Cisco CCNP Enterprise 300-415 Questions & Answers

• Question 111:

  What are the two components of an application-aware firewall? (Choose two.)

  A. default action

  B. sequence

  C. zone pair

  D. lists

  E. firewall policy

  Correct Answer: CE

• Question 112:

  An engineer must configure the SD-WAN Edge router to identify DSCP 26 traffic coming from the router's local site and then change the DSCP value to DSCP 18 before sending it over to the SD-WAN fabric. What are the two ways to create the required configuration? (Choose two.)

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  E. Option E

  Correct Answer: CD

• Question 113:

  Which feature delivers traffic to the Cisco Umbrella SIG cloud from a Cisco SD-WAN domain?

  A. L2TPv3 tunnel

  B. IPsec tunnel

  C. local umbrella agent

  D. source NAT

  Correct Answer: B

  The Cisco Secure Internet Gateway relies on tunnels, more specifically IPSec tunnels from a WAN edge device to communicate to the Cisco Umbrella Secure Internet Gateway (SIG)

• Question 114:

  An engineer is applying QoS policy for the transport-side tunnel interfaces to enable scheduling and shaping for a WAN Edge cloud router. Which command accomplishes the task?

  A. cloud-qos-service-side

  B. qos-scheduler QOS_0

  C. rewrite-rule QOS-REQWRITE

  D. qos-map QOS

  Correct Answer: A

• Question 115:

  Which two actions must be taken to allow certain department to require firewall protection when interacting with data center networks without including other departments? (Choose two.)

  A. Use classification, policing, and marking

  B. Advertise to vSmart controllers.

  C. The regional hub advertises the availability of the firewall service.

  D. Apply data policies at vEdge.

  E. Deploy a service-chained firewall service per VPN.

  Correct Answer: CE

• Question 116:

  What are the components of zone configuration in an application-aware firewall?

  A. destination zone, interface zone, source zone, and zone pair

  B. source zone, interface zone, and zone pair

  C. destination zone, interface zone, and zone pair

  D. source zone, destination zone, and zone pair

  Correct Answer: D

• Question 117:

  Which topology type is supported in each noncore region in a Cisco SD-WAN Multi-Region fabric environment with three or more regions?

  A. any topology type

  B. full mesh and partial mesh

  C. hub and spoke

  D. full mesh

  Correct Answer: D

  Multi-Region Fabric provides the flexibility to use different network topologies in different regions. For example, region 1 can use a full mesh of Cisco SD-WAN tunnels, while region 2 can use a hub-and-spoke topology, and Region3 can use a full mesh topology with dynamic tunnels.

  Reference: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/mrf/mrf-guide/h-sd-wan-basics.pdf

• Question 118:

  DRAG DROP

  Drag and drop the components from the left onto the corresponding Cisco NFV infrastructure Building Blocks on the right. Not all options are used.

  Select and Place:

  

  Correct Answer:

  

• Question 119:

  DRAG DROP

  Drag and drop the BFD parameters from the left onto the BFD configurations on the right.

  Select and Place:

  

  Correct Answer:

  

  https://sdwandocs.cisco.com/Product_Documentation/vManage_Help/Release_18.2/Configuration/Templates/BFD

• Question 120:

  DRAG DROP

  Drag and drop the security terminologies from the left onto the PCI-compliant network features and devices on the right.

  Select and Place:

  

  Correct Answer: