Free Practice Questions for the Cisco CCNP Enterprise 300-415 Exam (2026 Updated)

Which two products are used to deploy Cisco WAN Edge Router virtual platforms? (Choose two.)

Which two architectural components are part of an SD-WAN high availability vManage cluster? (Choose two.)

An engineer must use data prefixes to configure centralized data policies using the vManage policy configuration wizard. What is the first step to accomplish this task?

Which routing protocol is used to exchange control plane information between vSmart controllers and WAN Edge routers in the Cisco SD-WAN secure extensible network?

An engineer is configuring a shaping rate of 1 Mbps on the WAN link of a WAN Edge router Which configuration accomplishes this task’?

What is a default protocol for control plane connection?

Which configuration change allows direct internet access at the branch site for YouTube traffic?

Which table is used by the vSmart controller to maintain service routes of the WAN Edge routers in the hub and local branches?

In the Cisco SD_WAN solution, vSmart controller is responsible for which two actions? (Choose two.)

Refer to the exhibit.

A network administrator is configuring OMP in vManage to advertise all the paths for the same prefix from a site that has two WAN Edge devices Each WAN Edge device is connected to three ISPs and two private MPLS transports. What is the minimum value for ' Number of Paths advertised per Prefix " that should be configured?

An engineer must apply the configuration for certificate installation to vBond Orchestrator and vSmart Controller. Which configuration accomplishes this task?

Which two different states of a WAN Edge certificate are shown on vManage? (Choose two.)

Refer to the exhibit.

An SD-WAN customer has 23 sites connected to its hub site, where a pair of WAN Edge devices and controllers are placed. All other branches have a single WAN Edge device connected to multiprotocol label switching (MPLS) and public internet circuits. An engineer must configure application-aware routing for a branch that has MPLS and public internet circuits provisioned using feature templates. The requirements for application-aware routing are:

All types of traffic prefers using public-internet circuit.

If the average latency reaches 100 ms, jitter 85 ms, and packet loss 5%, then video and voice traffic switches to the MPLS circuit.

Which feature template must be configured or modified in addition to configuring a centralized policy?

An engineer is troubleshooting a vEdge router and identifies a “DCONFAIL – DTLS connection failure” message. What is the problem?

Refer to the exhibit A small company was acquired by a large organization As a result, the new organization decided to update information on their Enterprise RootCA and generated a new certificate using openssl Which configuration updates the new certificate and issues an alert in vManage Monitor | Events Dashboard?

A company deploys a Cisco SD-WAN solution but has an unstable Internet connection. When the link to vSmart comes back up, the WAN Edge router routing table is not refreshed, and some traffic to the destination network is dropped. The headquarters is the hub site, and it continuously adds new sites to the SD-WAN network. An engineer must configure route refresh between WAN Edge and vSmart within 2 minutes. Which configuration meets this requirement?

Configure individual VRFs for each customer according to the topology to achieve these goals :

R1

R2

SW1

SW2

SW3

Refer to the exhibit A WAN Edge device was recently added to vManage but a control connection could not be established Which action resolves this issue?

In a Cisco SD-WAN network, which component is responsible for distributing route and policy information via the OMP?

How is TLOC defined?

Which combination of platforms are managed by vManage?

Which component is used to optimize the multicast distribution tree enabled through the multicast network?

An enterprise is continuously adding new sites to its Cisco SD-WAN network. It must configure any cached routes flushed when OMP peers have lost adjacency Which configuration allows the cached OMP routes to be flushed after every 24 hours from its routing table?

Refer to the exhibit.

The tunnel interface configuration on both WAN Edge routers is:

Which configuration for WAN Edge routers will connect to the Internet?

Refer to the exhibit. vManage logs are available for the past few months. A device name change deployed mistakenly at a critical site. How is the device name change tracked by operation and design teams?

A)

B)

C)

Refer to the exhibit. The network administrator has configured a centralized topology policy that results in the displayed routing table at a branch office. Which two configurations are verified by the output? [Choose two.)

What is the result during a WAN Edge software upgrade process if the version of the WAN Edge software is higher than the one running on a controller device?

Refer to the exhibit.

The engineer must assign community tags to 3 of its 74 critical server networks as soon as that are advertised to BGP peers. These server networks must not be advertised outside AS. Which configuration fulfill this requirement?

