The CCNP Enterprise 300-440 ENCC exam is designed to validate your understanding and skills in designing and implementing cloud connectivity. To assist you in preparing for this 300-440 ENCC exam, PassQuestion provides the latest Designing and Implementing Cloud Connectivity 300-440 ENCC Exam Questions that cover all the topics in the actual 300-440 exam. Our Designing and Implementing Cloud Connectivity 300-440 ENCC Exam Questions are carefully designed to mirror the actual and potential exam questions that you can expect to encounter during the actual exam. It can significantly boost your confidence and equip you with the knowledge you need to pass your exam easily.
Designing and Implementing Cloud Connectivity v1.0 (300-440)
The Designing and Implementing Cloud Connectivity v1.0 (ENCC 300-440) is a comprehensive exam that lasts for 90 minutes and is directly linked with the CCNP Enterprise Certification. This exam is specifically designed to certify a candidate’s in-depth knowledge and understanding of various aspects of designing and implementing cloud connectivity. The areas of knowledge covered in this exam include, but are not limited to, architecture models, IPsec, SD WAN, and the design and operation of these systems.
In order to earn your CCNP Enterprise certification, it is a requirement to pass the core 350-401 ENCOR exam. In addition to this mandatory exam, you must also successfully complete an eligible concentration exam of your choice. One such choice could be the 300-440 ENCC exam – a great option for those seeking to showcase their expertise in cloud connectivity.
Exam Details
Exam Code: 300-440 ENCC
Exam Name: Designing and Implementing Cloud Connectivity
Duration: 90 minutes
Languages: English
Price: $300 USD
Associated certification: CCNP Enterprise, Cisco Certified Specialist – Enterprise Cloud Connectivity
Cisco 300-440 ENCC Exam Topics
15% 1.0 Architecture Models
1.1 Describe internet-based connectivity to cloud providers (AWS, Azure, and Google Cloud)
1.1.a Native IPsec
1.1.b Cisco SD-WAN internet connectivity
1.2 Describe private connectivity to cloud providers (AWS, Azure, and Google Cloud)
1.2.a MPLS provider
1.2.b Colocation provider
1.2.c SDCI regional cross-connect
1.3 Describe connectivity to SaaS cloud providers (AWS, Azure, and Google Cloud)
1.3.a Direct internet access models into SaaS
1.3.b Indirect access models via a Cloud Security Provider
1.3.c SaaS connectivity via a centralized internet gateway
1.3.d Dedicated connectivity to a SaaS provider
15% 2.0 Design
2.1 Recommend the connectivity model to provide high availability, resiliency, SLAs, and reliability based on business and technical requirements
2.2 Recommend the connectivity model based on network architecture requirements such as bandwidth, QoS, dedicated vs shared, multi-homing, and routing needs based on business and technical requirements
2.3 Recommend a connectivity model to meet regulatory compliance (NIST, FEDRAMP, ISO) based on business and technical requirements
2.4 Describe cloud-native security policies for AWS, Azure, and Google Cloud, such as east/west traffic within the cloud provider, backhaul internet traffic, inbound connectivity to the internet
25% 3.0 IPsec Cloud Connectivity
3.1 Configure IPsec internet-based secure cloud connectivity between an on-premises Cisco IOS XE router to a native AWS, Azure, and Google Cloud endpoint
3.2 Configure IPsec internet-based secure cloud connectivity between an on-premises Cisco IOS XE router and an AWS, Azure, or Google cloud-hosted Cisco IOS XE router
3.3 Configure routing on Cisco IOS XE to integrate with cloud networks using BGP and OSPF, including redistribution and static routing
25% 4.0 SD-WAN Cloud Connectivity
4.1 Configure Cisco SD-WAN internet-based secure cloud connectivity for AWS, Azure, and Google Cloud
4.2 Configure Cisco SD-WAN OnRamp to a SaaS cloud provider
4.3 Configure Cisco SD-WAN policies (north/south and east/west)
4.3.a Security
4.3.b Routing
4.3.c Application
20% 5.0 Operation
5.1 Diagnose IPsec internet-based secure cloud connectivity between an on-premises Cisco IOS XE router to a native AWS, Azure, and Google Cloud endpoint
5.2 Diagnose routing issues on Cisco IOS XE to integrate with cloud networks using BGP and OSPF, including redistribution and static routing
5.3 Diagnose Cisco SD-WAN internet-based secure cloud connectivity for AWS, Azure, and Google Cloud
5.4 Diagnose Cisco SD-WAN policy issues (north/south and east/west)
5.4.a Security
5.4.b Routing
5.4.c Application
View Online Designing and Implementing Cloud Connectivity 300-440 ENCC Free Questions
1. Which method is used to create authorization boundary diagrams (ABDs)?
A.identify only interconnected systems that are FedRAMP-authorized
B.show all networks in CIDR notation only
C.identify all tools as either external or internal to the boundary
D.show only minor or small upgrade level software components
Answer: C
2. A company has multiple branch offices across different geographic locations and a centralized data center. The company plans to migrate Its critical business applications to the public cloud infrastructure that is hosted in Microsoft Azure. The company requires high availability, redundancy, and low latency for its business applications. Which connectivity model meets these requirements?
A.ExpressRoute with private peering using SDCI
B.hybrid connectivity with SD-WAN
C.AWS Direct Connect with dedicated connections
D.site-to-site VPN with Azure VPN gateway
Answer: A
3. A company with multiple branch offices wants a suitable connectivity model to meet these network architecture requirements:
- high availability
- quality of service (QoS)
- multihoming
- specific routing needs
Which connectivity model meets these requirements?
A.hub-and-spoke topology using MPLS with static routing and dedicated bandwidth for QoS
B.star topology with internet-based VPN connections and BGP for routing
C.hybrid topology that combines MPLS and SD-WAN
D.fully meshed topology with SD-WAN technology using dynamic routing and prioritized traffic for QoS
Answer: D
4. Refer to the exhibit.
While troubleshooting an IPsec connection between a Cisco WAN edge router and an Amazon Web Services (AWS) endpoint, a network engineer observes that the security association status is active, but no traffic flows between the devices What is the problem?
A.wrong ISAKMP policy
B.identity mismatch
C.wrong encryption
D.IKE version mismatch
Answer: B
5. Refer to the exhibit.
A network engineer discovers that the policy that is configured on an on-premises Cisco WAN edge router affects only the route tables of the specific devices that are listed in the site list. What is the problem?
A.An inbound policy must be applied.
B.The action must be set to deny
C.A localized data policy must be configured.
D.A centralized data policy must be configured
Answer: D
6. Refer to the exhibit.
A company uses Cisco SD-WAN in the data center. All devices have the default configuration. An engineer attempts to add a new centralized control policy in Cisco vManage but receives an error message. What is the problem?
A. Apply an additional outbound control policy to override the site ID overlaps.
B. Site-list “All-Site” should be configured with a new match sequence that is lower than the sequence for site-list “Hub*.
C. A centralized control policy is already applied to the specific site ID and direction
D. The policy for “Hub” should be applied in the outbound direction, and the policy for “All-Site” should be applied inbound.
Answer: B
