Summer Certification Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Home
Cisco
CCNP Enterprise
300-415
Implementing Cisco SD-WAN Solutions (300-415 ENSDWI) Questions and Answers

Pass the Cisco CCNP Enterprise 300-415 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam 300-415 Premium Access

View all detail and faqs for the 300-415 exam

Go to Exam

730 Students Passed

89% Average Score

98% Same Questions

Viewing page 9 out of 14 pages

Viewing questions 81-90 out of questions

Questions # 81:

Drag and drop the policies from the left onto the correct policy types on the right.

Question # 81

Options:

Answer

Answer:

Questions # 82:

Refer to the exhibit.

Question # 82

Which two configurations are needed to get the WAN Edges registered with the controllers when certificates are used? (Choose two)

Options:

Generate a CSR manually within vManage server

Generate a CSR manually on the WAN Edge

Request a certificate manually from the Enterprise CA server

Install the certificate received from the CA server manually on the WAN Edge

Install the certificate received from the CA server manually on the vManage

Answer

A, E

Explanation

https://www.cisco.com/c/dam/en/us/td/docs/solutions/CVD/SDWAN/cisco-sd-wan-certificates-deploy-2020aug.pdf

Questions # 83:

A network administrator is bringing up one WAN Edge for branch connectivity. Which types of tunnels form when the WAN edge router connects to the SD-WAN fabric?

Options:

DTLS or TLS tunnel with vBond controller and IPsec tunnel with vManage controller.

DTLS or TLS tunnel with vBond controller and IPsec tunnel with other WAN Edge routers.

DTLS or TLS tunnel with vSmart controller and IPsec tunnel with other Edge routers.

DTLS or TLS tunnel with vSmart controller and IPsec tunnel with vBond controller.

Answer

Questions # 84:

Drag and drop the security terminologies from the left onto the PCI-compliant network features and devices on the right.

Question # 84

Options:

Answer

Answer:

Questions # 85:

Which value is verified in the certificates to confirm the identity of the physical WAN Edge device?

Options:

Serial Number

OTP

System-IP

Chassis-ID

Answer

Explanation

https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/sdwan-xe-gs-book/manage-certificates.html

Questions # 86:

An engineer is configuring a WAN Edge router for DIA based on matching QoS parameters. Which two actions accomplish this task? (Choose two.)

Options:

Apply a QoS map policy.

Configure a control policy.

Configure a centralized data policy.

Configure NAT on the transport interface.

Apply a data policy on WAN interface.

Answer

C, D

Explanation

https://www.cisco.com/c/dam/en/us/td/docs/solutions/CVD/SDWAN/sdwan-dia-deploy-2020aug.pdf

Questions # 87:

Drag and drop the steps from the left into the sequence on the right for a WAN Edge router after powering on for zero touch provisioning.

Question # 87

Options:

Answer

Answer:

Questions # 88:

Which control policy assigned to Drenches in the out direction establishes a strict hub-and-spoke topology tor VPN2?

Question # 88

Options:

Option

Answer

Explanation

To establish a strict hub-and-spoke topology in Cisco SD-WAN for a specific VPN, such as VPN2, a control policy must be configured. This control policy dictates how traffic flows between sites, ensuring that all branch traffic is routed through the hub site.

Control Policy Components:

Site Lists: Define which sites are considered hubs and which are branches.

VPN Lists: Identify the VPNs to which the policy applies.

Control Policy: Use sequences to match routes and specify actions to accept or reject traffic based on the defined topology.

Policy Analysis:

Option A: Correctly defines site lists for hub sites (site-id 1-2) and creates a control policy that matches routes for VPN2, accepting routes from hub sites and rejecting routes from others. This ensures that traffic from branches (other sites) is only accepted if it routes through the hubs.

Other options either incorrectly define the site lists or do not properly match and set the routes to enforce the strict hub-and-spoke topology.

Policy Configuration:

policy

lists

vpn-list VPN2

vpn 2

site-list hub_sites

site-id 1-2

control-policy vpn_multi_topology

sequence 10

match route

site-list hub_sites

vpn-list VPN2

action accept

sequence 20

match route

vpn-list VPN2

action reject

default-action accept

Cisco SD-WAN Control Policy Configuration Guide

Cisco SD-WAN Hub-and-Spoke Topology Deployment Guide

Questions # 89:

A company deploys a Cisco SD-WAN solution but has an unstable Internet connection. When the link to vSmart comes back up, the WAN Edge router routing table is not refreshed, and some traffic to the destination network is dropped. The headquarters is the hub site, and it continuously adds new sites to the SD-WAN network. An engineer must configure route refresh between WAN Edge and vSmart within 2 minutes. Which configuration meets this requirement?

Question # 89