A)

B)

C)

D)

Which attribute identifies the type of a vRoute?

A policy is created to influence routing path in the network using a group of prefixes. What policy application will achieve this goal when applied to a site List?

Which controller is excluded from the process of checking against the authorized, allowed list?

What is the OMP graceful restart default value on vSmart controllers and WAN Edge routers?

What is the advantage of instating the controller on-premises?

Which control policy assigned to Drenches in the out direction establishes a strict hub-and-spoke topology tor VPN2?

A)

B)

C)

D)

Which issue triggers the Cisco Umbrella resolver to toward DNS requests to the intelligent proxy?

Which issue triggers the Cisco Umbrella resolver to toward DNS requests to the intelligent proxy?

What must an engineer conewef when decoying an SD-WAN on-pfemlses architecture based on ESXi hypervisor?

Refer to the exhibit Which command allows traffic through the IPsec tunnel configured in VPN 0?

After deploying Cisco SD-WAN the company realized that by default, all sites built direct IPsec VPN tunnels to each other In their previous topology all spoke sites used the head office as their next hop for the LAN segment that belongs to network 40.0.0.0/16 The company wants to deploy its previous policy, which allows the 40.0.0.0/16 network that originates at the hub to advertise to the spokes. Which configuration meets the requirement ' ?

A)

B)

C)

D)

What prohibits deleting a VNF image from the software repository?

Which service VPN must be reachable from all WAN Edge devices and the controllers?

In which Cisco SD-WAN deployment scenario does Cisco Umbrella SIG deliver the most value?

Which protocol is used by the REST API to communicate with network devices in the Cisco SD-WAN network?

Refer to the exhibit. An engineer must block FTP traffic coming in from a particular Service VPN on a WAN Edge device Which set of steps achieves this goal?

Which attributes are configured to uniquely Identify and represent a TLOC route?

How many network interface cards are needed to add in virtual machine settings when installing vSmart controller on VMware vSphere ESXi Hypervisor software?

Two sites have one WAN Edge each WAN Edge has two public TLOCs with no restriction configured. There is full reachability between the TLOCs. How many data tunnels are formed on each Edge router?

Which routes are similar to the IP route advertisements when the routing information of WAN Edge routers is learned from the local site and local routing protocols?

Refer to the exhibit. Which configuration stops Netconf CLI logging on WAN Edge devices during migration?

An engineer is tasked to improve throughput for connection-oriented traffic by decreasing round-trip latency. Which configuration will achieve this goal?

Which component of the Cisco SD-WAN network assures that only valid customer nodes are participating in the overlay network?

An engineer is configuring a data policy for IPv4 prefixes for a single WAN Edge device on a site with multiple WAN Edge devices How is this policy added using the policy configuration wizard?

Drag and drop the steps from the left into the sequence on the right for a WAN Edge router after powering on for zero touch provisioning.

A customer has 1 to 100 service VPNs and wants to restrict outbound updates for VPN1 Which control policy configuration restricts these updates?

A)

B)

C)

D)

Refer to the exhibit.

A customer wants to implement primary and secondary Cisco SD-WAN overlay routing for prefixes that are advertised for both data centers. The east data center (TLOC 101.101.101.101) is primary for east sites, and the west data center (TLOC 100.100.100.100) is primary for west sites. Which configuration change achieves this objective?

Which device in the SD- WAN solution receives and categorizes event reports, and generates alarms?

A network administrator is bringing up one WAN Edge for branch connectivity. Which types of tunnels form when the WAN edge router connects to the SD-WAN fabric?

Which feature builds transport redundancy by using the cross link between two redundant WAN Edge routers?

Refer to the exhibit.

An engineer is troubleshooting a control connection Issue. What does " connect " mean in this how control connections output?

Which VManage dashboard is used to monitor the next-hop reachability between two devices traversing through OMP for a service VPN’

Refer to the exhibit.

An enterprise has hub and spoke topology where it has several VPNs. An engineer must allow users in VPN91 to reach users in VPN92 and VPN10 to reach VPN91 and VPN92. Which configuration meets these requirements?

Which port is used for vBond under controller certificates if no alternate port is configured?

Refer to the exhibit.

cEdge101 has six possible routes to connect to spokes. However, only four routes are currently in use. Which CLI configuration ensures that all six routes are used?

