Cisco CCNP Enterprise 300-415 Questions & Answers

• Question 171:

  Which OMP route is selected if it was learned from the same Cisco SD-WAN device at location S4406T9E02F15?

  A. route with the lower origin metric

  B. route with the higher OMP route preference value

  C. route with the higher router ID

  D. route with the lower administrative distance

  Correct Answer: D

• Question 172:

  A Cisco SD-WAN customer is running BGP and wants to pass on the AS number to BGP speaking routers on the service side network via OMP. Which configuration accomplishes this goal?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: A

• Question 173:

  Which percentage of total memory or total CPU usage for a device is classified as normal in the WAN Edge Health pane?

  A. more than 80 percent usage

  B. more than 90 percent usage

  C. less than 70 percent usage

  D. between 70 to 90 percent usage

  Correct Answer: C

  Normal-Number of routers with memory, hardware, and CPU in normal state. Using less than 70% of total memory or total CPU is classified as normal.

  https://sdwan-docs.cisco.com/Product_Documentation/vManage_Help/Release_18.4/Dashboard/Dashboard

• Question 174:

  Which timer specifies how long the router keeps routing information in the cache after all OMP sessions are lost at location S4317T8E35F76?

  A. graceful restart timer

  B. advertisement interval

  C. EOR timer

  D. hold time

  Correct Answer: A

  OMP Graceful RestartGraceful restart for OMP allows the data plane in the Cisco SD-WAN overlay network to continue functioning if the control plane stops functioning or becomes unavailable. With graceful restart, if the Cisco vSmart controller in the network goes down, or if multiple Cisco vSmart controllers go down simultaneously, Cisco vEdge device can continue forwarding data traffic. They do this using the last known good information that they received from the Cisco vSmart controller. When a Cisco vSmart controller is again available, its DTLS connection to the device is re-established, and the device then receives updated, current network information from the Cisco vSmart controller. https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/routing/vEdge-20-x/routing-book/m-unicast-routing.html#concept_rjl_sc2_b3b

• Question 175:

  Which type of certificate is installed on vManage for a user to access vManage via a web browser?

  A. Controller Certificate

  B. Web Server Certificate

  C. SD-AVC Certificate

  D. WAN Edge Certificate

  Correct Answer: B

  Used for web access to the vManage. Cisco installs a self-signed certificate by default. A Self-signed certificate is a Secure Sockets Layer (SSL) certificate that is signed by its own creator.

  "Web Certificate - Used for web access to the vManage. Cisco installs a self-signed certificate by default. Controller Certificate - Used to build control connections between the controllers i.e. vManage, vBonds, vSmarts."

  https://www.cisco.com/c/en/us/support/docs/routers/sd-wan/217426-understand-the-web-certificate-for-vmana.html

• Question 176:

  Which OMP route is selected for equal OMP route preference values on WAN Edge routers?

  A. route with origin type of connected

  B. route with origin type of static

  C. route with lower TLOC preference value

  D. route with higher TLOC preference value

  Correct Answer: D

  https://www.cisco.com/c/en/us/support/docs/routers/sd-wan/217479-omp-best-path-selection-peculiarities-an.html

  1.

  Route Resolvability

  Next-hop TLOC is Reachable (data plane BFD session is here)

  2.

  Prefer highest route preference

  3.

  Prefer highest TLOC preference

  4.

  Prefer best origin code (Connected, Static, eBGP, EIGRP Internal, OSPF Intra, OSPF Inter, OSPF External, EIGRP External iBGP, Unknown/Unset

  5.

  Prefer OMP Route with lowest origin metric

  6.

  Route Source Preference

  On vSmart: prefer Edge router-sourced route over vSmart-sourced route

  7.

  Prefer route received from lowest System-IP

  8.

  Prefer route from highest Private TLOC IP-address originated from the same site-id

  9.

  outbound control policy

  10.

  send-path-limit

• Question 177:

  Refer to the exhibit.

  

  An enterprise decides to use the Cisco SD-WAN Cloud onRamp for SaaS feature and utilize HQ site Biz iNET to reach SaaS Cloud for branch C, currently reaching SaaS Cloud directly.

  Which role must be assigned to devices at both sites in vManage Cloud Express for this solution to work?

  A. Branch to be added as Client Sites and H Q as DIA.

  B. H Q to be added as Gateway and Branch as DIA.

  C. Branch to be added as DIA and H Q as Client Site.

  D. H Q to be added as Gateway and Branch as Client Site.

  Correct Answer: D

  https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/cloudonramp/ios-xe-17/cloud-onramp-book-xe/cor-saas.html

• Question 178:

  Which action is performed during the onboarding process when a WAN Edge router is connected to ZTP server ztp.viptela.com?

  A. The router is connected to WAN Edge Cloud Center.

  B. The router receives its vBond Orchestrator information.

  C. The router is synced with vSmart Controller via an IPsec tunnel.

  D. The router is connected to vSmart Controller via a DTLS/TLS tunnel.

  Correct Answer: B

  A: There is no such thing as WAN Edge Cloud Center

  B: Correct

  C: WAN Edge Never connects with IPSEC Tunnel to vSmart.

  D: WAN Edge establishes OMP and control connections (TLS / DTLS) after successful authentication from vBond. Vbond is first in line.

  During the Zero Touch Provisioning (ZTP) process, when a WAN Edge router is connected to the ZTP server (in this case, ztp.viptela.com), one of the primary actions performed is the router receiving its vBond Orchestrator information. This information is crucial for the router to establish initial connectivity with the SD-WAN network and begin the onboarding process.

• Question 179:

  What are two components of vSmart? (Choose two.)

  A. key reflection

  B. policy engine

  C. NAT traversal

  D. device template creation

  E. monitoring

  Correct Answer: AB

• Question 180:

  Which controller manages the orchestration plane of Cisco SD-WAN in a cloud deployment?

  A. Cisco DNA Center

  B. vSmart

  C. vBond

  D. vManage

  Correct Answer: C

  Cisco vBond resides in the orchestration plane. The vBond controller is largely responsible for the Zero-Touch Provisioning process as well as first-line authentication, control/management information distribution, and facilitating Network Address Translation (NAT) traversal.