CCNP Enterprise 300-415 Dumps | Updated Oct 04, 2021 - PrepAwayExam
Master 2021 Latest The Questions CCNP Enterprise and Pass 300-415 Real Exam!
NEW QUESTION 52
Drag and drop the vManage policy configuration procedures from the left onto the correct definitions on the right.
Answer:
Explanation:
NEW QUESTION 53
When VPNs are grouped to create destination zone in Zone-Based Firewall, how many zones can a single VPN be part of?
- A. one
- B. two
- C. three
- D. four
Answer: A
NEW QUESTION 54
A network administrator is configuring Qos on a Vedge 5000 router and needs to enable it on the transport side interface. Which policy setting must be selected to accomplish this goal?
- A. Cloud QoS Service side
- B. Application
- C. Cloud QoS
- D. Netflow
Answer: C
NEW QUESTION 55 
Refer to the exhibit, Which configuration configures IPsec tunnels in active and standby?
- A. Option A
- B. Option D
- C. Option B
- D. Option C
Answer: A
NEW QUESTION 56
If Smart Account Sync is not used, which Cisco SD-WAN component is used to upload an authorized serial number file?
- A. vSmart
- B. vBond
- C. WAN Edge
- D. vManage
Answer: D
Explanation:
Section: Architecture
Explanation/Reference: https://www.cisco.com/c/dam/en/us/td/docs/solutions/CVD/SDWAN/cisco-sd-wan-certificates- deploy-2020aug.pdf page 14
NEW QUESTION 57
What is a benefit of the application aware firewall feature in the Cisco SD-WAN solution?
- A. application monitoring
- B. control policy enforcement
- C. application visibility
- D. application malware protection
Answer: C
Explanation:
https://www.cisco.com/c/dam/en/us/td/docs/routers/sdwan/configuration/config-18-4.pdf#page=242
NEW QUESTION 58
What is the purpose of ''vpn 0'' in the configuration template when onboarding a WAN edge node?
- A. It carries control traffic over secure IPsec connections between vSmart controllers and vEdge routers, and between vSmart and vManager
- B. It carries control traffic over secure DTLS or TLS connections between vSmart controllers and vEdge E.
routers, and between vSmart and vBond - C. It carries control out-of-bond network management traffic among the Vlptela devices in the overlay network.
- D. It carries control traffic over secure DTLS or TLS connections between vSmart controllers and vEdge routers, and between vSmart and vBond
Answer: D
Explanation:
NEW QUESTION 59
Which pathway under Monitor > Network > Select Device is used to verify service insertion configuration?
- A. ACL Logs
- B. Real Time
- C. System Status
- D. Events
Answer: C
NEW QUESTION 60
Drag and drop the policies from the left onto the correct policy types on the right.
Answer:
Explanation:
Explanation
strict hubandspoke topology
prefer voice and video via MPLS link
perform shaping on traffic
service firewall insertion
NEW QUESTION 61
An engineer is troubleshooting a certificate issue on vEdge. Which command is used to verify the validity of the certificates?
- A. show certificate status
- B. show control summary
- C. show control local-properties
- D. show certificate installed
Answer: C
NEW QUESTION 62
What is a description of vManage NMS?
- A. It is accessible only from VPN 512 (the management VPN).
- B. A cluster consists of a minimum of two vManage NMSs.
- C. It is a software process on a dedicated WAN Edge router in the network.
- D. A cluster requires device templates to be created on an attached to the same server.
Answer: A
Explanation:
Section: Management and Operations
Explanation/Reference:
NEW QUESTION 63
Drag and drop the attributes from the left that make each transport location unique onto the right. Not all options are used.
Answer:
Explanation:
Explanation
IP address
Color
Encapsulation
NEW QUESTION 64
Which scheduling method is configured by default for the eight queues in the cloud vEdge router1?
- A. priority queue
- B. weighted random early detection
- C. weighted round robin
- D. low latency queue
Answer: C
Explanation:
Reference:
https://sdwan-docs.cisco.com/Product_Documentation/Software_Features/SD-WAN_Release_16.3/06Policy_Basics/05Localized_Data_Policy/Configuring_Localized_Data_Policy_for_IPv4
NEW QUESTION 65
A network administrator is configuring a centralized control policy based on match action pairs for multiple conditions, Which order must be configured to prefer Prefix List over TLOC and TLOC over Origin?
- A. nonsequential order
- B. highest to lowest sequence number
- C. lowest to highest sequence number
- D. deterministic order
Answer: C
Explanation:
NEW QUESTION 66
Which port is used for vBond under controller certificates if no alternate port is configured?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: D
Explanation:
Section: Architecture
Explanation/Reference: https://community.cisco.com/t5/networking-documents/sd-wan-controller-setup-guide-on-prem-non- cloud-managed/ta-p/3921360
NEW QUESTION 67
A customer must upgrade the cisco SD-WAN devices and controllers from version 19.2 to version 20.3. The devices include WAN Edge cloud, vManage, vSmart, and vBond. Which types of image types of image files are needed for this upgrade?
