Cisco CCNP Enterprise 300-415 Questions & Answers

• Question 241:

  Refer to the exhibit.

  

  Which command allows traffic through the IPsec tunnel configured in VPN 0?

  A. service netsvc1 vpn1

  B. service netsvc1 address 1.1.1.1

  C. service FW address 1.1.1.1

  D. service local

  Correct Answer: B

  Reference: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/policies/vedge-20-x/policies-book/service-chaining.html

• Question 242:

  Refer to the exhibit.

  

  Which configuration value is used to change the administrative distance of iBGP routes to 20?

  A. Configure Internal Routes Distance to 10.

  B. Configure Propagate AS Path to off.

  C. Configure Local Routes Distance to 20.

  D. Configure External Routes Distance to 20.

  Correct Answer: C

  Reference: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/routing/vEdge-20-x/routing-book/m-unicast-routing.html

• Question 243:

  How is multicast routing enabled on devices in the Cisco SD-WAN overlay network?

  A. The WAN Edge routers originate multicast service routes to the vSmart controller via OMP, which then forwards joins for requested multicast groups based on IGMP v2 or v3 toward the source or PIM-RP as specified in the original PIM join message.

  B. The WAN Edge routers originate multicast service routes to the vSmart controller via OMP, which then forwards joins for requested multicast groups based on IGMP v1 or v2 toward the source or PIM-RP as specified in the original PIM join message.

  C. The vSmart controller originates multicast service routes to the WAN Edge routers via OMP, which then forwards joins for requested multicast groups based on IGMP v1 or v2 toward the source or PIM-RP as specified in the original PIM join message.

  D. The vSmart controller originates multicast service routes to the WAN Edge routers via OMP, which then forwards joins for requested multicast groups based on IGMP v2 or v3 toward the source or PIM-RP as specified in the original PIM join message.

  Correct Answer: A

  Reference: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/routing/ios-xe-17/routing-book-xe/m-multicast-routing.html

• Question 244:

  An engineer is configuring a shaping rate of 1 Mbps on the WAN link of a WAN Edge router. Which configuration accomplishes this task?

  

  A.

  

  B. C. D.

  Correct Answer: D

  vEdge1(config)#

  vEdge1(config)# vpn 1

  vEdge1(config-vpn-1)# int ge0/3

  vEdge1(config-interface-ge0/3)# shaping-rate ?

  Description: Shaping rate, in kbps

  Possible completions:

  <1ge interfaces: [0..1000000]kbps; 10ge interfaces: [0..10000000]kbps>

  vEdge1(config-interface-ge0/3)# shaping-rate

  Reference: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/command/sdwan-cr-book/config-cmd.html#wp4217152133

• Question 245:

  Refer to the exhibit.

  

  A network administrator is setting the queueing value for voice traffic for one of the WAN Edge routers using vManager GUI. Which queue value be set to accomplish this task?

  A. 0

  B. 1

  C. 2

  D. 3

  Correct Answer: A

  Reference: https://www.cisco.com/c/en/us/support/docs/routers/vedge-router/213408-implement-qos-in-cisco-sd-wan.html

• Question 246:

  Refer to the exhibit.

  

  Which configuration sets up direct Internet access for VPN 1?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: C

• Question 247:

  An enterprise has several sites with multiple VPNs that are isolated from each other. A new requirement came where users in VPN 73 must be able to talk to users in VPN 50. Which configuration meets this requirement?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: A

  Reference: https://www.ciscolive.com/c/dam/r/ciscolive/latam/docs/2018/pdf/BRKCRS-2186.pdf

• Question 248:

  An engineer must use data prefixes to configure centralized data policies using the vManage policy configuration wizard. What is the first step to accomplish this task?

  A. Configure network topology.

  B. Apply policies to sites and VPNs.

  C. Configure traffic rules.

  D. Create groups of interest.

  Correct Answer: D

  Reference: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/policies/vedge/policies-book/data-policies.html#id_107211

• Question 249:

  Refer to the exhibit.

  

  The Cisco SD-WAN network is configured with a default full-mesh topology. Islamabad HQ and Islamabad WAN Edges must be used as the hub sites. Hub sites MPLS TLOC must be preferred when forwarding FTP traffic based on a configured SLA class list. Which policy configuration does the network engineer use to call the SLA class and set the preferred color to MPLS?

  A. Centralized Policy, Traffic Policy

  B. Centralized Policy, Topology

  C. Localized Policy, Forwarding Class

  D. Localized Policy, Route Policy

  Correct Answer: A

  Reference: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/policies/ios-xe-17/policies-book-xe/centralized-policy.html#Cisco_Concept.dita_d31f22cb-f54f-41df-966a-0ae1ca3c398a

• Question 250:

  Which third-party Enterprise CA server must be used for a cloud-based vSmart controller?

  A. RootCert

  B. VeriSign

  C. Microsoft

  D. RADIUS

  Correct Answer: A

  Reference: https://www.nterone.com/articles/cisco-sdwan-viptela-everything-you-wanted-to-know-about-certificates-deployment-but-were-afraid-to-ask