Cisco CCNP 300-415 Questions & Answers

• Question 41:

  How is TLOC defined?

  A. It is represented by a unique identifier to specify a site in a SD-WAN architecture.

  B. It specifies a Cisco SD-WAN overlay in a multitenant vSMART deployment.

  C. It is represented by a group of QoS policies applied to a WAN Edge router.

  D. It is a unique collection of GRE or IPsec encapsulations, link color, and system IP address.

  Correct Answer: D

• Question 42:

  Which vBond system configuration under VPN 0 allows for a routable public IP address even if the DNS name, hostname, or IP address of the vBond orchestrator are omitted?

  A. WAN

  B. local

  C. dns-name

  D. vbond-only

  Correct Answer: B

• Question 43:

  Refer to the exhibit.

  

  The network team must configure branch B WAN Edge device 103 to establish dynamic full-mesh IPsec tunnels between all colors with branches over MPLS and Internet circuits. The branch ts configured with:

  

  Which configuration meets the requirement?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: A

• Question 44:

  Company E wants to deploy Cisco SD-WAN with controllers in AWS The company's existing WAN is on private MPLS without Internet access to controllers m AWS An Internet circuit is added to a site in addition to the existing MPLS circuit. Which interface template establishes BFD neighbors over both transports?

  

  A. Option A

  B. Option B

  C. Option C

  Correct Answer: A

• Question 45:

  Which policy is configured to ensure that a voice packet is always sent on the link with less than a 50 msec delay?

  A. localized data policy

  B. localized control policy

  C. centralized data policy

  D. centralized control policy

  Correct Answer: C

• Question 46:

  An organization requires the use of integrated preventative engines, exploit protection, and the most updated and advanced signature-based antivirus with sandboxing and threat intelligence to stop malicious attachments before they reach users and get executed.

  Which Cisco SD-WAN solution meets the requirements?

  A. Cisco Trust Anchor module

  B. URL filtering and Umbrella DNS security

  C. Cisco AMP and Threat Grid

  D. Snort IPS

  Correct Answer: C

  https://blogs.cisco.com/networking/enabling-amp-in-cisco-sd-wan NEW: Malware defense and sandboxing with Cisco AMP and AMP Threat Grid

• Question 47:

  Refer to the exhibit.

  

  The Cisco SD-WAN network is configured with a default full-mesh topology. An engineer wants Paris WAN Edge to use the Internet HOC as the preferred TLOC for MSN Messenger and AOL Messenger traffic. Which policy achieves this goal?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: A

• Question 48:

  Which two metrics must a cloud Edge router use to pick the optimal path for a SaaS application reachable via a gateway site? (Choose two.)

  A. HTTP loss and latency metrics to the SaaS application

  B. BFD loss and latency metrics to the gateway site

  C. ICMP loss and latency metrics to the SaaS application

  D. HTTP loss and latency metrics to the gateway site

  E. BFD loss and latency metrics to the SaaS application

  Correct Answer: AB

  -The gateway vEdge uses HTTP to obtain SaaS application performance information

  -The client vEdge will use BFD over the IPSec tunnel to the gateway site to obtain client>gateway path performance information https://www.cisco.com/c/dam/en/us/td/docs/solutions/CVD/SDWAN/CVD-SD-WAN-Cloud-onRamp-for-SaaS-Deployment-Guide-2018JUL.pdf

• Question 49:

  Refer to the exhibit.

  

  vManage and vSmart have an issue establishing a connection to vBond. Which configuration resolves the issue?

  A. Configure the tunnel interface on all three controllers with a color of transport.

  B. Change the timezone on the vSmart to Europe/London.

  C. Configure the (11.1.1.X/24) IP addresses on the elhO interfaces on vManage and vSmart.

  D. Reconfigure the system-ip parameter on vSmart to 11.1.1.2.

  Correct Answer: D

• Question 50:

  What prohibits deleting a VNF image from the software repository?

  A. if the image is stored by vManage

  B. if the image is referenced by a service chain

  C. if the image is uploaded by a WAN Edge device

  D. if the image is included in a configured policy

  Correct Answer: B

  reference: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/Monitor-And-Maintain/monitor-maintain-book/maintain.html#task_hbp_kmd_ffb "If the VNF image is referenced by a service chain, it can't be deleted."