Cisco CCNP Enterprise 300-415 Questions & Answers

• Question 401:

  When software is upgraded on a vManage NMS, which two image-adding options store images in a local vManage software repository? (Choose two.)

  A. To be downloaded over an ICMP connection

  B. To be downloaded over a SNMP connection

  C. To be downloaded over a control plane connection

  D. To be downloaded over an out-of-band connection

  E. To be downloaded over a SMTP connection

  Correct Answer: CD

  Reference: https://sdwan-docs.cisco.com/Product_Documentation/vManage_Help/Release_18.2/Maintenance/Software_Repository

• Question 402:

  Which logs verify when a device was upgraded?

  A. ACL

  B. Email

  C. SNMP

  D. Audit

  Correct Answer: D

  Reference: https://sdwan-docs.cisco.com/Product_Documentation/vManage_Help/Release_18.4/Monitor/Audit_Log

• Question 403:

  Which template configures the out-of band management VPN?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: C

• Question 404:

  Which pathway under Monitor > Network > Select Device is used to verify service insertion configuration?

  A. System Status

  B. Troubleshooting

  C. Real Time

  D. Events

  Correct Answer: C

  Realtime On a hub device, view the configured services

  From the Cisco vManage menu:

  View the configured services on the Real Time monitoring page (Monitor > Devices > hub-device > Real Time)

  Troubleshooting On a spoke device, view the details of the service chain path.

  Using Cisco vManage:

  View the service chain path on the Traceroute page (Monitor > Devices > spoke-device > Troubleshooting > Connectivity > Trace Route). Enter the destination IP, VPN, and source interface for the desired path.

  https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/policies/vedge-20-x/policies-book/service-chaining.html#monitor-service-chaining-vmanage

• Question 405:

  Which API call retrieves a list of all devices in the network?

  A. https://vmanage_IP_address/dataservice/system/device/{{model}}

  B. http://vmanage_IP_address/dataservice/system/device/{{model}}

  C. http://vmanage_IP_address/api-call/system/device/{{model}}

  D. https://vmanage_IP_address/api-call/system/device/{{model}}

  Correct Answer: A

  Reference:

  https://sdwan-docs.cisco.com/Product_Documentation/Command_Reference/Command_Reference/vManage_REST_APIs/ vManage_REST_APIs_Overview/Using_the_vManage_REST_APIs

• Question 406:

  Which alarm setting is configured to monitor serious events that affect, but do not shut down, the operation of a network function?

  A. Critical

  B. Medium

  C. Major

  D. Minor

  Correct Answer: C

  Reference: https://sdwan-docs.cisco.com/Product_Documentation/vManage_How-Tos/Troubleshooting/Monitor_Alarms

• Question 407:

  Which platforms are managed by a single vManage dashboard?

  A. ISR4351, ASR1002HX, vEdge2000, vEdge Cloud

  B. ISR4321, ASR1001, Nexus, ENCS

  C. ISR4321, ASR1001, ENCS, ISRv

  D. ISR4351, ASR1009, vEdge2000, CSR1000v

  Correct Answer: C

  Reference: https://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise-networks/sd-wan/nb-06-sw-defined-wan-faq-cte-en.pdf

• Question 408:

  Which command disables the logging of syslog messages to the local disk?

  A. no system logging disk local

  B. system logging server remote

  C. no system logging disk enable

  D. system logging disk disable

  Correct Answer: C

  Reference: https://sdwan-docs.cisco.com/Product_Documentation/Software_Features/SD- WAN_Release_16.3/02System_and_Interfaces/08Configuring_System_Logging

• Question 409:

  Which hardware component is involved in the Cisco SD-WAN authentication process for ISR platforms?

  A. ZTP

  B. OTPC

  C. SUDI

  D. TPMD

  Correct Answer: C

  The hardware component involved in the Cisco SD-WAN authentication process for ISR (Integrated Services Router) platforms is the SUDI (Signed Unique Device Identifier).

  SUDI is a mechanism used for device authentication and is often employed in Cisco SD-WAN deployments. It helps verify the authenticity of the device and is part of the secure onboarding process.

  Reference:https://www.cisco.com/c/dam/en/us/td/docs/solutions/CVD/SDWAN/sdwan-wan-edge-onboarding-deploy-guide-2020nov.pdf

• Question 410:

  Which value is verified in the certificates to confirm the identity of the device?

  A. Serial Number

  B. OTP

  C. System-IP

  D. Chassis-ID

  Correct Answer: A

  Serial numbers are commonly used in certificates as a unique identifier for a specific physical device. When a device presents a certificate during authentication or key exchange, the serial number is one of the attributes used to verify the device's identity and authenticity https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/sdwan-xe-gs-book/manage-certificates.html