Cisco CCNP Enterprise 300-415 Questions & Answers

• Question 141:

  Refer to the exhibit.

  

  An engineer is troubleshooting a control connection issue on a WAN Edge device that shows socket errors. The packet capture shows some ICMP packets dropped between the two devices. Which action resolves the issue?

  A. Remove IP duplication in the network and configure a unique IP address.

  B. Recover vBond or wait for the controller to reload, which could be caused by a reset.

  C. Recover the vManage controller that is down in a high availability cluster.

  D. Change the system IP or restart the WAN Edge if the system IP is changed.

  Correct Answer: A

• Question 142:

  Which Cisco SD-WAN component centralizes policy configuration?

  A. Cisco DNA Center

  B. vBond

  C. WAN Edge

  D. vSmart

  Correct Answer: D

  In the Cisco SD-WAN network architecture, centralized control policy is handled by the Cisco vSmart Controller, which effectively is the routing engine of the network. The Cisco vSmart Controller is the centralized manager of network-wide routes, maintaining a primary route table for these routes.

• Question 143:

  Which cloud-based component in Cisco SD-WAN is responsible for establishing a secure connection to each WAN Edge router and distributes routes and policy information via OMP?

  A. vBond

  B. WAN Edge

  C. vManage

  D. vSmart

  Correct Answer: D

  vSmart SD-WAN Controller - This software-based component is responsible for the centralized control plane of the SD-WAN network. It maintains a secure connection to each WAN Edge router and distributes routes and policy information via the Overlay Management Protocol (OMP), acting as a route reflector

• Question 144:

  Refer to the exhibit.

  

  Cisco SD-WAN is deployed with controllers hosted in a data center. All branches have WAN Edge devices with dual connections to the data center: one via Internet and the other using MPLS. Three branches out of 20 have issues with their control connections on MPLS circuit. The local error refers to Control Connection Failure.

  Which action resolves the issue?

  A. Update the system IP on vManage and then resend it to the controllers.

  B. Rectify any issues with the underlay routing configuration.

  C. Match the TLOC color on the controllers and all WAN Edge devices.

  D. Math certificates for the DTLS connection and Root CA must be installed first on WAN Edge devices.

  Correct Answer: B

  DTLS Connection Failure (DCONFAIL)

  This is one of the common issues of control connectivity that does not come up. Probable causes include a firewall or some other connectivity issues.

  It could be that some or all packets are dropped/filtered somewhere. The example with larger ones is given intcpdump results here.

  1.

  The next hop (NH) router is not reachable.

  2.

  The default gateway is not installed in the Routing Information Base (RIB).

  3.

  The Datagram Transport Layer Security (DTLS) port is not open in the controllers.

• Question 145:

  Which storage format is used when vManage is deployed as a virtual machine on a KVM hypervisor?

  A. .iso

  B. .tgz

  C. .ova

  D. .qcow2

  Correct Answer: D

  Reference: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/sdwan-xe-gs-book/cisco-sd-wan-overlay-network-bringup.html

• Question 146:

  What must an engineer consider when deploying an SD-WAN on-premises architecture based on the ESXI hypervisor?

  A. Cisco must provision the backup and snapshots platform for the SD-WAN architecture.

  B. The IT team will be given access by Cisco to a vManage for configuration templates and policies configuration.

  C. The IT team is required to provision the SD-WAN controllers and is responsible for backups and disaster recovery implementation.

  D. The managed service provider must provision controllers with their appropriate certificates.

  Correct Answer: C

  The IT team is required to download the SD-WAN Orchestrator and use the necessary guides to complete your installation, including provisioning the correct environment, Disaster Recovery and Snapshots of the SD-WAN Controller VM for on prem.

• Question 147:

  Refer to the exhibit.

  

  Which NAT type must the engineer configure for the vEdge router to bring up the data plane tunnels?

  A. Use private color on the TLOC.

  B. Enable Full Cone NAT on the vEdge interface.

  C. Enable Symmetric NAT on the vEdge interface.

  D. Use public color on the TLOC.

  Correct Answer: D

• Question 148:

  What are the two prerequisites for a Cloud OnRamp for SaaS feature to show the accurate vQoE score? (Choose two.)

  A. internet exit in VPN0

  B. NAT in VPN 0

  C. Cloud OnRamp enabled on WAN Edge router

  D. static route tracker for SaaS application

  E. DNS in service VPN

  Correct Answer: AB

• Question 149:

  Which queue must an engineer configure for control and BFD traffic for convergence on a WAN Edge router?

  A. queue 0

  B. queue 1

  C. queue 2

  D. queue 7

  Correct Answer: A

  Each interface has eight queues on hardware vEdge routers, numbered from 0 to 7. Queue 0 is reserved and is used for both control traffic and low-latency queuing (LLQ) traffic. For LLQ, any class that is mapped to queue 0 must also be configured to use LLQ. All control traffic is transmitted. Queues 1 to 7 are available for data traffic.

• Question 150:

  Refer to the exhibit.

  

  A company requires a data traffic policy that uses the “mpls” and “biz-internet” colors for Google Apps if the SLA is met. A link with the “public-internet” color must be used if the other two links violate the data SLA. Which configuration meets these requirements?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: B