Cisco CCNP Enterprise 300-415 Questions & Answers

• Question 381:

  Which two hardware platforms support Cisco IOS XE SD-WAN images? (Choose two)

  A. ISR4000 series

  B. ISR9300 series

  C. vEdge-1000 series

  D. ASR9000 series

  E. ASR1000 series

  Correct Answer: AE

• Question 382:

  Which Cisco SD-WAN WAN Edge platform supports LTE and Wi-Fi?

  A. ISR 1101

  B. ASR 1001

  C. CSR 1000v

  D. vEdge 2000

  Correct Answer: A

• Question 383:

  What is a default protocol for control plane connection?

  A. HTTPS

  B. TLS

  C. IPsec

  D. DTLS

  Correct Answer: D

• Question 384:

  An administrator needs to configure Cisco SD-WAN to divert traffic from the company's private network to an ISP network. Which action should be taken to accomplish this goal?

  A. configure the data security policy

  B. configure the application aware policy

  C. configure the control policy

  D. configure the data policy

  Correct Answer: D

  Data policies are used to define routing and forwarding behavior based on various criteria, including destination, source, application, and other characteristics. You can create a data policy to specify the conditions under which traffic should be redirected from the private network to the ISP network.

• Question 385:

  A network administrator is bringing up one WAN Edge for branch connectivity. Which types of tunnels form when the WAN edge router connects to the SD-WAN fabric?

  A. DTLS or TLS tunnel with vBond controller and IPsec tunnel with vManage controller

  B. DTLS or TLS tunnel with vBond controller and IPsec tunnel with other WAN Edge routers

  C. DTLS or TLS tunnel with vSmart controller and IPsec tunnel with other Edge routers

  D. DTLS or TLS tunnel with vSmart controller and IPsec tunnel with vBond controller

  Correct Answer: C

• Question 386:

  In the Cisco SD-WAN solution, vSmart controller is responsible for which two actions? (Choose two)

  A. Authenticate and authorize vEdge routers.

  B. Distribute the IP address from DHCP server to vEdge routers

  C. Distribute crypto key information among vEdge routers

  D. Configure and monitor vEdge routers

  E. Distribute route and policy information via OMP.

  Correct Answer: CE

• Question 387:

  Which device in the Cisco SD-WAN solution receives and categorizes event reports, and generates alarms?

  A. vSmart controllers

  B. WAN Edge routers

  C. vBond controllers

  D. vManage NMS

  Correct Answer: D

  https://sdwan-docs.cisco.com/Product_Documentation/vManage_Help/Release_17.1/vManage_NMS_Product_Help

• Question 388:

  In an AWS cloud, which feature provisions WAN Edge routers automatically in Cisco SD-WAN?

  A. Cloud OnRamp

  B. vAnalytics

  C. Cloud app

  D. Network Designer

  Correct Answer: A

• Question 389:

  When a WAN Edge device joins the Cisco SD-WAN overlay, which Cisco SD-WAN component orchestrates the connection between the WAN Edge device and a vSmart controller?

  A. OMP

  B. vBond

  C. vManage

  D. APIC-EM

  Correct Answer: B

  In Cisco SD-WAN, when a WAN Edge device (such as a router or appliance) joins the SD-WAN overlay, the component responsible for orchestrating the connection between the WAN Edge device and a vSmart controller is the vBond (or

  vBond Orchestrator).

  Here's how the process typically works:

  WAN Edge Device: The WAN Edge device is initially deployed in a branch office or data center.

  vBond Orchestrator: The WAN Edge device is configured with the address of the vBond Orchestrator. The vBond Orchestrator acts as the orchestrator for the WAN Edge devices and helps them establish secure connections with the other

  SD-WAN components.

  vSmart Controller: The vBond Orchestrator assists the WAN Edge device in establishing a secure connection with a vSmart controller. The vSmart controller is responsible for control plane functions in the SD-WAN, such as routing and policy

  distribution.

  vManage: The vManage controller is used for centralized management and monitoring of the SD-WAN network.

• Question 390:

  In Cisco SD-WAN, what protocol is used for control connections between SD-WAN devices?

  A. BGP

  B. OSPF

  C. DTLS

  D. OMP

  Correct Answer: C

  In the reference link under the 'Control Plane Authentication' part, you can find the following:

  Then, during the automatic authentication process, as pairs of devices (routers and controllers) are establishing DTLS control connections, each device compares the serial numbers (and for routers, the chassis numbers) to those in the files installed on the router.

  DTLS is the connection that facilitates the exchange of OMP information between the devices. In vManage the number of control connections also shows the amount of DTLS connections to/from a device. OMP is not the control connection, it's the control plane management protocol.