Cisco CCNP Enterprise 300-415 Questions & Answers

• Question 341:

  How is the software managed in Cisco SD-WAN?

  A. Software upgrade operation in the group must include vManage, vBond, and vSmart.

  B. Software downgrades are unsupported for vManage.

  C. Software images must be uploaded to vManage through HTTP or FTP.

  D. Software images must be transferred through VPN 512 or VPN 0 of vManage.

  Correct Answer: B

• Question 342:

  Which two architectural components are part of an SD-WAN high availability vManage cluster? (Choose two.)

  A. network configuration system

  B. WAN Edge router

  C. NAT router

  D. messaging server

  E. application server

  Correct Answer: AE

• Question 343:

  A network engineer must configure all branches to communicate with each other through the Service Chain Firewall located at the headquarters site. Which configuration allows the engineer to accomplish this task?

  

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: B

• Question 344:

  What is the minimum Red Hat Enterprise Linux operating system requirement for a Cisco SD-WAN controller deployment via KVM?

  A. RHEL7.5

  B. RHEL 6.5

  C. RHEL4.4

  D. RHEL 6.7

  Correct Answer: A

  https://www.cisco.com/c/en/us/td/docs/routers/sdwan/release/notes/compatibility-and-server-recommendations.pdf

• Question 345:

  Which template configures the out-of-band management VPN?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: C

• Question 346:

  Which SD-WAN component allows an administrator to manage and store software images for SD-WAN network elements?

  A. WAN Edge routers

  B. vSmart controllers

  C. vManage NMS

  D. vBond controllers

  Correct Answer: C

  In Cisco SD-WAN, the component that allows an administrator to manage and store software images for SD-WAN network elements is the vManage controller (or vManage NMS).

• Question 347:

  Which destination UDP port is used by WAN Edge router to make a DTLS connection with vBond Orchestrator?

  A. 12343

  B. 12345

  C. 12346

  D. 12347

  Correct Answer: C

• Question 348:

  How many vCPUs and how much RAM are recommended to run the vSmart controller on the KVM server for 251 to 1000 devices in software version 20.4.x?

  A. 4vCPUs. 16 GB

  B. 4 vCPUs. 8 GB

  C. 8vCPUs. 16 GB

  D. 2vCPUs.4GB

  Correct Answer: B

• Question 349:

  An engineer must automate certificate signing through Cisco.

  Which vManage configuration achieves this task?

  A. vpn 0 dns 208.67.222.222 primary allow-service dns allow-service sshd allow-service netconf

  B. vpn 0 allow-service dns allow-service sshd allow-service netconf

  C. vpn 512 dns 208.67.222.222 primary allow-service dns allow-service sshd allow-service netconf

  D. vpn 512 allow-service dns allow-service sshd allow-service netconf

  Correct Answer: C

  Automated certificate signing through Cisco Systems With this option, certificate signing requests are automatically sent to the Cisco PnP cloud service where the certificate is signed. The vManage then automatically retrieves the certificate and installs it. A DNS server needs to be configured to resolve the hostname, cloudsso.cisco.com and subsequently, apx.cisco.com. The vManage needs to reach both servers on TCP port 443. Account credentials are configured before this certificate option can be configured. Procedure 1: Verify Cisco server reachability

  1. Ensure that a DNS server is defined for VPN 0 on vManage via SSH or console: config terminal vpn 0 dns 208.67.222.222 primary commit and-quit

• Question 350:

  Which feature builds transport redundancy by using the cross link between two redundant WAN Edge routers?

  A. OMP

  B. zero-touch provisioning

  C. quality of service

  D. TLOC extension

  Correct Answer: D