 at site 101. Not all options are used.


Drag and drop the code snippets from the bottom onto the boxes in the configuration to prevent ICMP packets from the internet circuit from reaching users in VPN10 at site 101. Not all options are used.


Correct Answer:

Explanation:

To prevent ICMP (protocol 1) packets from reaching VPN10 users at site 101 from the internet, the data policy must explicitly match protocol 1 (ICMP), match the source IP subnet, and drop such packets. The default-action accept ensures that other traffic is not affected.
Which two requirements must be met for DNS inspection when integrating with cisco umbrella?
(Choose two)
(Choose two)
Correct Answer: B,D
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
Refer to the exhibit. Which command is needed to prevent end users from sending data traffic through CSR101?


Correct Answer: B
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
Refer to the exhibit. A Cisco SD-WAN network carries traffic for several departments and over
1200 users with several applications at site A and site B branches over the MPLS1 circuit. An engineer is provisioning a higher bandwidth on-demand metro circuit as a backup connection.
Which two configurations must the engineer apply to implement the on-demand tunnels? (Choose two.)

1200 users with several applications at site A and site B branches over the MPLS1 circuit. An engineer is provisioning a higher bandwidth on-demand metro circuit as a backup connection.
Which two configurations must the engineer apply to implement the on-demand tunnels? (Choose two.)

Correct Answer: C,E
Vote an answer
A network engineer is advertising the EIGRP learned route to Overlay Management Protocol (OMP) in the SD-WAN network. Which configuration accomplishes this task?
Correct Answer: D
Vote an answer
At which layer does the application-aware firewall block applications on a WAN Edge?
Correct Answer: D
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
A network engineer sets tags in OMP for routes that were originated in the Service VPN. Which monitoring tab must be used to verify tags on the next hop?
Correct Answer: C
Vote an answer