Cisco CCNP Enterprise 300-415 Questions & Answers

• Question 131:

  DRAG DROP

  Drag and drop the vManage policy configuration procedures from the left onto the correct definitions on the right.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/policies/vedge/policies-book/data-policies.html

• Question 132:

  A customer has 1 to 100 service VPNs and wants to restrict outbound updates for VPN1. Which control policy configuration restricts these updates?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: C

• Question 133:

  Which two vRoute attributes should be matched or set in vSmart policies and modified by data policies? (Choose two.)

  A. VPN

  B. preference

  C. site ID

  D. origin

  E. TLOC

  Correct Answer: AE

• Question 134:

  What is the default value for the number of paths advertised per prefix in the OMP feature template?

  A. 4

  B. 8

  C. 12

  D. 16

  Correct Answer: A

  By default, vSmart is configured to advertise only four paths for a given prefix. Therefore, it must compare all available routes for this prefix and select the best four that will be sent out to all WAN edge routers. This is done using the Overlay Management Protocol Best-Path Algorithm.

• Question 135:

  Refer to the exhibit.

  

  An engineer must block FTP traffic coming in from a particular Service VPN on a WAN Edge device. Which set of steps achieves this goal?

  A. Create a localized policy and add it to the interface feature template.

  B. Create a localized policy, add it to VPN template, and add an ACL to the interface feature template.

  C. Create a prefix list, add it to the localized policy, and add it to the interface feature template.

  D. Create a localized policy, add it to the device template, and add an ACL to the interface feature template.

  Correct Answer: D

• Question 136:

  Which color type is assigned when a TLOC is configured behind NAT?

  A. MPLS

  B. private

  C. blue

  D. public

  Correct Answer: D

  PUBLIC COLORS

  The public colors are 3g, biz-internet, blue, bronze, custom1, custom2, custom3, default, gold, green, lte, public-internet, red, and silver.

  They are intended to be used for public networks or in places where you will use public IP addressing of the transport IP endpoints, either natively or through NAT.

• Question 137:

  An enterprise deployed a Cisco SD-WAN solution with hub-and-spoke topology using MPLS as the preferred network over the Internet. A network engineer must implement an application-aware routing policy to allow ICMP traffic to be load-balanced over both the available links. Which configuration meets the requirement?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: A

  sla-class sla-class-name preferred-color colors - To set multiple tunnels to use when data traffic matches an SLA class, include the preferred-color option, specifying two or more tunnel colors. Traffic is load-balanced across all tunnels. If no tunnel matches the SLA, data traffic is sent through any available tunnel. In this sense, color preference is considered to be a loose matching, not a strict matching, because data traffic is always forwarded, whether a tunnel of the preferred color is available or not. When no tunnel matches the SLA, you can choose how to handle the data traffic:

• Question 138:

  What is the OMP graceful restart default value on vSmart controllers and WAN Edge routers?

  A. 21,600 seconds

  B. 43,200 seconds

  C. 86,400 seconds

  D. 604,800 seconds

  Correct Answer: B

  OMP graceful restart is enabled by default on Cisco vSmart Controllers and Cisco SD-WAN devices. OMP graceful restart has a timer that tells the OMP peer how long to retain the cached advertised routes. When this timer expires, the cached routes are considered to be no longer valid, and the OMP peer flushes them from its route table.

  The default timer is 43,200 seconds (12 hours), and the timer range is 1 through 604,800 seconds (7 days). To modify the default timer value:

• Question 139:

  Refer to the exhibit.

  

  vManage and vBond have an issue establishing a connection to vSmart. Which two actions does the administrator take to fix the issue? (Choose two.)

  A. Reconfigure the vSmart from CLI with the proper Hostname and System IP.

  B. Manually resync vManage and vBond.

  C. Install the certificate received from the certificate server.

  D. Delete and re-add vSmart. Click Generate and validate CSR.

  E. Request a certificate from the certificate server based on the CSR for the vSmart.

  Correct Answer: CE

• Question 140:

  Refer to the exhibit.

  

  vManage and vBond have an issue establishing a connection to each other. Which configuration resolves the issue?

  A. Reconfigure the timezone on vBond to Europe/London.

  B. Configure vManage with the vBond address as 172.16.1.33.

  C. Configure tunnel interface under interface ge0/0 of vBond.

  D. Configure the Site-ID for vBond to 1.

  Correct Answer: B