Cisco CCNP Enterprise 300-415 Questions & Answers

• Question 101:

  What are the two functions of vSmart? (Choose two.)

  A. It ensures that valid WAN Edge routers can build the control plane connectivity.

  B. It validates that the WAN Edge trying to join the overlay is authorized to join.

  C. It orchestrates connectivity between WAN Edge routers using policies to create network topology.

  D. It uses TLOCs to uniquely identify the circuit interface to control plane and data plane information.

  E. It builds control plane connections with WAN Edge routers using TLS or DTLS.

  Correct Answer: CE

• Question 102:

  Which service VPN must be reachable from all WAN Edge devices and the controllers?

  A. VPN0

  B. VPN10

  C. VPN215

  D. VPN512

  Correct Answer: B

  In a Cisco SD-WAN deployment, the Control Plane VPN (often referred to as the "Transport VPN" or "Management VPN") with VLAN 10 must be reachable from all WAN Edge devices and the controllers. This Control Plane VPN with VLAN 10 is a critical component of the SD-WAN architecture responsible for carrying control plane traffic and facilitating communication between WAN Edge devices (vEdge routers) and the central SD-WAN controllers, including vSmart controllers and vManage.

• Question 103:

  Which type of connection is created between a host VNet and a transit VNet when configuring Cloud OnRamp for lease?

  A. GRE tunnel

  B. Azure peer link

  C. IPsec turtle

  D. Azure private endpoint

  Correct Answer: C

  Reference: https://www.cisco.com/c/en/us/td/docs/solutions/CVD/SDWAN/cisco-sdwan-cloud-onramp-iaas-azure-deploy-guide.html

• Question 104:

  Which VPN must be present on at least one interface to install Cisco vManage and integrate it with WAN Edge devices in an overlay network site ID:S0123T4E56F78?

  A. VPN 512

  B. any VPN number selected

  C. services VPN range 0-511

  D. VPN 0

  Correct Answer: D

  Cisco vManage is a centralized management platform for Cisco SD-WAN. It uses VPN 0, also known as the transport VPN, to communicate with WAN Edge devices. Therefore, VPN 0 must be present on at least one interface of the vManage VM in order to install it and integrate it with WAN Edge devices.

• Question 105:

  Which protocol is used by the REST API to communicate with network devices in the Cisco SD-WAN network?

  A. HTTP

  B. SSL

  C. IPsec

  D. SSH

  Correct Answer: A

  A REST API is a web service that adheres to the REST, or Representational State Transfer, architecture. The REST architecture uses a stateless, client–server, cacheable communications protocol. The Cisco SD-WAN vManage NMS web server uses HTTP and its secure counterpart, HTTPS, as the communications protocol. REST applications communicate over HTTP or HTTPS using standard HTTP methods to make calls between network devices.

• Question 106:

  An administrator modifies an application-aware routing policy to support newly deployed file servers. File transfers must be sent over the Internet-bound transports first and only use MPLS-bound transports as a backup. This policy is configured:

  

  Which configuration sequence meets the requirements?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: B

  You are not able to include both the strict option and backup-sla-preferred-color.

  The strict option drops traffic immediately when the preferred-color tunnel is no longer available.

  The backup-sla-preferred-color {color} allows traffic to be forwarded to a secondary WAN tunnel.

• Question 107:

  An organization wants to discover, monitor, and track the applications running on the WAN Edge device on the LAN. Which configuration achieves the goal?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: A

  app-visibility - Enable application visibility so that a vEdge router can monitor and track the applications running on the LAN (on vEdge routers only)."

• Question 108:

  Which control policy assigned to branches in the out direction establishes a strict hub-and-spoke topology for VPN2?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: A

• Question 109:

  An engineer must configure egress QoS for voice traffic. Which queue must the engineer configure on the WAN Edge router to accomplish the task?

  A. queue 0

  B. queue 1

  C. queue 3

  D. queues 7

  Correct Answer: A

  Queue 0 is reserved for Low Latency Traffic or (LLQ) in other words voice traffic. Queues 1-7 are available for data traffic.

• Question 110:

  How must the application-aware enterprise firewall policies be applied within the same WAN Edge router?

  A. within zone pair

  B. within and between zones

  C. between two VPN tunnels

  D. between two VRFs

  Correct Answer: B

  Zones in this context refer to logical groupings of network interfaces or subnets on the WAN Edge router. By applying firewall policies within a zone, you control the traffic within that zone, and by applying policies between zones, you can control the traffic that flows between different zones. This allows for fine-grained control over network traffic and security.