Question 73 of 80 from exam 300-415-ENSDWI: Implementing Cisco SD-WAN Solutions

Question 73 of 80 from exam 300-415-ENSDWI: Implementing Cisco SD-WAN Solutions

Question

When the VPN membership policy is being controlled at the vSmart controller, which policy disallows VPN 1 at sites 20 and 30? A.

apply-policy
site-list 20-30
vpn-membership disallow-vpn 1
!
!
policy
lists
site-list 20-30
site-id 20
site-id 30
!
vpn-list VPN 1
vpn 10
vpn 20
!
!
vpn-membership disallow-vpn 1
sequence 10
match
vpn-list VPN 1
!
action reject
!
!
default-action accept

B.

policy
lists

site-list 20-30
site-id 20
site-id 30
!
prefix-list drop-list
ip-prefix 10.200.1.0/24
!
!
control-policy drop-unwanted-routes
sequence 10
match route
prefix-list drop-list
!
action reject
!
!
default-action accept

C.

apply-policy
site-list 20-30
vpn-membership disallow-vpn1
!
!
policy
lists
site-list 20-30
site-id 20
site-id 30
!
!
vpn-membership disallow-vpn1
sequence 10
match vpn-id 1
action reject
!
!
default-action accept

D.

policy
lists

site-list BP-Sites
site-id 10
site-id 20
vpn-list All-BPs
vpn 100
vpn 101
vpn-list Enterprise-BP
vpn 200
control-policy import-BPs-to-Enterprise
sequence 10
match route
vpn-list All-BPs
1
action accept
export-to vpn-list Enterprise-BP
!
!
!
default-action accept

Explanations