CCNP Enterprise 300-415 Dumps Full Questions with Free PDF Questions to Pass [Q61-Q79]

CCNP Enterprise 300-415 Dumps Full Questions with Free PDF Questions to Pass

100% Updated Cisco 300-415 Enterprise PDF Dumps

NEW QUESTION # 61
Which two WAN Edge devices should be deployed in a cloud? (Choose two.)

A. vEdge 100wm
B. ASR 1000v
C. vEdge cloud
D. CSR 1000v
E. vEdge 5000v

Answer: C,D

Explanation:

NEW QUESTION # 62
Which control policy assigned to Drenches in the out direction establishes a strict hub-and-spoke topology tor VPN2?

Answer: C

Explanation:
To establish a strict hub-and-spoke topology in Cisco SD-WAN for a specific VPN, such as VPN2, a control policy must be configured. This control policy dictates how traffic flows between sites, ensuring that all branch traffic is routed through the hub site.
Control Policy Components:
Site Lists: Define which sites are considered hubs and which are branches.
VPN Lists: Identify the VPNs to which the policy applies.
Control Policy: Use sequences to match routes and specify actions to accept or reject traffic based on the defined topology.
Policy Analysis:
Option A: Correctly defines site lists for hub sites (site-id 1-2) and creates a control policy that matches routes for VPN2, accepting routes from hub sites and rejecting routes from others. This ensures that traffic from branches (other sites) is only accepted if it routes through the hubs.
Other options either incorrectly define the site lists or do not properly match and set the routes to enforce the strict hub-and-spoke topology.
Policy Configuration:
policy
lists
vpn-list VPN2
vpn 2
site-list hub_sites
site-id 1-2
!
control-policy vpn_multi_topology
sequence 10
match route
site-list hub_sites
vpn-list VPN2
!
action accept
!
sequence 20
match route
vpn-list VPN2
!
action reject
!
default-action accept
Cisco SD-WAN Control Policy Configuration Guide
Cisco SD-WAN Hub-and-Spoke Topology Deployment Guide

NEW QUESTION # 63
Refer to the exhibit.

Refer to the exhibit vManage and vBond have an issue establishing a connection to vSmart Which two actions does the administrator take to fix the issue? (Choose two) Install the certificate received from the certificate server.

A. Manually resync vManage and vBond
B. Reconfigure the vSmart from CLI with the proper Hostname & System IP
C. Delete and re-add vSmart Click Generate and validate CSR
D. Request a certificate from the certificate server based on the CSR for the vSmart

Answer: C,D

NEW QUESTION # 64
In Cisco SD-WAN, which protocol is used for control connections between Cisco SD-WAN devices?

A. OSPF
B. OMP
C. DTLS
D. BGP

Answer: B

Explanation:
Section: Management and Operations
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/security/vedge/security-book/ security-overview.html#:~:text=The%20Overlay%20Management%20Protocol%20is,described%20in%
20Overlay%20Routing%20Overview.

NEW QUESTION # 65
Drag and drop the vManage policy configuration procedures from the left onto the correct definitions on the right.

Answer:

Explanation:

NEW QUESTION # 66
An engineer is adding a tenant with location JD 306432373 in vManage. What is the maximum number of alphanumeric characters that are accepted in the tenant name field?

A. 0
B. 1
C. 2
D. 3

Answer: D

Explanation:

NEW QUESTION # 67
Which template configures the out-of-band management VPN?
A)

B)

C)

D)

A. Option D
B. Option C
C. Option A
D. Option B

Answer: B

NEW QUESTION # 68
Refer to the exhibit.

Which command-line configuration on a WAN Edge device achieves these results?
A)

B)

C)

D)

A. Option D
B. Option A
C. Option B
D. Option C

Answer: C

NEW QUESTION # 69
Refer to the exhibit. An engineer must configure a policy on a SD-WAN Controller device. This policy will allow VPN99 at branch 1 for direct internet access when accessing Google Apps and using the routing table upon its unavailability. Which configuration must be applied to meet this requirement?

