ENCC 300-440

Drag and drop the commands from the left onto the purposes on the right to identify issues on a Cisco IOS XE SD-WAN device.​

Refer to the exhibits.

An engineer needs to configure a site-to-site IPsec VPN connection between an on premises Cisco IOS XE router and Amazon Web Services (AWS). Which two IP prefixes should be used to configure the AWS routing options? (Choose two.)

• A. 30.30.30.0/30

• B. 20.20.20.0/24

• C. 30.30.30.0/24

• D. 50.50.50.0/30

• E. 40.40.40.0/24

An engineer must redistribute OSPF internal routes into BGP to connect an on-premises network to a cloud provider without introducing extra routes. Which two commands must be configured on router R2? (Choose two.)

• A. router ospf 1

• B. router bgp 100

• C. redistribute ospf 1

• D. redistribute bgp 100

• E. redistribute ospf 1 match internal external

An engineer must configure an IPsec tunnel to the cloud VPN gateway. Which Two actions send traffic into the tunnel? (Choose two.)

• A. Configure access lists that match the interesting user traffic.

• B. Configure a static route.

• C. Configure a local policy in Cisco vManage.

• D. Configure an IPsec profile and match the remote peer IP address.

• E. Configure policy-based routing.

An engineer must configure a CLI add-on feature template in Cisco vManage for enhanced policy-based routing (ePBR) for IPv4. These configurations were deleted:

• licensing config enable false

• licensing config privacy hostname true

• licensing config privacy version false

• licensing config utility utility-enable true

Drag and drop the steps from the left onto the order on the right to complete the configuration.

An engineer must configure an AppGoE service node for WAN optimization for applications that are hosted in the cloud using Cisco vManage for C8000V or C8500L-8S4X devices. Drag and drop the steps from the left onto the order on the right to complete the configuration.

An engineer must redistribute OSPF internal routes into BGP to connect an on-premises network to a cloud provider. Which two commands should the engineer run on router R2? (Choose two.)

• router bgp 100

• redistribute bgp 100

• router ospf 1

• redistribute ospf 1

• redistribute ospf 100

A company uses Cisco SD-WAN in the data center. All devices have the default configuration. An engineer attempts to add a new centralized control policy in Cisco vManage but receives an error message. What is the problem?

• A centralized control policy is already applied to the specific site ID and direction.

• The policy for "Hub" should be applied in the outbound direction, and the policy for "All-Site" should be applied inbound.

• Apply an additional outbound control policy to override the site ID overlaps.

• Site-list "All-Site" should be configured with a new match sequence that is lower than the sequence for site-list "Hub*.

Which feature is unique to Cisco SD-WAN IPsec tunnels compared to native IPsec VPN tunnels?

• real-time dynamic path selection

• tunneling protocols

• end-to-end encryption

• authentication mechanisms

Which architecture model establishes internet-based connectivity between on-premises networks and AWS cloud resources?

• A. That establishes an iPsec VPN tunnel with Internet Key Exchange (IKE) for secure key negotiation and encrypted data transmission

• B. That relies on AWS Elastic Load Balancing (ELB) for traffic distribution and uses SSL/TLS encryption for secure data transmission.

• C. That employs AWS Direct Connect for a dedicated network connection and uses private IP addresses tor secure communication.

• D. That uses Amazon CloudFront for caching and distributing content globally and uses HTTPS for secure data transfer.