- A. one file for vManage and one file for all other devices with extension tar.gz
- B. one file for vManaga and one file for all other devices with extension .bin
- C. one file for vManage, one for vSmart and one for vBond + WAN Edge Cloud with extension.bin
- D. one file for vManaga, one for vSmart and one for vBond + WAN Edge Cloud with extension tar.gz
Answer: D
Explanation:
https://software.cisco.com/download/home/286320995/type/286321394/release/20.3.3.1
NEW QUESTION 68
Which alarm setting is configured to monitor serious events that affect but do not shut down, the operation of a network function?
- A. Major
- B. Medium
- C. Critical
- D. Minor
Answer: C
NEW QUESTION 69
What is the purpose of "vpn 0" in the configuration template when onboarding a WAN edge node?
- A. It carries control traffic over secure IPsec connections between vSmart controllers and vEdge routers, and between vSmart and vBond.
- B. It carries out-of-band network management traffic among the Viptela devices in the overlay network.
- C. It carries control traffic over secure DTLS or TLS connections between vSmart controllers and vEdge routers, and between vSmart and vBond.
- D. It carries control traffic over secure IPsec connections between vSmart controllers and vEdge routers, and between vEdge and vManager.
Answer: C
Explanation:
Section: Controller Deployment
Explanation/Reference: https://sdwan-docs.cisco.com/Product_Documentation/Software_Features/SD- WAN_Release_17.1/04Segmentation/02Configuring_Segmentation_(VPNs)
NEW QUESTION 70
On which device is a service FW address configured to insert firewall service at the hub?
- A. vSmart at the hub
- B. vEdge at the branch
- C. vEdge at the hub
- D. vSmart at the branch
Answer: C
Explanation:
Section: Router Deployment
Explanation/Reference: https://sdwan-docs.cisco.com/Product_Documentation/Software_Features/ Release_18.4/07Policy_Applications/02Service_Chaining/Service_Chaining_Configuration_Examples
NEW QUESTION 71
A network administrator is configuring an application-aware firewall between inside zones to an outside zone on a WAN edge router using vManage GUI. What kind of Inspection is performed when the ''inspect'' action is used?
- A. Layer 7 inspection for TCP and Layer 4 inspection for UDP
- B. stateful inspection for TCP and stateless inspection of UDP
- C. stateful inspection for TCP and UDP
- D. IPS inspection for TCP and-Layer 4 inspection for UDP
Answer: C
Explanation:
NEW QUESTION 72
Refer to the exhibit.
Which shaping-rate does the engineer use to shape traffic at 9 Mbps?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: B
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/routers/sdwan/command/sdwan-cr-book/config-cmd.html#wp421715213
NEW QUESTION 73 
Refer to the exhibit. The network administrator has configured a centralized topology policy that results in the displayed routing table at a branch office. Which two configurations are verified by the output? [Choose two.)
- A. This routing table is from a cEdge router.
- B. The configured policy is adding a route tag of 300 to learned routes.
- C. The default route is learned via OMP.
- D. The default route is configured locally.
- E. The routing table is for the transport VPN.
Answer: A,D
NEW QUESTION 74
Which command displays BFD session summary information per TLOC on vEdge routers?
- A. show bfd tloc-summary-list
- B. show bfd history
- C. show bfd summary
- D. show bfd sessions
Answer: A
Explanation:
https://www.cisco.com/c/en/us/td/docs/routers/sdwan/command/sdwan-cr-book/sdwan-cr-book_chapter_0100.html
NEW QUESTION 75
An administrator must configure an ACL for traffic con1ing in from the service-side VPN on a specific WAN Edge device with circuit ID 392318933. Which policy must be used to configure this ACL?
- A. central data policy
- B. central control policy
- C. app-aware policy
- D. local data policy
Answer: D
NEW QUESTION 76
Which device in the SD- WAN solution receives and categorizes event reports, and generates alarms?
- A. vSmart controllers
- B. vManage NMS
- C. vBond controllers
- D. WAN Edge routers
Answer: B
Explanation:
https://sdwan-docs.cisco.com/Product_Documentation/vManage_Help/Release_17.1/vManage_NMS_Product_Help
NEW QUESTION 77
......
A fully updated 2021 300-415 Exam Dumps exam guide from training expert PrepAwayExam: https://www.prepawayexam.com/Cisco/braindumps.300-415.ete.file.html
Practice To 300-415 - PrepAwayExam Remarkable Practice On your Implementing Cisco SD-WAN Solutions Exam: https://drive.google.com/open?id=1bo4W-YFfW5mLczA_nDSuonHWcbai54o4