Cisco CCNP Enterprise 300-415 Questions & Answers

• Question 81:

  In which Cisco SD-WAN deployment scenario does Cisco Umbrella SIG deliver the most value?

  A. when Cisco IOS XE SD-WAN devices are deployed throughout the network

  B. when resource-intensive security operations are offloaded from entry-level WAN Edge devices

  C. when the identity of several WAN Edge devices is verified throughout the network

  D. when a centralized Internet breakout solution is implemented

  Correct Answer: D

  In a centralized Internet breakout scenario, all branch and remote office traffic is routed through a centralized Internet gateway. Cisco Umbrella SIG can be used to provide advanced security services, DNS protection, content filtering, and threat protection for all Internet-bound traffic. This approach enhances security, enforces security policies, and provides a consistent security posture across the entire network.

• Question 82:

  Refer to the exhibit.

  

  A user has selected the options while configuring a VPN Interface Ethernet feature template.

  What is the required configuration parameter the user must set in this template for this feature to function?

  A. The "IP MTU" field must be increased from the default value of 1500 to support the additional overhead.

  B. The "Shaping Rate (Kbps)" field must be configured with a value

  C. The "Adaptive QoS" field must be set to "on"

  D. The "Bandwidth Downstream" field must be configured with a value

  Correct Answer: B

• Question 83:

  How are policies deployed on cloud-hosted Cisco SD-WAN controllers?

  A. Policies are created on vManage and enforced by vManage.

  B. Policies are created on vSmart and enforced by vManage.

  C. Policies are created on vManage and enforced by vSmart.

  D. Policies are created on vSmart and enforced by vSmart.

  Correct Answer: C

  vManage serves as the central management and orchestration platform for SD-WAN policies, where administrators can define and configure policies. vSmart controllers, on the other hand, enforce these policies by making routing and forwarding decisions based on the defined policies. vSmart controllers play a significant role in policy enforcement and control plane operations within the SD-WAN network.

• Question 84:

  Refer to the exhibit.

  

  Which configuration must the engineer use to form underlay connectivity for the Cisco SD-WAN network?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: A

• Question 85:

  An engineer must configure VRRP for redundancy on WAN Edge router 1 running an earlier version than 20.6, considering WAN Edge router2 is configured correctly. Which configuration meets the requirement?

  

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: A

• Question 86:

  An engineer must avoid routing loops on the SD-WAN fabric for routes advertised between data center sites. Which BGP loop prevention attribute must be configured on the routers to meet this requirement?

  A. static routing on all WAN Edge routers instead of BGP

  B. same BGP AS between all CE and PE routers

  C. same OMP overlay-as on WAN Edge routers of all data centers

  D. same BGP AS between all WAN Edge routers and CE routers

  Correct Answer: C

  Reference: https://www.cisco.com/c/en/us/support/docs/routers/sd-wan/215992-how-to-avoid-bgp-omp-routing-loop-in-sd.html

• Question 87:

  Refer to the exhibit.

  

  A network administrator is configuring OSPF advanced configuration parameters from a template using the vManage GUI for a branch WAN Edge router to calculate the cost of summary routes to an ASBR.. Which action achieves this configuration?

  A. Enable Originate.

  B. Disable RFC 1583 Compatible.

  C. Disable Originate.

  D. Enable RFC 1583 Compatible.

  Correct Answer: A

  To configure OSPF advanced configuration parameters in the vManage GUI for a branch WAN Edge router to calculate the summary routes to an ASBR, you should select "Enable Originate." Enabling Originate allows the router to advertise summary routes into the OSPF domain.

• Question 88:

  What are the two impacts of losing vManage connectivity to fabric in the Cisco SD-WAN network? (Choose two.)

  A. Policy changes propagation stops.

  B. Creation of templates is impossible.

  C. BFD peering between WAN Edge devices are established.

  D. Statistics collection stops.

  E. IPsec tunnels tear down for WAN Edge devices.

  Correct Answer: AD

  When vManage loses connectivity to the fabric, it can no longer push policy changes to the WAN Edge devices (A) or collect statistics and monitoring data (D). This can impact the network's ability to adapt to changes and monitor its performance effectively.

• Question 89:

  A network administrator configures SNMPv3 on a Cisco WAN Edge router from CLI for monitoring purposes. How many characters are supported by the snmp user command?

  A. from 1 to 8

  B. from 1 to 16

  C. from 1 to 32

  D. from 1 to 48

  Correct Answer: C

  In Cisco SD-WAN Solution, when configuring SNMPv3 on a Cisco WAN Edge router from the CLI, the "snmp user " command supports a password length of 1 to 32 characters.

• Question 90:

  Refer to the exhibit.

  

  An engineer configures Rome WAN Edge to use MPLS cloud as the preferred link to reach Paris WAN Edge and use biz-internet as a backup. Which policy configuration must be applied in the outbound direction toward Rome to accomplish the task?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: D