Refer to the exhibit. A network engineer discovers that the policy that is configured on an on-premises Cisco WAN edge router affects only the route tables of the specific devices that are listed in the site list. What is the problem?

A centralized data policy must be configured

An inbound policy must be applied.

A localized data policy must be configured.

A centralized data policy must be configured

A company with multiple branch offices wants a connectivity model to meet its network architecture requirements. The company focuses on ensuring low latency and efficient routing for its critical business applications. Which connectivity model meets these requirements?

fully meshed topology with SD-WAN technology, using dynamic routing and BGP as the routing protocol

hub-and-spoke topology with SD-WAN technology, using dynamic routing and OSPF as the routing protocol

fully meshed topology with SD-WAN technology, using dynamic routing and BGP as the routing protocol

point-to-point topology using dedicated leased lines and static routing

star topology with internet-based VPN connections and static routing

An engineer must enable the OMP advertisement of BGP routes for a specific VRF instance on a Cisco IOS XE SD-WAN device. What should be configured after the global address-family ipv4 is configured?

Set the VRF-specific route advertisements.

Refer to the exhibit. Refer to the exhibits. An engineer troubleshoots a Cisco SD-WAN connectivity issue between an on-premises data center WAN Edge and a public cloud provider WAN Edge. The engineer discovers that BFD is Dapping on vEdge1. What is the problem?

The remote Edge device failed to respond BFD keepalives.

The remote Edge device BFD is down.

The remote Edge device failed to respond BFD keepalives.

The remote Edge device has a duplicate IP address.

The control plane deleted the BFD session.

An engineer is implementing a highly secure multitier application in AWS that includes S3. RDS, and some additional private links. What is critical to keep the traffic safe?

specific routing and bucket policies

VPC peering and bucket policies

specific routing and bucket policies

EC2 super policies and specific routing policies

gateway load balancers and specific routing policies

What is the role of service providers to establish private connectivity between on-premises networks and Google Cloud resources?

facilitate direct, dedicated network connections through Google Cloud Interconnect

enable intelligent routing and dynamic path selection using software-defined networking

provide end-to-end encryption for data transmission using native IPsec

accelerate content delivery through integration with Google Cloud CDN

Refer to the exhibits. Refer to the exhibits. An engineer must redistribute OSPF internal routes into BGP to connect an on-premises network to a cloud provider without introducing extra routes. Which two commands must be configured on router R2? (Choose two.)

redistribute ospf 1 match internal external

An engineer must configure an IPsec tunnel to the cloud VPN gateway. Which Two actions send traffic into the tunnel? (Choose two.)

Configure access lists that match the interesting user traffic.

Configure policy-based routing.

Configure access lists that match the interesting user traffic.

Configure a local policy in Cisco vManage.

Configure an IPsec profile and match the remote peer IP address.

Configure policy-based routing.

Which architecture model establishes internet-based connectivity between on-premises networks and AWS cloud resources?

That establishes an iPsec VPN tunnel with Internet Key Exchange (IKE) for secure key negotiation and encrypted data transmission

That relies on AWS Elastic Load Balancing (ELB) for traffic distribution and uses SSL/TLS encryption for secure data transmission.

That employs AWS Direct Connect for a dedicated network connection and uses private IP addresses tor secure communication.

That uses Amazon CloudFront for caching and distributing content globally and uses HTTPS for secure data transfer.

Which feature is unique to Cisco SD-WAN IPsec tunnels compared to native IPsec VPN tunnels?

real-time dynamic path selection

Which approach does a centralized internet gateway use to provide connectivity to SaaS applications?

Internet traffic from the on-premises infrastructure is routed through a centralized gateway that provides access controls for SaaS applications.

A cloud-based proxy server routes traffic from the on-premises infrastructure to the SaaS provider data center.

Internet traffic from the on-premises infrastructure is routed through a centralized gateway that provides access controls for SaaS applications.

VPN connections are used to provide secure access to SaaS applications from the on-premises infrastructure.

A dedicated, private connection is established between the on-premises infrastructure and the SaaS provider data center using colocation services.

Refer to the exhibits. Refer to the exhibits. An engineer must redistribute only the 10.0.10.0/24 network into BGP to connect an on-premises network to a public cloud provider. These routes are currently redistributed: Which command is missing on router R2?

redistribute ospf 1 match external

neighbor 10.0.10.2 remote-as 100

redistribute ospf 1 match internal

redistribute ospf 1 match external

neighbor 10.0.10.0/24 remote-as 100

Refer to the exhibits. Refer to the exhibit. An engineer successfully brings up the site-to-site VPN tunnel between the remote office and the AWS virtual private gateway, and the site-to-site routing works correctly. However, the end-to-end ping between the office user PC and the AWS EC2 instance is not working. Which two actions diagnose the loss of connectivity? (Choose two.)

Check the security group rules for the host VPC.

Check the network security group rules on the host VNET.

Check the security group rules for the host VPC.

On the Cisco VPN router, configure the IPsec SA to allow ping packets.

On the AWS private virtual gateway, configure the IPsec SA to allow ping packets.

Refer to the exhibit. A company uses Cisco SD-WAN in the data center. All devices have the default configuration. An engineer attempts to add a new centralized control policy in Cisco vManage but receives an error message. What is the problem?

Site-list 'All-Site' should be configured with a new match sequence that is lower than the sequence for site-list 'Hub*.

A centralized control policy is already applied to the specific site ID and direction

The policy for 'Hub' should be applied in the outbound direction, and the policy for 'All-Site' should be applied inbound.

Apply an additional outbound control policy to override the site ID overlaps.

Site-list 'All-Site' should be configured with a new match sequence that is lower than the sequence for site-list 'Hub*.

A company with multiple branch offices wants a suitable connectivity model to meet these network architecture requirements:* high availability* quality of service (QoS)* multihoming* specific routing needsWhich connectivity model meets these requirements?

fully meshed topology with SD-WAN technology using dynamic routing and prioritized traffic for QoS

hub-and-spoke topology using MPLS with static routing and dedicated bandwidth for QoS

star topology with internet-based VPN connections and BGP for routing

hybrid topology that combines MPLS and SD-WAN

fully meshed topology with SD-WAN technology using dynamic routing and prioritized traffic for QoS

A company has multiple branch offices across different geographic locations and a centralized data center. The company plans to migrate Its critical business applications to the public cloud infrastructure that is hosted in Microsoft Azure. The company requires high availability, redundancy, and low latency for its business applications. Which connectivity model meets these requirements?

ExpressRoute with private peering using SDCI

hybrid connectivity with SD-WAN

AWS Direct Connect with dedicated connections

site-to-site VPN with Azure VPN gateway

Which method is used to create authorization boundary diagrams (ABDs)?

identify all tools as either external or internal to the boundary

identify only interconnected systems that are FedRAMP-authorized

show all networks in CIDR notation only

identify all tools as either external or internal to the boundary

show only minor or small upgrade level software components

Cisco 300-440 Practice Test 1 - Free Online Exam Prep & Questions

Question 1 / 38

Refer to the exhibit.

Cisco 300-440 image Question 1 112674 10072024005928000000

While troubleshooting an IPsec connection between a Cisco WAN edge router and an Amazon Web Services (AWS) endpoint, a network engineer observes that the security association status is active, but no traffic flows between the devices What is the problem?

wrong ISAKMP policy

identity mismatch

wrong encryption

IKE version mismatch

Comment (0)

Cisco 300-440 Practice Test 1

Question

Cisco 300-440 Practice Tests

Practice Tests