[Aug-2021] 300-415 Dumps Full Questions - CCNP Enterprise Exam Study Guide
Exam Questions and Answers for 300-415 Study Guide
NEW QUESTION 22
Which protocol is used for the vManage to connect to the vSmart Controller hosted in Cloud?
- A. PnP Server
- B. ZTP
- C. HTTP
- D. NETCONF
Answer: D
Explanation:
NEW QUESTION 23
Which feature allows reachability to an organization's internally hosted application for an active DNS security policy on a device?
- A. local domain bypass
- B. DHCP option 6
- C. data pokey with redirect
- D. DNSCrypt configurator
Answer: A
Explanation:
https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/security/ios-xe-16/security-book-xe/umbrella-integration.html
NEW QUESTION 24
A large retail organization decided to move some of the branch applications to the AWS cloud. How does the network architect extend the in-house Cisco SD-WAN branch to cloud network into AWS?
- A. Install the AWS Cloud Router in the main data center and provide the connectivity from each branch
- B. Create GRE tunnels to AWS from each branch over the Internet
- C. Create virtual instances of vSmart Cloud through the AWS online software store
- D. Create virtual WAN Edge devices Cloud through the AWS online software store
Answer: D
Explanation:
https://www.cisco.com/c/en/us/td/docs/solutions/CVD/SDWAN/Cisco_Cloud_onRamp_for_IaaS_AWS_Version2.html#_Toc54023359
NEW QUESTION 25
An administrator must configure an ACL for traffic con1ing in from the service-side VPN on a specific WAN Edge device with circuit ID 392318933. Which policy must be used to configure this ACL?
- A. central data policy
- B. central control policy
- C. app-aware policy
- D. local data policy
Answer: D
NEW QUESTION 26
Which two hardware platforms support Cisco IOS XE SD-WAN images? (Choose two.)
- A. ASR1000 series
- B. vEdge-1000 series
- C. ISR9300 series
- D. ASR9000 series
- E. ISR4000 series
Answer: A,E
Explanation:
Section: Architecture
Explanation/Reference: https://www.cisco.com/c/en/us/solutions/collateral/enterprise-networks/sd-wan/white_paper-c11-
741071.html
NEW QUESTION 27
Refer to the exhibit.
What binding is created using the tloc-extension command?
- A. between ge 0/2.101 of port-type service and ge 0/0 of port-type transport
- B. between ge 0/2.101 of port-type transport and ge 0/0 of port-type service
- C. between ge 0/2.101 of port-type transport and ge 0/0 of port-type transport
- D. between ge 0/2.101 of port-type service and ge 0/0 of port-type service
Answer: C
Explanation:
NEW QUESTION 28
A large retail organization decided to move some of the branch applications to the AWS cloud. How does the network architect extend the in-house Cisco SD-WAN branch to cloud network into AWS?
- A. Install the AWS Cloud Router in the main data center and provide the connectivity from each branch
- B. Create GRE tunnels to AWS from each branch over the Internet
- C. Create virtual instances of vSmart Cloud through the AWS online software store
- D. Create virtual WAN Edge devices Cloud through the AWS online software store
Answer: D
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/solutions/CVD/SDWAN/Cisco_Cloud_onRamp_for_IaaS_AWS_Version
NEW QUESTION 29
Drag and drop the BFD parameters from the left onto the BFD configurations on the right.
Answer:
Explanation:
NEW QUESTION 30
Drag and drop the policies from the left onto the correct policy types on the right.
Answer:
Explanation:
NEW QUESTION 31
Which two products that perform lifecycle management for virtual instances are supported by WAN Edge cloud routers? (Choose two.)
- A. IBM Cloud
- B. VMware vCenter
- C. OpenStack
- D. AWS
- E. Azure
Answer: D,E
Explanation:
NEW QUESTION 32
Which alarm setting is configured to monitor serious events that affect, but do not shut down, the operation of a network function?
- A. Major
- B. Medium
- C. Minor
- D. Critical
Answer: A
Explanation:
Section: Management and Operations
Explanation/Reference: https://sdwan-docs.cisco.com/Product_Documentation/vManage_How-Tos/Troubleshooting/ Monitor_Alarms
NEW QUESTION 33
A network administrator is configuring an application-aware firewall between inside zones to an outside zone on a WAN edge router using vManage GUI. Which kind of inspection is performed when the "inspect" action is used?
- A. Layer 7 inspection for TCP and Layer 4 inspection for UDP
- B. stateful inspection for TCP and stateless inspection of UDP
- C. stateful inspection for TCP and UDP
- D. IPS inspection for TCP and Layer 4 inspection for UDP
Answer: C
Explanation:
Section: Management and Operations
NEW QUESTION 34
Refer to the exhibit.
Which configuration change is needed to configure the tloc-extention on Branch1-Edge1?
- A. Option A
- B. Option D
- C. Option B
- D. Option C
Answer: B
NEW QUESTION 35
Which plane assists in the automatic onboarding of the SD-WAN routers into the SD-WAN overlay?
- A. Control
- B. Orchestration
- C. Management
- D. Data
Answer: B
Explanation:
NEW QUESTION 36
Refer to the exhibit.
Which configuration extends the INET interface on R1 to be used by R2 for control and data connections?
- A. Option D
- B. Option A
- C. Option B
- D. Option C
- E. Option E
Answer: E
NEW QUESTION 37
In an AWS cloud, which feature provisions WAN Edge routers automatically in Cisco SD-WAN?
- A. vAnalytics
- B. Cloud OnRamp
- C. Network Designer
- D. Cloud app
Answer: B
Explanation:
Section: Architecture
NEW QUESTION 38
A network administrator is bringing up one WAN Edge for branch connectivity. Which types of tunnels form when the WAN edge router connects to the SD-WAN fabric?
- A. DTLS or TLS tunnel with vSmart controller and IPsec tunnel with other Edge routers.
- B. DTLS or TLS tunnel with vSmart controller and IPsec tunnel with vBond controller.
- C. DTLS or TLS tunnel with vBond controller and IPsec tunnel with other WAN Edge routers.
- D. DTLS or TLS tunnel with vBond controller and IPsec tunnel with vManage controller.
Answer: A
Explanation:
NEW QUESTION 39
Drag and drop the actions from the left into the correct sequence on the right to create a data policy to direct traffic to the Internet exit.
Answer:
Explanation:
Explanation
https://sdwan-docs.cisco.com/Product_Documentation/Software_Features/SD-WAN_Release_16.2/07Policy_Ap
NEW QUESTION 40
A customer is receiving routes via OMP from vSmart controller for a specific VPN. The customer must provide access to the W2 loopback received via OMP to the OSPF neighbour on the service-side VPN, Which configuration fulfils these requirements?
- A. Option D
- B. Option A
- C. Option B
- D. Option C
- E. Option E
Answer: E
NEW QUESTION 41
Drag and drop the definitions from the left to the configuration on the right.
Answer:
Explanation:
NEW QUESTION 42
......
Implementing Cisco SD-WAN Solutions Free Update With 100% Exam Passing Guarantee: https://www.prep4sureguide.com/300-415-prep4sure-exam-guide.html
Real Exam Questions & Answers - Cisco 300-415 Dump is Ready: https://drive.google.com/open?id=1DWIdETE6oAa1z3TlxWVxuuThUaZCS_Ye