Cisco CCNP Enterprise 300-415 Questions & Answers

• Question 161:

  Which protocol is used to propagate multicast join requests over the Cisco SD-WAN fabric?

  A. Auto-RP

  B. ARP

  C. OMP

  D. IGMP

  Correct Answer: D

  Cisco SD-WAN overlay multicast routing supports the Internet Group Management Protocol (IGMP) version 2 (defined in RFC 2236). Cisco vEdge devices use IGMP to process receiver membership reports for the hosts in a particular VPN and to determine, for a given group, whether multicast traffic should be forwarded and state should be maintained. vEdge routers listen for both IGMPv1 and IGMPv2 group membership reports.

• Question 162:

  Which policy configuration must be used to classify traffic as it enters the branch WAN Edge router to be put into the desired output queue?

  A. Policy

  class-map

  class p1 queue 2

  B. Policy access-list QoS sequence 1 match

  destination-ip 10.0.0.0/8

  !

  action accept

  class p1

  C. Policy

  qos-scheduler QOS

  class p1

  bandwidth-percent 20

  buffer-percent 20

  drops red-drop

  D. qos-map Q_Map qos-scheduler p1

  Correct Answer: A

  Reference: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/qos/ios-xe-17/qos-book-xe/forwarding-qos.html

• Question 163:

  What happens if the intelligent proxy is unreachable in the Cisco SD-WAN network?

  A. The block-listed domains are unresolved.

  B. The Cisco Umbrella Connector locally resolves the DNS request.

  C. The grey-listed domains are unresolved.

  D. The Cisco Umbrella Connector temporarily redirects HTTPS traffic.

  Correct Answer: C

  One potential limitation in using intelligent proxy unicast IP addresses is the probability of the datacenter going down when the client is trying to send the traffic to the intelligent proxy unicast IP address. This is a scenario where a client has completed DNS resolution for a domain which falls under grey-listed domain and client's HTTP/(S) traffic is being sent to one of the obtained intelligent proxy unicast IP address. If that datacenter is down, then the client has no way of knowing it.

  The Umbrella Connector does not act on the HTTP and HTTPS traffic. The connector does not redirect any web traffic or alter any HTTP/(S) packets.

• Question 164:

  Which issue triggers the Cisco Umbrella resolver to forward DNS requests to the intelligent proxy?

  A. A domain is locally reachable.

  B. A domain is block-listed.

  C. A domain is nonexistent.

  D. A domain is grey-listed.

  Correct Answer: D

  Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_data_umbrbran/configuration/xe-16/sec-data-umbrella-branch-xe-16-book/sec-data-umbrella-bran.pdf

• Question 165:

  Which device should be configured with the service chain IP address to route intersite traffic through a firewall?

  A. vSmart

  B. spoke WAN Edge

  C. hub WAN Edge

  D. firewall

  Correct Answer: C

  https://sdwan-docs.cisco.com/Product_Documentation/Software_Features/SD-WAN_Release_16.3/07Policy_Applications/02Service_Chaining/Service_Chaining_Configuration_Examples

• Question 166:

  What is a restriction when configuring a tunnel interface?

  A. Up to six tunnel interfaces are configurable on a vSmart.

  B. It is manually assigned when using vManage feature templates.

  C. It must be configured for the interface under all VPNs.

  D. Up to six tunnel interfaces are configurable on a WAN Edge.

  Correct Answer: B

• Question 167:

  An engineer must configure local redundancy on a site. Which configuration accomplishes the task?

  A. vpn 0tloc-extension interface interface-name

  B. interface interface-name tloc-extension

  C. tloc-extension interface interface-name

  D. vpn 0interface interface-name tloc-extension interface-name

  Correct Answer: D

• Question 168:

  An engineer provisions a WAN Edge router. Which command should be used from the WAN Edge router to activate it with vManage?

  A. request vedge-cloud activate chassis-number serial

  B. request vedge-cloud activate chassis-number token

  C. request vedge-cloud activate serial token

  D. request vedge-cloud activate chassis-number organization

  Correct Answer: B

  request vedge-cloud activate

  Activate a vEdge Cloud router in the overlay network (on vEdge Cloud routers only). Before you can use this command, you must configure the organization name and the vBond orchestrator's IP address or DNS name on the vEdge Cloud router.

  Command Hierarchy

  request vedge-cloud activate chassis-number number token token https://www.cisco.com/c/en/us/td/docs/routers/sdwan/command/sdwan-cr-book/operational-cmd.html#wp1526475327

• Question 169:

  An engineer configures an application-aware routing policy for a group of sites. The locations depend on public and private transports. The policy does not work as expected when one of the transports does not perform properly. This policy is configured:

  

  Which configuration completes the policy so that it works for all locations?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: B

  Within the configured policy Realtime is being tagged with DSCP 46 which is voice and Transactional data is attached to DSCP 34 which is interactive video. Therefore, both of these 2 clases should have a lower amount of loss and jitter.

• Question 170:

  Which routes are similar to the IP route advertisements when the routing information of WAN Edge routers is learned from the local site and local routing protocols?

  A. BGP

  B. OMP

  C. TLOC

  D. service

  Correct Answer: B

  Reference: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/routing/vEdge-20-x/routing-book/m-unicast-routing.html#:~:text=On%20Cisco%20vSmart%20Controllers,them%20from%20standard%20IP%20routes