A. action accept
nat use-vpn 0
nat tallback
B. action accept
nat pool 1
nat tallback
C. action accept
nat overload
nat tallback
D. action accept
nat use-vpn 0
nat tallback

Answer: A

Explanation:
The goal is to enable Direct Internet Access (DIA) from VPN 99 for Google Apps, and to fall back to routing table if DIA is unavailable.
nat use-vpn 0 redirects traffic to the underlay (Internet) using VPN 0.
nat tallback ensures fallback to overlay routing (e.g., MPLS via vEdge 101) if Internet DIA is not reachable.

NEW QUESTION # 70
Which protocol is used to measure loss, latency, jitter, and liveliness of the tunnel between WAN Edge router peers?

A. IP SLA
B. OMP
C. BFD
D. NetFlow

Answer: C

Explanation:
https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2019/pdf/TECCRS-2014.pdf

NEW QUESTION # 71
Drag and drop the steps from the left into the order on the right to upload software on vManage repository that is accessible from maintenance > Software Repository.

Answer:

Explanation:

https://sdwan-docs.cisco.com/Product_Documentation/vManage_Help/Release_18.2/Maintenance/Software_Repository

NEW QUESTION # 72
Refer to the exhibit.

The control connection is failing. Which action resolves the issue?

A. Restore the reachability to the vSmart
B. Validate the certificates authenticity on vSmart
C. import vSmart in vManager
D. Upload the WAN Edge list on vManage.

Answer: A

Explanation:
Explanation
https://www.cisco.com/c/en/us/support/docs/routers/sd-wan/214509-troubleshoot-control-connections.html

NEW QUESTION # 73
What are the two components of an application-aware firewall? (Choose two.)

A. zone pair
B. default action
C. lists
D. firewall policy
E. sequence action
F. sequence

Answer: B,F

Explanation:
An application-aware firewall in Cisco SD-WAN provides advanced security by allowing policies to be defined based on specific applications and their behaviors.
Sequence: In the context of an application-aware firewall, a sequence defines the order in which firewall rules are evaluated. Each sequence can contain match conditions and corresponding actions to be taken if the conditions are met.
Default Action: The default action is a crucial component that specifies what action to take if none of the defined sequences match the traffic. This ensures that there is always a fallback action to handle unmatched traffic, providing a safety net for security policies.
:
Cisco SD-WAN Security Policy Configuration Guide
Cisco SD-WAN Firewall Policy Documentation

NEW QUESTION # 74
Drag and drop the actions from the left into the correct sequence on the right to create a data policy to direct traffic to the Internet exit.

Answer:

Explanation:

Explanation:
https://sdwan-docs.cisco.com/Product_Documentation/Software_Features/SD-WAN_Release_16.2/07Policy_Applications/04Using_a_vEdge_Router_as_a_NAT_Device/Configuring_Local_Internet_Exit

NEW QUESTION # 75
Which on-the-box security feature supported by the Cisco ISR 4451 SD-WAN device and not on vEdge?

A. Cloud Express service
B. Enterprise Firewall with Application Awareness
C. reverse proxy
D. IPsec/GRE cloud proxy

Answer: B

Explanation:
https://www.cisco.com/c/en/us/products/collateral/software/one-wan-subscription/guide-c07-740642.html#Step2

NEW QUESTION # 76
Drag and drop the actions from the left into the correct sequence on the right to create a data policy to direct traffic to the Internet exit.

https://sdwan-docs.cisco.com/Product_Documentation/Software_Features/SD-WAN_Release_16.2/07Policy_Applications/04Using_a_vEdge_Router_as_a_NAT_Device/Configuring_Local_Internet_Exit

Answer:

Explanation:

NEW QUESTION # 77
Which combination of platforms is managed by vManage?

A. ISR4351, ASR1009, vEdge2000, CSR1000v
B. ISR4321, ASR1001, Nexus, ENCS
C. ISR4321, ASR1001, ENCS, ISRv
D. ISR4351, ASR1002HX, vEdge2000, vEdge Cloud

Answer: C

Explanation:
Section: Management and Operations

NEW QUESTION # 78
A customer has MPLS and Internet as the TLOC colors An engineer must configure conlroJIers with the Internet and not with MPLS Which configuration achieves this requirement on vManage?
A)

B)

C)

D)