Cisco CCNP Enterprise 300-415 Questions & Answers

• Question 41:

  Which component creates a feature profile using a structured approach to configuring Cisco SD-WAN in UX 2.0?

  A. feature template

  B. feature parcel

  C. configuration group

  D. device template

  Correct Answer: C

  Overview of Configuration Groups:

  The Configuration Group feature provides a simple, reusable, and structured approach for the configurations in Cisco Catalyst SD-WAN.

  Configuration Group: A configuration group is a logical grouping of features or configurations that can be applied to one or more devices in the network managed by Cisco Catalyst SD-WAN. You can define and customize this grouping based

  on your business needs.

  Feature Profile: A feature profile is a flexible building block of configurations that can be reused across different configuration groups. You can create profiles based on features that are required, recommended, or uniquely used, and then put

  together the profiles to complete a device configuration.

  Feature: A feature profile consists of features. Features are the individual capabilities you want to share across different configuration groups.

  Reference: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/system-interface/ios-xe-17/systems-interfaces-book-xe-sdwan/configuration-groups.html#:~:text=The%20Configuration%20Group%20feature%20provides,in%

  20Cisco%20Catalyst%20SD%2DWAN

• Question 42:

  Which two advanced security features are available on the Cisco SD-WAN WAN Edge (vEdge) device? (Choose two.)

  A. Cisco Umbrella DNS Security

  B. Enterprise Firewall

  C. snort intrusion prevention system

  D. Cisco AMP and AMP Threat Grid

  E. URL filtering

  Correct Answer: BD

• Question 43:

  Which two types of SGT propagation are supported by Cisco TrustSec? (Choose two.)

  A. key chain

  B. offline tagging

  C. SXP

  D. reconciliation

  E. inline tagging

  Correct Answer: CE

• Question 44:

  Which signature sets are available in vManage under the security policy configuration for IPS?

  A. Connectivity, Balanced, Security

  B. Malware, Blacklist, Connectivity

  C. Malware, Security, Connectivity

  D. Blacklist, Balanced, Security

  Correct Answer: A

• Question 45:

  The application team is getting ready to deploy a new business-critical application to the network. To protect the traffic, the network team must add another queue to the QoS map and then deploy the map to the fabric. Which configuration step must be completed prior to adding the queue to the QoS map and applying it?

  A. The relationship between the new QoS class and the hardware queue must be configured from the "lists" page of the Local Policy section of vManage. The QoS map is then applied to the WAN interface.

  B. The relationship between the new QoS class and the hardware queue must be configured from the "lists" page of the Local Policy section of vManage. The QoS map is then applied to the service-side interface.

  C. The relationship between the new QoS class and the hardware queue must be configured from the "lists" page of the Centralized Policy section of vManage. The QoS map is then applied to the service-side interface.

  D. The relationship between the new QoS class and the hardware queue must be configured from the "lists" page of the Centralized Policy section of vManage. The QoS map is then applied to the WAN interface.

  Correct Answer: C

• Question 46:

  What are three types of data that JSON uses when Cisco APIC REST API uses JavaScript?

  A. GET, PUT, and DELETE

  B. SCALAR, OBJECT, and ARRAY

  C. GET, PUT, and POST

  D. SCALAR, POST, and OBJECT

  Correct Answer: B

• Question 47:

  A network engineer sets tags in OMP for routes that were originated in the Service VPN. Which monitoring tab must be used to verify tags on the next hop?

  A. Troubleshooting > Simulate Flows

  B. Realtime > OMP Received TLOCs

  C. Troubleshooting > Tunnel Health

  D. Realtime > OMP Received Routes

  Correct Answer: D

• Question 48:

  Which REST API call is used for real-time monitoring of application-aware routing?

  A. history

  B. SLA class

  C. event

  D. alarm

  Correct Answer: C

• Question 49:

  Which type of service provider is responsible for secure, private connections between data centers, access regions, and cloud providers in Cisco SD-WAN Multi-Region Fabric?

  A. distributed network providers

  B. middle-mile network providers

  C. last-mile network providers

  D. first-mile network providers

  Correct Answer: B

• Question 50:

  Refer to the exhibit.

  

  The SD-WAN network is configured with a default full-mesh topology. The SD-WAN engineer wants the Barcelona WAN Edge to use the MPLS TLOC as the preferred TLOC when communicating with the Rome site. Which configuration must the engineer use to create a list to select MPLS color toward the Rome TLOC?

  

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: C