Question 1

Which two actions are necessary to set the Controller Certificate Authorization mode to indicate a root certificate? (Choose two)

Options :

A : Select the Controller Certificate Authorization mode that is recommended by Cisco

B : Change the organization name of the Cisco SO-WAN fabric.

C : Upload an SSL certificate to vManape,

D : Select a private certificate signing authority instead of a public certificate signing authority

E : Select a validity period from the drop-down menu

Answer: C,D

Question 2

When VPNs are grouped to create destination zone in Zone-Based Firewall, how many zones can a single VPN be part of?

Options :

A : two

B : four

C : one

D : three

Answer: C

Question 3

Which protocol is used between redundant vSmart controllers to establish a permanent communication channel?

Options :

A : IPsec

B : HTTPs

C : DTLS

D : SSL

Answer: C

Question 4

An engineer is configuring a data policy for packets that must be captured through the policy. Which command accomplishes this task?

Options :

A : policy > data-policy > vpn-list > sequence > default-action > drop

B : policy > data-policy > vpn-list > sequence > action

C : policy > data-policy > vpn-list > sequence > default-action > accept

D : policy > data-policy > vpn-list > sequence > match

Answer: B

Question 5

In a Cisco SD-WAN architecture, what is the role of the WAN Edge?

Options :

A : It provides orchestration to assist in automatic provisioning of WAN Edge routers and overlay

B : It is the management plane responsible for centralized configuration and monitoring

C : It is the control plane that builds and maintains network topology

D : It is the data plane that is responsible for forwarding traffic

Answer: D

Smartly Prepare Exam with Free Online 300-415 Practice Test