Cisco CCNP Enterprise 300-415 Questions & Answers

• Question 301:

  Refer to exhibit.

  

  An engineer is troubleshooting tear down of control connections even though a valid CertificateSerialNumbre is entered. Which two actions resolve the Issue? (Choose two)

  A. Enter a valid serial number on the controllers for a given device

  B. Remove the duplicate IP in the network.

  C. Enter a valid product ID (model) on the PNP portal

  D. Match the serial number file between the controllers

  E. Restore network reachability for the controller

  Correct Answer: AC

• Question 302:

  DRAG DROP

  Drag and drop key features from the left onto the corresponding firewall type on the right.

  Select and Place:

  

  Correct Answer:

  

• Question 303:

  What is the first step for setting up traffic flows when enabling TLS Proxy in SD-WAN for security?

  A. The sender authenticates the devices and individual users, and the receiver verifies the signature by decrypting the message with the public key of the sender.

  B. Certificate authorities in TLS Proxy issue certificates for authentication to all entitles such as hosts, network devices, or users.

  C. When decryption policy is enabled for the flow, a client hello packet is received by Unified Threat Defense to define the decryption action.

  D. The TCP connection is established between the client and the proxy, and between the proxy and the server.

  Correct Answer: D

• Question 304:

  Which plane assists in the automatic onboarding of the SD-WAN routers into the SD-WAN overlay?

  A. Data

  B. Orchestration

  C. Management

  D. Control

  Correct Answer: B

  The Cisco Catalyst SD-WAN solution is comprised of separate orchestration, management, control, and data planes.

  1.

  The orchestration plane assists in the automatic onboarding of the SD-WAN routers into the SD-WAN overlay.

  2.

  The management plane is responsible for central configuration and monitoring.

  3.

  The control plane builds and maintains the network topology and makes decisions on where traffic flows.

  4.

  The data plane is responsible for forwarding packets based on decisions from the control plane.

• Question 305:

  An engineer is configuring a WAN Edge router for DIA based on matching QoS parameters. Which two actions accomplish this task? (choose two.)

  A. Apply a QoS map policy.

  B. Configure a control policy.

  C. Configure a centralized data policy.

  D. Configure NAT on the transport interface.

  E. Apply a data policy on WAN interface.

  Correct Answer: CD

  https://www.cisco.com/c/dam/en/us/td/docs/solutions/CVD/SDWAN/sdwan-dia-deploy-2020aug.pdf

• Question 306:

  Refer to the exhibit.

  

  The control connection is failing. Which action resolves the issue?

  A. import vSmart in vManager

  B. Validate the certificates authenticity on vSmart

  C. Upload the WAN Edge list on vManage.

  D. Restore the reachability to the vSmart

  Correct Answer: D

  https://www.cisco.com/c/en/us/support/docs/routers/sd-wan/214509-troubleshoot-control-connections.html

• Question 307:

  Refer to the exhibit.

  

  The ge0/0 interface connects to a 30-MB link. A network administrator wants to always have 10 MB available for high priority traffic. When lower-priority traffic busts exceed 20 MB. Traffic should be redirected to the second WAN interface ge0/1. Which set of configurations accomplishes this task?

  

  A. B. C. D.

  Correct Answer: D

  https://www.cisco.com/c/dam/en/us/td/docs/routers/sdwan/configuration/config-18-4.pdf#page=546

• Question 308:

  Refer to the exhibit. Which configuration routes Site 2 through the firewall in Site 1?

  

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: C

  https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/policies/vedge-20-x/policies-book/service-chaining.html

  

• Question 309:

  Which capability does Cisco SD-WAN Multi-Region Fabric provide?

  A. end-to-end SLA-aware routing

  B. overlay support for IP multicast

  C. assignment of a single vSmart controller to handle region 0 and noncore regions

  D. end-to-end encryption for inter-region traffic

  Correct Answer: D

• Question 310:

  What is the size of SGT data in the metadata header?

  A. 8 bits

  B. 16 bits

  C. 24 bits

  D. 32 bits

  Correct Answer: B

  An SGT is a 16-bit single label indicating the security classification of a source in the TrustSec domain. It is appended to an Ethernet frame or an IP packet.