ETExamTower
Sign in
300-440Updated 8d ago · Aug 28, 2026

300-440 ENCC: Designing and Implementing Secure Cloud Connectivity

84 questions across 1 topics, with suggested answers, explanations where available, and imported community discussion. The first 8 questions are free to preview.

Browse questions Practice mode

Topics

#TopicQuestionsFree
1IPsec Cloud Connectivity848

Preview

8 of 84 accessible
Question 1 · IPsec Cloud Connectivity Open

Refer to the exhibits. An engineer needs to redistribute OSPF internal routes into BGP to connect an on-premises network to a cloud provider. Which two commands must the engineer run on router R2? (Choose two.)

Question exhibitQuestion exhibit
Answer: A, D R2 must run a local BGP process in AS 100 and redistribute routes from its OSPF process 1 into that BGP process. Cisco IOS configures OSPF-to-BGP redistribution under `router bgp <autonomous-system>` with `redistribute ospf <process-id>`; therefore the required commands are `router bgp 100` and `redistribute ospf 1`. **Learn more:** [Cisco IOS XE IP Routing Configuration Guide — Redistributing Routes from One Routing Domain to Another](https://www.cisco.com/c/en/us/td/docs/routers/ios-xe/ip-routing/b-ip-routing/m_iri-iprouting.html)
Question 2 · SD-WAN Cloud Connectivity Open

Which method does a centralized internet gateway use to deliver connectivity to SaaS applications?

Answer: B A centralized internet gateway routes internet-bound traffic from on-premises infrastructure through a central gateway, where access controls can be enforced for SaaS applications.
Question 3 · Operation Open

Match the commands on the left with the purposes on the right to identify issues on a Cisco IOS XE SD-WAN device. <DragDrop items={["show sdwan policy app-route-policy-filter","show sdwan security-info","show sdwan system status","show policy-firewall config"]} slots={[{"answer":"show sdwan system status","id":"system_status","label":"Display the time and process information of the device, as well as CPU, memory, and disk usage data."},{"answer":"show policy-firewall config","id":"policy_firewall","label":"Validate the configured zone-based firewall."},{"answer":"show sdwan policy app-route-policy-filter","id":"app_route_policy","label":"Display information about application-aware routing policy matched packet counts on the Cisco IOS XE SD-WAN devices."},{"answer":"show sdwan security-info","id":"security_info","label":"View the security information that is configured for IPsec tunnel."}]} explanation={"`show sdwan system status` reports system time, processes, CPU, memory, and disk utilization. `show policy-firewall config` displays zone-pair and inspection-policy configuration for validating a zone-based firewall. `show sdwan policy app-route-policy-filter` exposes application-aware routing policy filter counters. `show sdwan security-info` displays IPsec security settings and pairwise-key information.\n\n**Learn more:** [Cisco Catalyst SD-WAN Monitor and Maintain Configuration Guide — System and Resource Status](https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/Monitor-And-Maintain/monitor-maintain-book/m-device-and-controllers.html) · [Cisco Catalyst SD-WAN Security Configuration Guide — IPsec Pairwise Keys](https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/security/ios-xe-17/security-book-xe/ipsec-pairwise-keys.html)"} reuse={false} />

Answer: —