Exam 300-415 topic 1 question 100 discussion

C https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/segmentation/vEdge-20-x/segmentation-book/segmentation.html

C is correct.

C is correct. vSmart-1# config Entering configuration mode terminal vSmart-1(config)# policy vpn-membership dissallow-vpn-1 vSmart-1(config-vpn-membership-dissallow-vpn-1)# sequence 10 vSmart-1(config-sequence-10)# match vSmart-1(config-match)# ? Possible completions: vpn VPN ID vpn-list Name of VPN list ---

Guys, C is the right answer because, vpn-id was an older option available in Cisco SD-WAN which now has been removed.

cant be A because the VPN list that matches VPN 10 and 20 is being rejected. the default action is accept so, it is accepting anything but 10 and 20

A is the most appropriate answer among the given choices, even if it has the wrong VPNs of 10 & 20 instead of 1 (whether a typo or intentional, I can't tell)

C: there are 2 ways to configure the vpn membership. With a policy as shown in C, or by identifying them in the same line as the sites under apply-policy like this "vSmart (config-apply-policy)# site-list 20-30 vpn-membership 1. The doc is not wrong, its just the original way of configuring the policy and identifying the vpn group of interest. Which is VPN1 in this scenario. https://www.cisco.com/c/dam/en/us/td/docs/routers/sdwan/configuration/config-17-2.pdf#

A is the correct answer

Dbla provided doc.

C isn't correct either. match vpn-id 1 is not a correct configuration command. The correct one would be match vpn 1. Unfortunately even the config guide contains this faulty line (https://www.cisco.com/c/dam/en/us/td/docs/routers/sdwan/configuration/config-17-2.pdf#page=190), but vedge will drop an error if you try it. For the exam, however, C should be marked.

correct.