How is the scalability of the vManage increased in Cisco SD-WAN Fabric?

Which multicast component is irrelevant when defining a multicast replicator outside the local network without any multicast sources or receivers?

Refer to the exhibit. An enterprise decides to use the Cisco SD-WAN Cloud onRamp for SaaS feature and utilize H.Q site Biz iNET to reach SaaS Cloud for branch C. currently reaching SaaS Cloud directly. Which role must be assigned to devices at both sites in vManage Cloud Express for this solution to work?

Which encryption algorithm secures binding exchanges Between Cisco TrustSec SXP peers?

How many subnets are necessary in Azure VNet for a WAN Edge device to function in the cloud deployment?

Refer to the exhibit Which configuration ensures that OSPF routes learned from Site2 are reachable at Sitel and vice-versa?

An engineer is troubleshooting a certificate issue on vEdge. Which command is used to verify the validity of the certificates?

Which device should be configured with the service chain IP address to route intersite traffic through a firewall?

How is vBond reachability resolved by vManage?

Which command verifies a policy that has been pushed to the vEdge router?

What is the role of the Session Traversal Utilities for NAT server provided by the vBond orchestrator?

An engineer is configuring a WAN Edge router for DIA based on matching QoS parameters. Which two actions accomplish this task? (Choose two.)

How does the replicator role function in cisco SD-WAN?

What are the two functions of vSmart? (Choose two)

Which alarm setting is configured to monitor serious events that affect but do not shut down, the operation of a network function?

Which OSPF command makes the WAN Edge router a less preferred exit from a site with a dual WAN Edge design?

A)

B)

C)

D)

Refer to the exhibit The network team must configure ElGRP peering at HQ with devices in the service VPN connected to WAN Edge CSRv. CSRv is currently configured with

Which configuration on the WAN Edge meets the requiremnet

A)

B)

C)

D)

On which device is a service FW address configured to Insert firewall service at the hub?

What is a key element used in a vBond Orchestrator redundancy topology?

A WAN Edge device has several service VPNs with no routing protocol configured in the service VPNs The device must be configured so that all connected routes are visible in OMP for VPN 10 Which configuration meets the requirement?

A)

B)

C)

D)

Refer to the exhibit. Which configuration extends the INET interface on R1 to be used by R2 for control and data connections?

A)

B)

C)

Drag and drop the attributes from the left that make each transport location unique onto the right. Not all options are used.

An administrator must configure an ACL for traffic coming in from the service-side VPN on a specific WAN device with circuit ID 391897770. Which policy must be used to configure this ACL?

Which two criteria ate supported to filter traffic on a Cisco Umbrella Cloud-delivered firewall? (Choose two )

Refer to the exhibit vManage and vBond have an issue establishing a connection with each other Which action resolves the issue?

Refer to the exhibit.

The WAN Edge router at the data centers does not use NAT and has been configured with color restriction. Which color configuration needs to be associated to the WAN Edge router ' s VPN 0 interface to bring up the data plane tunnels?

Which protocol advertises WAN edge routes on the service side?

What is the main purpose of using TLOC extensions in WAN Edge router configuration?

The network administrator is configuring a QoS scheduling policy on traffic received from transport side tunnels on WAN Edge 5000 routers at location 406141498 Which command must be configured on these devices?

The SD-WAN network is configured with a default full-mesh topology. The SD-WAN engineer wants the Barcelona WAN Edge to use the MPLS TLOC when forwarding Telnet traffic based on a configured SLA class list. Which configured must the engineer use to create a policy to call the SLA class and set the preferred color to MPLS?

A)

B)

C)

D)

Which two services are critical for zero touch provisioning on-boarding? (Choose two)

Which plane assists in the automatic onboarding of the SD-WAN routers into the SD-WAN overlay?

How many vManage NMSs should be installed in each domain to achieve scalability and redundancy?

Which two features does the application firewall provide? (Choose two.)

What is the default value (in milliseconds) set tor the poll interval in the BFD basic configuration?

An engineer must automate certificate signing through Cisco. Which vManage configuration achieves this task?

A)

B)

C)

D)

Which TLOC color is used for site-to-site communication in a Google Cloud integration with Cisco SD-WAN?

Which storage format Is used when vManage Is deployed as a virtual machine on a KVM hypervisor?

What is a benefit of the application aware firewall feature in the Cisco SD-WAN solution?

