Cisco CCNP Enterprise 300-415 Questions & Answers

• Question 281:

  An engineer wants to automate the onboarding process for a WAN Edge router with vManage. Which command will accomplish this?

  A. request vedge-cloud activate chassis-number serial

  B. request vedge-cloud activate chassis-number token

  C. request vedge-cloud activate serial token

  D. request vedge-cloud activate chassis-number organization

  Correct Answer: B

  request vedge-cloud activate Activate a vEdge Cloud router in the overlay network (on vEdge Cloud routers only). Before you can use this command, you must configure the organization name and the vBond orchestrator's IP address or DNS name on the vEdge Cloud router.

  Command Hierarchy

  request vedge-cloud activate chassis-number number token token

• Question 282:

  An administrator must configure an ACL for traffic coming in from the service-side VPN on a specific WAN device with circuit ID 391897770. Which policy must be used to configure this ACL?

  A. local data policy

  B. central data policy

  C. app-aware policy

  D. central control policy

  Correct Answer: A

  Localized data policy controls the flow of data traffic into and out of interfaces and interface queues on a vEdge router. This type of data policy is provisioned locally, on the vEdge router, using access lists. It allows you to classify traffic and map different classes to different queues. It also allows you to mirror traffic and to police the rate at which data traffic is transmitted and received. https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/policies/vedge/policies-book/control-policies.html#c_Localized_Control_Policy_12226.xm

• Question 283:

  Where on vManage does an engineer find the details of control node failure?

  A. Alarms

  B. Events

  C. Audit log

  D. Network

  Correct Answer: A

  https://www.cisco.com/c/en/us/td/docs/routers/sdwan/vManage_How-Tos/vmanage-howto-book/m-troubleshooting.html

• Question 284:

  Refer to the exhibit.

  

  The network administrator has configured a centralized topology policy that results in the displayed routing table at a branch office.

  Which two configurations are verified by the output? [Choose two.)

  A. The routing table is for the transport VPN.

  B. The default route is learned via OMP.

  C. This routing table is from a cEdge router.

  D. The default route is configured locally.

  E. The configured policy is adding a route tag of 300 to learned routes.

  Correct Answer: BC

• Question 285:

  Which TCP Optimization feature is used by WAN Edge to prevent unnecessary retransmissions and large initial TCP window sizes to maximize throughput and achieve a better quality?

  A. SEQ

  B. SYN

  C. RTT

  D. SACK

  Correct Answer: D

• Question 286:

  Which component is responsible for routing protocols such as BGP and OSPF in a Cisco SD-WAN solution?

  A. vSmart Controller

  B. vBond Orchestrator

  C. vManage

  D. WAN Edge Router

  Correct Answer: D

  WAN Edge router – This router is responsible for running routing protocols, such as BGP and OSPF, to exchange routing information and make intelligent routing decisions. This enables efficient data forwarding within the SD-WAN network.

• Question 287:

  Refer to the exhibit.

  

  Which two configurations are needed to get the WAN Edges registered with the controllers when certificates are used? (Choose two)

  A. Generate a CSR manually within vManage server

  B. Generate a CSR manually on the WAN Edge

  C. Request a certificate manually from the Enterprise CA server

  D. Install the certificate received from the CA server manually on the WAN Edge

  E. Install the certificate received from the CA server manually on the vManage

  Correct Answer: AE

  https://www.cisco.com/c/dam/en/us/td/docs/solutions/CVD/SDWAN/cisco-sd-wan-certificates-deploy-2020aug.pdf

• Question 288:

  Refer to the exhibit.

  

  Which configuration configures IPsec tunnels in active and standby?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: C

• Question 289:

  An engineer wants to change the configuration of the certificate authorization mode from manual to automated. Which GUI selection will accomplish this?

  A. Maintenance > Security

  B. Configuration > Certificates

  C. Administration > Settings

  D. Tools > Operational Commands

  Correct Answer: C

  To change the configuration of the certificate authorization mode from manual to automated in Cisco SD-WAN, you would typically select:

  Administration > Settings

  The "Administration > Settings" section of the GUI typically includes options for configuring various settings, including certificate authorization modes.

• Question 290:

  Which two products are used to deploy Cisco WAN Edge Router virtual platforms? (Choose two.)

  A. HP ProLiant DL360 Generatton10 running HP-UX

  B. Cisco ENCS 5000 Series

  C. Sun SPARC Node running AIX

  D. Cisco UCS

  E. Sun Enterprise M4000 Server running Sun Solans

  Correct Answer: AD

  https://www.cisco.com/c/en/us/products/collateral/routers/5400-enterprise-network-compute-system/datasheet-c78-738512.html