300-440 Engineer Practice Questions
The free 300-440: Designing and Implementing Cloud Connectivity (ENCC) questions that deal with engineer, with answers and explanations. The full bank and the timed practice test cover every topic the exam asks about.
Question #2
Refer to the exhibit. Refer to the exhibits. An engineer must redistribute IBGP routes into OSPF to connect an on-premises network to a cloud provider. Which command must be configured on router R2?
Correct answer: D
Explanation
• This command redistributes the routes learned from BGP AS100 into OSPF Area 1, which allows router R2 to advertise those routes to router R1 and connect the on-premises network to the cloud provider. The other options are incorrect because they either redistribute the wrong routes or use the wrong syntax5 . I hope this helps you understand the question and the answer. If you have any other questions or requests, please let me know. I am always happy to help. References: 1: Learning Plan: Designing and Implementing Cloud Connectivity v1.0 (ENCC 300-440) Exam Prep 2: Designing and Implementing Cloud Connectivity (ENCC) v1.0 3: Cisco Multiprotocol Label Switching 4: Exploring Cisco Cloud OnRamp for Colocation 5: ENCC: Configuring IPsec VPN from Cisco IOS XE to AWS : [Deploying Cisco IOS VTI-Based Point-to-Point IPsec VPNs]
Question #3
Refer to the exhibit. An engineer needs to configure a site-to-site IPsec VPN connection between an on-premises Cisco IOS XE router and Amazon Web Services (AWS). Which configuration command must be placed in the blank in the code to complete the tunnel configuration?
Correct answer: B
Explanation
In the given scenario, an engineer is configuring a site-to-site IPsec VPN connection between an on-premises Cisco IOS XE router and AWS. The correct command to complete the tunnel configuration is ??tunnel source 20.20.20.21??. This command specifies the source IP address for the tunnel, which is essential for establishing a secure connection between two endpoints over the internet or another network1. References: • Configure IOS-XE Site-to-Site VPN Connection to Amazon Web Services - Cisco Community • [Security for VPNs with IPsec Configuration Guide, Cisco IOS XE Release 3S - Config
Question #6
An engineer must enable the OMP advertisement of BGP routes for a specific VRF instance on a Cisco IOS XE SD-WAN device. What should be configured after the global address-family ipv4 is configured?
Correct answer: B
Explanation
To enable the OMP advertisement of BGP routes for a specific VRF instance on a Cisco IOS XE SD-WAN device, the engineer must first configure the global address-family ipv4 and then enable bgp advertisement under the vrf definition. This will allow the device to advertise the BGP routes learned from the cloud provider to the OMP control plane, which will then distribute them to the other SD-WAN devices in the overlay network1 References := 1: Designing and Implementing Cloud Connectivity (ENCC) v1.0, Module 3: Implementing Cloud Connectivity, Lesson 3: Configuring IPsec VPN from Cisco IOS XE to AWS, Topic: Configuring BGP on the Cisco IOS XE Device, Page 3-24.
Question #10
An engineer is implementing a highly secure multitier application in AWS that includes S3, RDS, and some additional private links. What is critical to keep the traffic safe?
Correct answer: B
Explanation
Specific routing policies keep traffic between tiers on private links instead of the public internet, and S3 bucket policies restrict who can access the stored data and under which conditions.
Continue with 300-440: Designing and Implementing Cloud Connectivity (ENCC)
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in 300-440: Designing and Implementing Cloud Connectivity (ENCC), the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
All 300-440: Designing and Implementing Cloud Connectivity (ENCC) practice questions →