Cisco CCNP Enterprise 300-415 Questions & Answers

• Question 261:

  A customer must upgrade the Cisco SD-WAN devices and controllers from version 19.2 to version 20.3. The devices include WAN Edge Cloud, vManage, vSmart, and vBond. Which types of image files are needed for this upgrade?

  A. one file for vManage and one file for all other devices with extension .bin

  B. one file for vManage, one for vSmart, and one for vBond + WAN Edge Cloud with extension .bin

  C. one file for vManage and one file for all other devices with extension tar.gz

  D. one file for vManage, one for vSmart, and one for vBond + WAN Edge Cloud with extension tar.gz

  Correct Answer: D

  https://software.cisco.com/download/home/286320995/type/286321394/release/20.3.3.1

• Question 262:

  What is an attribute of TLOC?

  A. tag

  B. service

  C. local preference

  D. encryption

  Correct Answer: A

  Reference: https://sdwan-docs.cisco.com/Product_Documentation/Software_Features/SD-WAN_Release_17.1/06Policy_Basics/01Policy_Overview/01Viptela_Policy_Framework_Basics#:~:text=configured%20policy%20affects).-,TLOC% 20Attributes%20Used%20in%20Policies,address%2C%20color%2C%20and%20encapsulation

• Question 263:

  Company ABC has decided to deploy the controllers using the On-Prem method. How does the administrator upload the WAN Edge list to the vManage?

  A.

  

  B.

  

  C.

  

  D.

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: D

  https://sdwan-docs.cisco.com/Product_Documentation/vManage_Help/Release_18.3/Configuration/Devices

• Question 264:

  Which feature allows reachability to an organization's internally hosted applications for an active DNS security policy on a device?

  A. data policy with redirect

  B. local domain bypass

  C. DNSCrypt configuration

  D. DHCP option 6

  Correct Answer: B

  A local domain bypass allows reachability to an organization's internally hosted applications when an active DNS security policy is in place. It permits the device to bypass DNS security policies for specific domains or hosts, typically those that are hosted internally by the organization. This ensures that access to internal resources is not blocked or affected by DNS security policies.

  https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/security/ios-xe-16/security-book-xe/umbrella-integration.html

• Question 265:

  Which two requirements must be met for DNS inspection when integrating with Cisco Umbrella? (Choose two.)

  A. Attach security policy to the device template.

  B. Create and attach a System feature template with the Umbrella registration credentials.

  C. Register and configure the vManage public IP and serial number in the Umbrella portal.

  D. Upload the WAN Edge serial allow list to the Umbrella portal.

  E. Configure the Umbrella token on the vManage.

  Correct Answer: AE

  https://www.connection.com/~/media/pdfs/brands/c/cisco/security/cnxn-cisco-sd-wan-and-umbrella.pdf?la=en

• Question 266:

  An administrator is configuring the severity level on the vManage NMS for events that indicate that an action must be taken immediately. Which severity level must be configured?

  A. warning

  B. error

  C. critical

  D. alert

  Correct Answer: D

  Select the severity of the syslog message to save. The severity indicates the seriousness of the event that generated the

  1.

  message. priority can be one of the following:

  2.

  Emergency - System is unusable (corresponds to syslog severity 0).

  3.

  Alert -Action must be taken immediately (corresponds to syslog severity 1).

  4.

  Critical - Critical: A serious condition (corresponds to syslog severity 2).

  5.

  Error - An error condition that does not fully impair system usability (corresponds to syslog severity 3).

  6.

  Warning - A minor error condition (corresponds to syslog severity 4).

  7.

  Notice - A normal, but significant condition (corresponds to syslog severity 5).

  8.

  Informational - Routine condition (the default) (corresponds to syslog severity 6).

• Question 267:

  Which Cisco SD-WAN component facilitates the initial communication between WAN Edge devices to join the fabric?

  A. WAN Edge Router

  B. vSmart Controller

  C. vManage

  D. vBond Orchestrator

  Correct Answer: D

  Cisco vBond Orchestrator orchestrates the initial control connection between Cisco vSmart Controllers and edge routers.

• Question 268:

  Which policy blocks TLOCs from remotes and allows TLOCs from the data center to form hub-and-spoke peering?

  A. localized control policy

  B. localized data policy

  C. centralized data policy

  D. centralized control policy

  Correct Answer: C

  Centralized control policy applies to the network-wide routing of traffic by affecting the information that is stored in the vSmart controller's route table and that is advertised to the vEdge routers. The effects of centralized control policy are seen in how vEdge routers direct the overlay network's data traffic to its destination. The centralized control policy configuration itself remains on the vSmart controller and is never pushed to local routers.

  Centralized data policy applies to the flow of data traffic throughout the VPNs in the overlay network. These policies can permit and restrict access based either on a 6-tuple match (source and destination IP addresses and ports, DSCP fields, and protocol) or on VPN membership. These policies are pushed to the affected vEdge routers.

• Question 269:

  Refer to the exhibit.

  

  The tunnel interface configuration on both WAN Edge routers is:

  

  Which configuration for WAN Edge routers will connect to the Internet?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: C

  It's the only logical answer since the Interface IP and GW are in the same subnet

  https://sdwandocs.cisco.com/Product_Documentation/Software_Features/SDWAN_Release_16.3/02System_and_Interfaces/07Network_Interface_Configuration_Examples

• Question 270:

  Refer to the exhibit.

  

  An engineer is configuring service chaining. Which set of configurations is required for all traffic from Site ID 1 going toward Site ID 2 to get filtered through the firewall on the hub site?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: B

  https://sdwandocs.cisco.com/Product_Documentation/Software_Features/SDWAN_Release_16.3/07Policy_Applications/02Service_Chaining/Service_Chaining_Configuration_Examples