Cisco CCNP Enterprise 300-415 Questions & Answers

• Question 71:

  Which configuration allows VPN 10 traffic to have direct internet access locally from the WAN Edge device?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: C

• Question 72:

  An engineer is modifying an existing data policy for VPN 115 to meet these additional requirements:

  1.

  When browsing government websites, the traffic must use direct internet access.

  2.

  The source address of the traffic leaving the site toward the government websites must be set to an IP range associated with the country itself, a particular TLOC. The policy configuration is as follows:

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: C

• Question 73:

  How is a TLOC uniquely identified from a WAN Edge router to the SD-WAN transport network?

  A. system IP address

  B. VPN ID

  C. OMP

  D. SD-WAN site ID

  Correct Answer: A

• Question 74:

  Which two REST API functions are performed for Cisco devices in an overlay network? (Choose two)

  A. distributing a Snort image among devices

  B. attaching a device configuration template

  C. managing connections for smart licensing

  D. monitoring device certificates

  E. querying a device and aggregating statistics

  Correct Answer: BD

• Question 75:

  Which two different states of a WAN Edge certificate are shown on vManage? (Choose two.)

  A. inactive

  B. active

  C. staging

  D. invalid

  E. provisioned

  Correct Answer: BE

• Question 76:

  What are two attributes of vRoute? (Choose two)

  A. originator

  B. service

  C. encapsulation

  D. carrier

  E. domain ID

  Correct Answer: AB

• Question 77:

  What problem happens on a device with two serial numbers, a unique device identifier (UDI), and secure unique device identifier (SUDI) when an engineer provisions ISR 4000 by PnP using only a UDI?

  A. It encounters spanning tree issues

  B. It faces interface buffer overflow patterns

  C. It encounters redirection problems.

  D. It encounters memory overload problems

  Correct Answer: C

• Question 78:

  Which protocol runs between the vSmart controllers and WAN Edge routers when the vSmart controller acts like a route reflector?

  A. OMP outside the DTLS/TLS control connection

  B. BGP inside the DTLS/TLS

  C. IPsec inside the DTLS/TLS control connection

  D. OMP inside the DTLS/TLS control connection

  Correct Answer: D

• Question 79:

  Refer to the exhibit.

  

  A vBond controller was added to the controller list with the same Enterprise Root CA certificate as vManage. The two controllers can reach each other via VPNO and share the same organization name, but the control connection is not initiated.

  Which action resolves the issue?

  A. Synchronize the WAN Edge list on vManage with controllers.

  B. Configure NTP on both controllers to establish a connection.

  C. Configure a valid systom IP on the vBond controller.

  D. Configure a valid vBond IP on vManage.

  Correct Answer: D

• Question 80:

  How do WAN Edge devices operate when vSmart is inaccessible or fails to be reached by the WAN Edge?

  A. They cease to forward traffic in the data plane.

  B. They continue operation normally.

  C. They continue to receive reachability updates.

  D. They continue operating normally for a configurable time.

  Correct Answer: D