300-440 試験問題を無料オンラインアクセス

Refer to the exhibit. An engineer successfully brings up the site-to-site VPN tunnel between the remote office and the AWS virtual private gateway, and the site-to-site routing works correctly. However, the end-to-end ping between the office user PC and the AWS EC2 instance is not working. Which two actions diagnose the loss of connectivity? (Choose two.)

• A.Check the network security group rules on the host VNET.
• B.Check the security group rules for the host VPC.
• C.On the AWS private virtual gateway, configure the IPsec SA to allow ping packets.
• D.On the Cisco VPN router, configure the IPsec SA to allow ping packets.
• E.Check the IPsec SA counters.

Which feature is unique to Cisco SD-WAN IPsec tunnels compared to native IPsec VPN tunnels?

• A.end-to-end encryption
• B.real-time dynamic path selection
• C.tunneling protocols
• D.authentication mechanisms

Refer to the exhibit.

Refer to the exhibits. An engineer troubleshoots a Cisco SD-WAN connectivity issue between an on-premises data center WAN Edge and a public cloud provider WAN Edge. The engineer discovers that BFD is Dapping on vEdge1. What is the problem?

• A.The remote Edgedevice failed to respond BFD keepalives.
• B.The control plane deleted the BFD session.
• C.The remote Edge device has a duplicate IP address.
• D.The remote Edge device BFD is down.

Drag and drop the commands from the left onto the purposes on the right to identify issues on a Cisco IOS XE SD-WAN device.

正解：

Explanation:

Display the time and process information of the device, as well as CPU, memory, and disk usage data. = show sdwan system status1 Validate the configured zone-based firewall. = show policy-firewall config1 Display information about application-aware routing policy matched packet counts on the Cisco IOS XE SD-WAN devices. = show sdwan policy app-route-policy-filter1 View the security information that is configured for IPsec tunnel connections. = show sdwan security-info The commands used to identify issues on a Cisco IOS XE SD-WAN device are as follows1:
show sdwan system status: This command is used to display the time and process information of the device, as well as CPU, memory, and disk usage data1.
show policy-firewall config: This command is used to validate the configured zone-based firewall1.
show sdwan policy app-route-policy-filter: This command is used to display information about application-aware routing policy matched packet counts on the Cisco IOS XE SD-WAN devices1.
show sdwan security-info: This command is used to view the security information that is configured for IPsec tunnel connections1.
References :=
Cisco IOS XE Catalyst SD-WAN Qualified Command Reference
Cisco Catalyst SD-WAN Command Reference
Cisco Catalyst SD-WAN Systems and Interfaces Configuration Guide, Cisco IOS XE SD-WAN Tunnel Interface Commands - Cisco

An engineer must configure an IPsec tunnel to the cloud VPN gateway. Which Two actions send traffic into the tunnel? (Choose two.)

• A.Configure a static route.
• B.Configure policy-based routing.
• C.Configure access lists that match the interesting user traffic.
• D.Configure an IPsec profile and match the remote peer IP address.
• E.Configure a local policy in Cisco vManage.