Cisco CCNP Enterprise 300-415 Questions & Answers

• Question 201:

  Refer to the exhibit.

  

  vManage and vSmart have an issue establishing a connection to vBond. Which configuration resolves the issue?

  A. Configure the tunnel interface on all three controllers with a color of transport.

  B. Change the timezone on the vSmart to Europe/London.

  C. Configure the (11.1.1.X/24) IP addresses on the elhO interfaces on vManage and vSmart.

  D. Reconfigure the system-ip parameter on vSmart to 11.1.1.2.

  Correct Answer: D

• Question 202:

  What prohibits deleting a VNF image from the software repository?

  A. if the image is stored by vManage

  B. if the image is referenced by a service chain

  C. if the image is uploaded by a WAN Edge device

  D. if the image is included in a configured policy

  Correct Answer: B

  If a VNF image is referenced by a service chain, it cannot be deleted from the software repository because it is actively in use by the network's service chain configuration. Removing such an image could disrupt the operation of the service chain, and therefore, the system typically prohibits its deletion

• Question 203:

  Which two metrics must a cloud Edge router use to pick the optimal path for a SaaS application reachable via a gateway site? (Choose two.)

  A. HTTP loss and latency metrics to the SaaS application

  B. BFD loss and latency metrics to the gateway site

  C. ICMP loss and latency metrics to the SaaS application

  D. HTTP loss and latency metrics to the gateway site

  E. BFD loss and latency metrics to the SaaS application

  Correct Answer: AB

  By design the cloud-edge router looks at the loss and latency on the paths of the gateway sites and calculates vQoe scores for each SaaS application and path based on that information. The VEdge router picks the optimal path via these methods. https://www.cisco.com/c/dam/en/us/td/docs/solutions/CVD/SDWAN/CVD-SD-WAN-Cloud-onRamp-for-SaaS-Deployment-Guide-2018JUL.pdf

• Question 204:

  Which policy tracks path characteristics such as loss, latency, and jitter in vManage?

  A. VPN

  B. control

  C. app-route

  D. data

  Correct Answer: C

  https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/policies/ios-xe- 17/policies-book-xe/application-aware-routing.html

• Question 205:

  Refer to the exhibit.

  

  The Cisco SD-WAN network is configured with a default full-mesh topology. An engineer wants Paris WAN Edge to use the Internet HOC as the preferred TLOC for MSN Messenger and AOL Messenger traffic. Which policy achieves this goal?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: C

• Question 206:

  Which issue triggers the Cisco Umbrella resolver to toward DNS requests to the intelligent proxy?

  A. A domain is nonexistent.

  B. A domain is block-listed.

  C. A domain is locally reachable.

  D. A domain is grey-listed.

  Correct Answer: D

• Question 207:

  An enterprise needs DIA on some of its branches with a common location ID: A042:B49C:D02E::72.

  Which WAN Edge configuration meets the requirement?

  A. vpn 1 interface ge0/1 ip address 172.16.0.1/24 vpn 512 ip route 0.0.0.0/0 vpn 0

  B. vpn 1 ip route 0.0.0.0/0 vpn 1 interface ge0/0 ip address 172.16.0.1/24 nat

  C. vpn 0 interface ge0/0 ip address 172.16.0.1/24 nat vpn 1 ip route 0.0.0.0/0 vpn 0

  D. vpn 0 ip route 0.0.0.0/0 vpn 0 vpn 1 interface ge0/1 ip address 172.16.0.1/24 nat

  Correct Answer: C

  Enable NAT on the transport interface. VPN 0

  Create static route in the service VPN to direct traffic out of the NATed transport.

• Question 208:

  Company E wants to deploy Cisco SD-WAN with controllers in AWS The company's existing WAN is on private MPLS without Internet access to controllers m AWS An Internet circuit is added to a site in addition to the existing MPLS circuit. Which interface template establishes BFD neighbors over both transports?

  

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: B

• Question 209:

  Which policy is configured to ensure that a voice packet is always sent on the link with less than a 50 msec delay?

  A. localized data policy

  B. localized control policy

  C. centralized data policy

  D. centralized control policy

  Correct Answer: C

• Question 210:

  An organization requires the use of integrated preventative engines, exploit protection, and the most updated and advanced signature-based antivirus with sandboxing and threat intelligence to stop malicious attachments before they reach users and get executed.

  Which Cisco SD-WAN solution meets the requirements?

  A. Cisco Trust Anchor module

  B. URL filtering and Umbrella DNS security

  C. Cisco AMP and Threat Grid

  D. Snort IPS

  Correct Answer: C

  Cisco AMP and Threat Grid provide advanced threat protection capabilities, including antivirus, sandboxing, and threat intelligence. These technologies work together to detect and prevent a wide range of security threats, including malicious attachments, before they can impact users and the network.

  https://blogs.cisco.com/networking/enabling-amp-in-cisco-sd-wan