Exam 300-415 topic 1 question 111 discussion

C. Actions - Whether to accept or reject (and drop) matching packets, and how to process matching packets.

You have to MATCH before you can ACTION.

I believe is B, because the question is " packets that must be captured through the policy", my understand of the question is that a specific set of packets needs to be captured, and Match would be need it to define which packets will be captured

I believe its C as its clearly shown here https://www.cisco.com/c/dam/en/us/td/docs/routers/sdwan/configuration/config-18-4.pdf#page=358

In my optic, it is C.

The answer is C. Logging matching traffic will be under actions. vSmart(config-sequence-number)# action (accept | drop) [count counter-name] [log] [tcp-optimization]

capture the packet. Answer B

How about log packets after the match condition is satisfied? It will come under C, right? https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/policies/vedge/policies-book/data-policies.html

I would choose B because you always have the default action by default.

vSmart-1(config-vpn-list-1)# sequence 1 vSmart-1(config-sequence-1)# ? Possible completions: action Accept or drop match Match criteria

B is correct if you will be explicitly matching on something, also C is correct if you match "any"

i looked at this from JTPRO https://www.ciscolive.com/c/dam/r/ciscolive/us/docs/2020/pdf/DGTL-BRKRST-2791.pdf#page=72 B does seem to be the best answer or am i reading this incorect

A centralized data policy based on source and destination prefixes and on headers in IP packets consists of a series of numbered (ordered) sequences of match-action pair that are evaluated in order, from lowest sequence number to highest sequence number. When a packet matches one of the match conditions, the associated action is taken and policy evaluation on that packets stops. Keep this in mind as you design your policies to ensure that the desired actions are taken on the items subject to policy. "match-action" Meaning ? Action or match ? LOL

I think its B. Because match is always come first after sequence sequence > match > action > default action

answer = B Look here under "Data Policy Structure" . Page 72 https://www.ciscolive.com/c/dam/r/ciscolive/us/docs/2020/pdf/DGTL-BRKRST-2791.pdf#page=72

i will choose b

I would choose B. Capturing is not an action type and here it means, in my opinion, packets that are interesting for the use case.