Which command on a WAN Edge device displays the information about the colors present in the fabric that are learned from vSmart via OMP?

An engineer wants to automate the onboarding process for a WAN Edge router with vManage. Which command will accomplish this?

Which configuration allows VPN 10 traffic to have direct internet access locally from the WAN Edge device?

A)

B)

C)

D)

An engineering team must prepare a traffic engineering policy where an MPLS circuit is preferred for traffic coming from the Admin VLAN Internet should be used as a backup only. Which configuration fulfill this requirement?

A)

B)

C)

D)

An enterprise has several sites with multiple VPNs that are isolated from each other A new requirement came where users in VPN 73 must be able to talk to users in VPN 50 Which configuration meets this requirement?

Refer to the exhibit.

vManage and vBond have an issue establishing a connection to each other. Which configuration resolves the issue?

A company is using Catalyst SD-WAN Manager as its root certificate authority server and must generate a root certificate using the vShell (Linux) built into the CLI of Catalyst SD-WAN Manager. Which command must be issued to generate the root certificate?

Which two platforms for the Cisco SD-WAN architecture are deployable in a hypervisor on-premises or in IAAS Cloud? (Choose two.)

What is a requirement for a WAN Edge to reach vManage, vBond, and vSmart controllers in a data center?

Refer to the exhibit.

An enterprise has enabled load balancing over MPLS and Internet links. Which feature from the monitoring tool does an engineer use to visualize the available links utilized by the data traffic between Service VPNs?

An engineer must configure two branch WAN Edge devices where an Internet connection is available and the controllers are in the headquarters. The requirement is to have IPsec VPN tunnels established between the same colors. Which configuration meets the requirement on both WAN Edge devices?

Refer to exhibit. An engineer is troubleshooting tear of control connection even though a valid CertificateSerialNumber is entered. Which two actions resolve Issue? (Choose two)

How many cloud gateway instance(s) can be created per region when provisioning Cloud OnRamp for Multicloud from AWS in a multiregion environment?

Refer to the exhibit.

An MPLS connection on R2 must extend to R1 Users behind R1 must have dual connectivity for data traffic Which configuration provides R1 control connectivity over the MPLS connection?

A)

B)

C)

D)

How are custom application ports monitored in Cisco SD-WAN controllers?

Which two actions are necessary to set the Controller Certificate Authorization mode to indicate a root certificate? (Choose two)

A network administrator is configuring an application-aware firewall between inside zones to an outside zone on a WAN edge router using vManage GUI. What kind of Inspection is performed when the ‘’inspect’’ action is used?

Which policy allows communication between TLOCs of data centers and spokes and blocks communication between spokes?

Which action is performed during the onboarding process when a WAN Edge router is connected to ZTP server ztp.viptela com?

What is an advantage of using auto mode versus static mode of power allocation when an access point is connected to a PoE switch port?

An engineer is adding a tenant with location ID 399533345 in vManage. What is the maximum number of alphanumeric characters that is accepted in the tenant name filed?

Refer to the exhibit. An ongineer configured OMP with an ovorlay-as of 10666. What is tho AS-PATH for prefix 104.104.104.104/32 on R1007?

A customer has MPLS and Internet as the TLOC colors An engineer must configure conlroJIers with the Internet and not with MPLS Which configuration achieves this requirement on vManage?

A)

B)

C)

D)

An engineer must configure the SD-WAN Edge router to identify DSCP 26 traffic coming from the router ' s local site and then change the DSCP value to DSCP 18 before sending it over to the SD-WAN fabric. What are the two ways to create the required configuration? (Choose two).

An engineer is configuring the branch office with a 172.16.0.0/16 subnet to use DIA for Internet traffic. All other traffic must flow to the central site or branches using the MPLS circuit Which configuration meets the requirement?

A)

B)

C)

D)

Refer to the exhibit The engineering must assign tags to 3 Of its 74 server networks as soon as they are advertised to peers These server network must not be advertised AS which configuration fulfil the requirement?

A)

B)

C)

D)

What is a description of vManage NMS?

Which two types of SGT propagation are supported by Cisco TrustSec? (Choose two.)

What problem happens on a device with two serial numbers, a unique device identifier (UDI), and secure unique device identifier (SUDI) when an engineer provisions ISR 4000 by PnP using only a UDI?