Cisco CCNP Enterprise 300-415 Questions & Answers

• Question 271:

  A large retail organization decided to move some of the branch applications to the AWS cloud. How does the network architect extend the in-house Cisco SD-WAN branch to cloud network into AWS?

  A. Create virtual WAN Edge devices Cloud through the AWS online software store

  B. Create virtual instances of vSmart Cloud through the AWS online software store

  C. Create GRE tunnels to AWS from each branch over the Internet

  D. Install the AWS Cloud Router in the main data center and provide the connectivity from each branch

  Correct Answer: A

  With Cloud OnRamp for IaaS, vManage will automatically deploy SD-WAN edge virtual routers in a transit VPC, acting as virtual aggregation routers. https://www.cisco.com/c/en/us/td/docs/solutions/CVD/SDWAN/Cisco_Cloud_onRamp_for_IaaS_AWS_Version2.html#_Toc54023359

• Question 272:

  What is an advantage of using auto mode versus static mode of power allocation when an access point is connected o a PoE switch port?

  A. It detects the device is a powered device

  B. All four pairs of the cable are used

  C. Power policing is enabled at the same time

  D. The default level is used for the access point

  Correct Answer: D

  

  https://www.cisco.com/en/US/docs/switches/lan/catalyst3850/software/release/3.2_0_se/m ultibook/configuration_guide/b_consolidated_config_guide_3850_chapter_011010.html

• Question 273:

  A network administrator is configuring VRRP to avoid a traffic black hole when the transport side of the network is down on the master device. What must be configured to get the fastest failover to standby?

  A. lower timer interval

  B. prefix-list tracking

  C. higher group ID number

  D. OMP tracking

  Correct Answer: B

• Question 274:

  In a Cisco SD-WAN network, which component is responsible for distributing route and policy information via the OMP?

  A. vManage

  B. vSmart Controler

  C. vBond Orchestrator

  D. WAN Edge Router

  Correct Answer: B

• Question 275:

  For data plane resiliency, what does the Cisco SD-WAN software implement?

  A. BFD

  B. establishing affinity between vSmart controllers and WAN Edge routers

  C. multiple vBond orchestrators

  D. OMP

  Correct Answer: A

  For data plane resilience, the Cisco SD-WAN software implements standard protocol mechanisms, specifically BFD, which runs on the secure IPsec tunnels between WAN Edge routers.

• Question 276:

  Refer to the exhibit.

  

  An administrator is configuring a policy in addition to an existing hub-and-spoke policy for two sites that should directly communicate with each other. How is this policy configured?

  A. hub-and-spoke

  B. mesh

  C. import existing topology

  D. custom control (route and TLOC)

  Correct Answer: D

  https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/policies/vedge/policies-book/controlpolicies.html#id_107219

• Question 277:

  An engineer is configuring a data policy for packets that must be captured through the policy. Which command accomplishes this task?

  A. policy > data-policy > vpn-list > sequence > default-action > drop

  B. policy > data-policy > vpn-list > sequence > action

  C. policy > data-policy > vpn-list > sequence > default-action > accept

  D. policy > data-policy > vpn-list > sequence > match

  Correct Answer: B

  https://www.cisco.com/c/dam/en/us/td/docs/routers/sdwan/configuration/config-18-4.pdf#page=357

• Question 278:

  Which controller is excluded from the process of checking against the authorized, allowed list?

  A. vBond

  B. PnP

  C. vSmart

  D. vManage

  Correct Answer: A

• Question 279:

  Refer to the exhibit.

  

  Which shaping-rate does the engineer use to shape traffic at 9 Mbps?

  A. 9

  B. 9000

  C. 90000

  D. 9000000

  Correct Answer: B

  https://www.cisco.com/c/en/us/td/docs/routers/sdwan/command/sdwan-cr-book/config-cmd.html#wp4217152133

• Question 280:

  Refer to the exhibit.

  

  

  An engineer is troubleshooting an issue where vManage and vSmart nave a problem establishing a connection to vBond. Which action fixes the issue?

  A. Reconfigure the vbond command on the vBond as vbond 150.5.1.3 local

  B. Configure the tunnel interface on all three controllers with a color of transport

  C. Remove the encapsulation ipsec command under the tunnel interface of vBond.

  D. Configure encapsulation as IPsec under the tunnel interface of vManage and vSmart

  Correct Answer: A