Cisco CCNP Enterprise 300-415 Questions & Answers

• Question 311:

  What is the function of colocation in Cloud OnRamp SaaS?

  A. In Cloud OnRamp, colocation supports the capability of virtualizing access-only locations and using colocation centers that require the customer to extend to the cloud.

  B. Cloud OnRamp incorporates regional colocation facilities by choosing between cloud access points at the remote site and regional cloud access points at the colocation facilities.

  C. With colocation facility in Cloud OnRamp, the customer faces challenges to virtualize the security and optimization infrastructure that influence traffic through network elements.

  D. The Cloud OnRamp for colocation solution restricts the creation of different VNF service chains orchestrated in Cisco vManage and deployed on a cluster in a colocation facility.

  Correct Answer: B

• Question 312:

  Refer to the exhibit.

  

  An engineer must configure a QoS policy between the hub and site A (spoke) over a standard Internet circuit where traffic shaping is adjusted based on available bandwidth. Which configuration meets the requirement?

  A:

  

  B:

  

  C:

  

  D:

  A.

  Option A

  B.

  Option B

  C.

  Option C

  D.

  Option D

  

  Correct Answer: C

• Question 313:

  What do receivers request to join multicast streams in a Cisco SO-WAN network?

  A. IGMP membership reports directly with a multicast router

  B. Multicast service routes with the vSmart controller

  C. IGMP membership reports directly with the vBond orchestrator.

  D. PIM messages with the nearest neighboring multicast router.

  Correct Answer: B

  In a Cisco SD-WAN network, multicast traffic management is handled differently compared to traditional IP multicast methods due to the nature of the overlay architecture. Multicast Service Routes: In Cisco SD-WAN, multicast receivers use the vSmart controller to request multicast streams. This is done via multicast service routes which the vSmart controller manages. The vSmart controller is responsible for maintaining and distributing multicast routing information to all edge devices in the network.

• Question 314:

  Refer to the exhibit.

  

  

  vManage and vBond have an issue establishing a connection to each other. Which configuration resolves the issue?

  A. Configure the timezone on vBond to Europe/London.

  B. Configure the encapsulation ipsec command under the tunnel interface on vManage.

  C. Configure a default route on vBond pointing to 172.16.2.254.

  D. Remove the encapsulation ipsec command under the tunnel interface of vBond.

  Correct Answer: C

• Question 315:

  Refer to the exhibit.

  

  An engineer is configuring a QoS policy to shape traffic for VLAN 100 on a subinterface. Which policy configuration accomplishes the task?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: C

• Question 316:

  Which VPNs must be configured outside the workflow to complete the SD-WAN overlay setup when using the Quick Connect workflow?

  A. service and transport VPNs

  B. service VPNs

  C. transport VPNs

  D. management VPNs

  Correct Answer: D

  The Quick Connect workflow in Cisco SD-WAN simplifies the initial setup process by automating many configuration steps. However, certain configurations still need to be performed outside of this automated workflow to ensure a complete and operational SD- WAN overlay. Management VPNs: Management VPNs, specifically VPN 512, are used for device management and are critical for the proper operation and management of the SD- WAN devices. These VPNs are typically configured outside of the Quick Connect workflow to ensure that all devices can be properly managed and monitored. Service and Transport VPNs: While service and transport VPNs are also important, they are often included within the Quick Connect workflow, which sets up the necessary configurations to enable data transport across the SD-WAN fabric.

• Question 317:

  Which encryption algorithm secures binding exchanges Between Cisco TrustSec SXP peers?

  A. SEAL

  B. 3DES

  C. AES

  D. MD5

  Correct Answer: C

  Cisco TrustSec (CTS) is a technology that enables secure access and dynamic role-based access control in the network. The Security Group Tag (SGT) Exchange Protocol (SXP) is used to propagate SGTs across network devices. To ensure the secure exchange of these tags, Cisco uses encryption algorithms. AES (Advanced Encryption Standard): AES is widely used in many security protocols and standards because of its strong encryption capabilities. In the context of Cisco TrustSec, AES is the encryption algorithm used to secure binding exchanges between SXP peers. It provides robust encryption, ensuring the integrity and confidentiality of the data being exchanged. Implementation: When configuring SXP peers, the AES encryption ensures that the SGT information transmitted is secure and cannot be intercepted or tampered with by unauthorized entities.

• Question 318:

  Which TLOC color is used for site-to-site communication in a Google Cloud integration with Cisco SD-WAN?

  A. Private1

  B. private2

  C. private3

  D. private4

  Correct Answer: A

  In Cisco SD-WAN, TLOC (Transport Locator) colors are used to categorize and manage different types of transport networks. When integrating with cloud services such as Google Cloud, specific TLOC colors are designated for managing

  site-to-site communication within the cloud infrastructure.

  TLOC Color Assignment:

  Private1 for Site-to-Site Communication:

• Question 319:

  Which protocol is used to measure jitter, loss, and latency on SD-WAN overlay tunnels?

  A. QoE

  B. OMP

  C. BGP

  D. BFD

  Correct Answer: D

• Question 320:

  An engineer creates a data policy to prevent communication from the 172.20.21.0/24 network to the 172.20.41.0/24 network. Which configuration accomplishes this task?

  A:

  

  B:

  

  C:

  

  D:

  A.

  Option A

  B.

  Option B

  C.

  Option C

  D.

  Option D

  

  Correct Answer: D