Cisco CCNP Enterprise 300-415 Questions & Answers

• Question 151:

  Which protocol detects path status (up/down), measures loss/latency/jitter, and measures the quality of the IPsec tunnel MTU?

  A. DTLS

  B. BFD

  C. OMP

  D. IP-SLA

  Correct Answer: B

  Bidirectional Forwarding Detection (BFD) runs via the DTLS session between the remote site and the regional hub. BFD is a detection protocol that provides fast forwarding path failure detection times between two adjacent routers. It is used in SD-WAN to determine path liveliness (up/down) and quality (loss/latency/jitter and IPsec tunnel MTU).

• Question 152:

  The Cisco SD-WAN engineer is configuring service chaining for a next-generation firewall located at the headquarters. Which configuration creates the service?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: B

• Question 153:

  Which component of the Cisco SD-WAN network assures that only valid customer nodes are participating in the overlay network?

  A. vBond

  B. vManage

  C. vSmart D. WAN Edge

  Correct Answer: A

  Cisco vBond Orchestrator orchestrates the initial control connection between Cisco vSmart Controllers and edge routers. It creates DTLS tunnels to the Cisco vSmart Controllers and edge routers to authenticate each node that is requesting control plane connectivity. This authentication behavior assures that only valid customer nodes can participate.

• Question 154:

  How many vManage NMSs should be installed in each domain to achieve scalability and redundancy?

  A. two clusters

  B. two instances

  C. two or more in a cluster

  D. three or more in a cluster

  Correct Answer: D

  A highly available Cisco SD-WAN network contains three or more vManage NMSs in each domain. This scenario is referred to as a cluster of vManage NMSs, and each vManage NMS in a cluster is referred to as a vManage instance. Each vManage instance or device in a cluster can manage approximately 2000 devices, so a cluster of three vManage devices can manage up to 6000 devices. The vManage devices automatically load-balances the devices that they manage. With three devices, the vManage cluster remains operational if one of the devices in that cluster fail.

• Question 155:

  What are the two components of centralized policy deployment in vManage? (Choose two.)

  A. policy definition

  B. lists

  C. QoS map

  D. policy-based routing

  E. route policy

  Correct Answer: AB

• Question 156:

  Which component is responsible for creating and maintaining the secure DTLS/TLS connection on the vSmart controller?

  A. vdaemon

  B. OMP

  C. SNMP

  D. NETCONF

  Correct Answer: A

  A Cisco SD-WAN daemon running on each vSmart controller and router creates and maintains the secure DTLS or TLS connections between the devices. This daemon is called vdaemon.

• Question 157:

  Refer to the exhibit.

  

  The SD-WAN network is configured with a default full-mesh topology. An engineer wants Barcelona and Paris to communicate to each other through the London site using a control policy. Which control policy configuration accomplishes the task?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: A

• Question 158:

  Refer to the exhibit.

  

  An enterprise network is connected with an ISP network on an 80 Mbps bandwidth link. The network operation team observes 100 Mbps traffic on the 1 Gig-ISP link during peak hours.

  Which configuration provides bandwidth control to avoid traffic congestion during peak hours?

  A. policy-map SHAPE_MAP class class-default

  shape average 800000000

  !

  Interface gigabltethernet 0/1

  descritpion ***TO ISP***

  Ip address 10.0.20.5 255.255.255.0

  service-policy output SHAPE_MAP

  B. policy-map CUS_PMAP class CUS_CMAP police 800000000 300000

  !

  interface gigabitethernet 0/0

  descritpion *** TO ISP rack B446:A218:G263***

  ip address 10.0.20.1 255.255.255.0

  service-policy input CUS_PMAP

  C. policy-map SHAPE_MAP class class-default shape average 800000000

  !

  interface gigabitethernet 0/1

  description ***TO iG***

  ip address 10.0.20.5 255.255.255.0

  service-policy output SHAPE_MAP

  D. policy-map CUS_PMAP class CUS_CMAP police 800000000 300000

  !

  interface gigabitethernet 0/0

  description *** TO SW ***

  ip address 10.0.10.5 255.255.255.0

  service-policy input CUS PMAPd

  Correct Answer: A

• Question 159:

  An engineer builds a three-node vManage cluster and then realizes that multiple nodes are unnecessary for the size of the company. How should the engineer revert the setup to a single vManage?

  A. Use the cluster conversion utility to convert to standalone vManage.

  B. Restore vManage from the backup VM snapshot.

  C. Leave the cluster as is and point to one vManage.

  D. Remove two nodes from the three-node vManage cluster.

  Correct Answer: D

  Reference: https://sdwan-docs.cisco.com/Product_Documentation/vManage_Help/Release_18.1/Administration/Cluster_Management

• Question 160:

  Which platform cannot provide IPS and URL filtering capabilities?

  A. Cisco CSR 1000V

  B. Cisco ISR 1000

  C. Cisco ISR 4000

  D. Cisco Catalyst 8300

  Correct Answer: B

  https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/security/ios-xe-17/security-book-xe/security-overview.html