Cisco CCNP Enterprise 300-415 Questions & Answers

• Question 221:

  An engineer is configuring a data policy for IPv4 prefixes for a single WAN Edge device on a site with multiple WAN Edge devices. How is this policy added using the policy configuration wizard?

  A. In vBond orchestrator, select the configure --> policies screen, select the localized policy tab, and click add policy.

  B. In vManage NMS, select the configure --> policies screen, select the localized policy tab, and click add policy.

  C. In vSmart controller, select the configure --> policies screen, select the localized policy tab, and click add policy.

  D. In vManage NMS, select the configure --> policies screen, select the centralized policy tab, and click add policy.

  Correct Answer: B

  vManage is the central management and orchestration platform for Cisco SD-WAN, and it provides a user-friendly interface for configuring policies. When creating a data policy specific to a WAN Edge device within a site, the "localized policy" tab is often the appropriate place to define site-specific policies.

• Question 222:

  An engineering team must prepare a traffic engineering policy where an MPLS circuit is preferred for traffic coming from the Admin VLAN. Internet should be used as a backup only. Which configuration fulfills this requirement?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: B

• Question 223:

  Refer to the exhibit. Which command-line configuration on a WAN Edge device achieves these results?

  

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: C

• Question 224:

  Which two criteria are supported to filter traffic on a Cisco Umbrella Cloud-delivered firewall? (Choose two.)

  A. geolocation

  B. site ID

  C. URL

  D. protocol

  E. tunnels

  Correct Answer: DE

  Reference: https://docs.umbrella.com/umbrella-user-guide/docs/add-a-firewall-policy

• Question 225:

  Refer to the exhibit. The engineering must assign community tags to 3 of its 74 critical server networks as soon as possible as they are advertised to BGP peers. These server networks must not be advertised outside AS.

  

  Which configuration fulfills this requirement?

  

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: C

• Question 226:

  WAN Edge routers are configured manually to use UDP port offset to use nondefault offset values when IPsec tunnels are created. What is the offset range?

  A. 1-19

  B. 0-18

  C. 0-19

  D. 1-18

  Correct Answer: C

  Reference: https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2020/pdf/R6BGArNQ/TECSEC-2355.pdf

• Question 227:

  A company must avoid downtime at the remote sites and data plane to continue forwarding traffic between WAN Edge devices if the branch router loses connectivity to its OMP peers. Which configuration meets the requirement?

  

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: A

• Question 228:

  Refer to the exhibit.

  

  An MPLS connection on R2 must extend to R1. Users behind R1 must have dual connectivity for data traffic. Which configuration provides R1 control connectivity over the MPLS connection?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: D

• Question 229:

  An engineer configures policing with a rate of 125 Bps and a burst rate of 8000 bits, as shown here:

  

  Which configuration completes this task?

  A. Configure 125 for rate and 1000 for burst.

  B. Configure 125 for rate and 8000 for burst.

  C. Configure 1000 for rate and 1000 for burst.

  D. Configure 1000 for rate and 64000 for burst.

  Correct Answer: C

  The required rate is 125 Bps= 1000 bps , and the required burst is 8000 bits = 1000 bytes.

• Question 230:

  A Cisco SD-WAN customer has a requirement to calculate the SHA value for files as they pass through the device to see the returned disposition and determine if the file is good, unknown, or malicious. The customer also wants to perform real-time traffic analysis and generate alerts when threats are detected. Which two Cisco SD-WAN solutions meet the requirements? (Choose two.)

  A. Cisco Threat Grid

  B. Cisco Trust Anchor Module

  C. Cisco AMP

  D. Cisco Secure Endpoint

  E. Cisco Snort IPS

  Correct Answer: CE

  Reference: https://www.cisco.com/c/en/us/support/docs/routers/xe-sd-wan-routers/217641-configure-sdwan-advanced-malware-protect.html https://content.cisco.com/chapter.sjs?uri=/searchable/chapter/content/en/us/td/docs/ios-xml/ios/sec_data_utd/configuration/xe-16/sec-data-utd-xe-16-6-book/snort-ips.html.xml