Cisco CCNP Enterprise 300-415 Questions & Answers

• Question 91:

  An engineer creates this data policy for DIA for VPN 10:

  

  Which policy sequence enables DIA for external networks?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: C

• Question 92:

  How many concurrent sessions does a vManager REST API have before it invalidates the least recently used session if the maximum concurrent session number is reached?

  A. 150

  B. 200

  C. 250

  D. 300

  Correct Answer: C

  In a Cisco SD-WAN environment, vManage REST API has a maximum concurrent session limit of 250. If this limit is reached, the least recently used session is invalidated.

• Question 93:

  How should the IP addresses be assigned for all members of a Cisco vManager cluster located in the same data center?

  A. in overlapping IPs

  B. in different subnets

  C. in the same subnet

  D. in each controller with a /32 subnet

  Correct Answer: C

  Guidelines for a Cisco Catalyst SD-WAN Manager Cluster

  The following guidelines apply to a Cisco SD-WAN Manager cluster:

  1.

  We recommend that all members of a Cisco SD-WAN Manager cluster be located in the same data center.

  2.

  We recommend that the IP addresses of all members of the Cisco SD-WAN Manager cluster be in the same subnet.

  Reference: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/sdwan-xe-gs-book/manage-cluster.html

• Question 94:

  Which two actions are necessary to set the Controller Certificate Authorization mode to indicate a root certificate? (Choose two.)

  A. Select a private certificate signing authority instead of a public certificate signing authority.

  B. Change the organization name of the Cisco SD-WAN fabric.

  C. Select the Controller Certificate Authorization mode that is recommended by Cisco.

  D. Upload an SSL certificate to vManage.

  E. Select a validity period from the drop-down menu.

  Correct Answer: AD

  Reference: https://www.cisco.com/c/en/us/td/docs/solutions/CVD/SDWAN/cisco-sdwan-controller-cert-deploy-guide.html

• Question 95:

  Which website allows access to visualize the geography screen from vManager using the internet?

  A. *.globalstreetmaps.org

  B. *.fullstreetmaps.org

  C. *.callstreetmaps.org

  D. *.openstreetmaps.org

  Correct Answer: D

• Question 96:

  How are custom application ports monitored in Cisco SD-WAN controllers?

  A. Customers add custom application ports in vAnalytics and vSmart.

  B. Cisco adds custom application ports in vAnalytis and vManage.

  C. Customers add custom application ports in vAnalytics and vManage.

  D. Cisco adds custom application ports in vAnalytics and vSmart.

  Correct Answer: C

  Custom Application Ports Created in VManage is activated immediately for application visibility functionality only (Monitoring Traffic).

• Question 97:

  Which two resource data types are used to collect information for monitoring using REST API in Cisco SD-WAN? (Choose two.)

  A. POST

  B. PUT

  C. scalar

  D. array

  E. DELETE

  Correct Answer: CD

  Scalar data types represent individual data values, while array data types represent collections of data values. These data types are commonly used in REST APIs to retrieve and manage information in the context of monitoring and managing network resources. Options A, B, and E (POST, PUT, DELETE) are HTTP methods, not resource data types.

• Question 98:

  Which attribute is used to tie all the controllers together by vManage?

  A. vManage system-ip

  B. region ID

  C. organization name

  D. secure device ID

  Correct Answer: C

• Question 99:

  Which REST API call checks the status of an action that is performed on a device?

  A. admin status

  B. troubleshoot status

  C. configuration status

  D. monitor status

  Correct Answer: D

  The REST API call that checks the status of an action performed on a device in a Cisco SD-WAN environment is typically referred to as a "monitor status" API call. This call is used to check the status of various operations or actions that have been initiated on the device and monitor their progress or completion.

• Question 100:

  How many vBond controllers must be installed when vManager is installed in a multitenancy environment for four tenants?

  A. One vBond controller is shared between the tenants.

  B. Multitenancy deployment requires three vBand controllers.

  C. Each tenant requires two vBond controllers for redundancy.

  D. Each tenant requires a dedicated vBond controller.

  Correct Answer: A

  In a multi-tenancy environment with four tenants in Cisco SD-WAN, you would typically deploy a single vBond orchestrator controller for all tenants. The vBond orchestrator is responsible for initial device authentication and secure connectivity establishment, and it acts as a central point for initial contact between WAN Edge devices and other SD-WAN components, such as the vSmart controllers and vManage.

  The number of vBond controllers is not necessarily determined by the number of tenants but by factors like network size, redundancy, and scale. In most deployments, a single vBond orchestrator can handle the needs of multiple tenants. Each tenant's devices communicate with the vBond orchestrator independently, and policies are used to isolate and manage each tenant's resources and traffic.