300-440 Exam Questions

Refer to the exhibit. An engineer establishes IPsec, internet-based, secure cloud connectivity between an on-premises Cisco IOS XE router and a native AWS endpoint. Which parameter...

Refer to the exhibit. An engineer is establishing a VPN tunnel from the Google Cloud VPN gateway toward the external IP addresses of the Montreal branch and the Toronto site. The e...

Refer to the exhibit. Which tunnel mode must be configured to allow cloud gateway connectivity to the VPC through the transit gateway using an AWS IPSec VPN approach?

Which two types of target gateways are used to configure an AWS site-to-site VPN? (Choose two.)

Refer to the exhibit. An engineer is troubleshooting an IPSec connectivity issue between an on- premises data center and a public cloud provider. Which two conclusions should the e...

Refer to the exhibit. An engineer must configure a site-to-site IPsec VPN connection between an on-premises Cisco IOS XE router and Amazon Web Services. Which IP address completes...

A network engineer configures a localized data policy on a router, but the configuration blocks data traffic between the routers on the SD-WAN overlay network. The configuration al...

Refer to the exhibit. An engineer must configure Cisco Catalyst SD-WAN connectivity between an on-premises data center and AWS. The GigabitEthernet0 interface is used for public In...

An engineer must deploy Cisco Catalyst SD-WAN, route software as a service application traffic for optimal performance, and route other types of traffic through the data center. Wh...

Refer to the exhibit. The policy has failed to stop DOS attacks from within the service VPN 100. The counter shows no logб but the destination network reported DOS attacks from net...

An engineer configured a Cisco Catalyst SD-WAN router for SIG and entered the secure- internet-gateway configuration level What is the next step to implement a Cisco SIG using Zsca...

Refer to the exhibit. The output shows a configured jitter variance of 10 ms. Which path is optimal for network traffic?

What is the advantage of using Cisco Catalyst SD-WAN for connectivity between on-premises networks and cloud resources?

An engineer needs to configure Cisco Catalyst SD-WAN connectivity between an on-premises data center and AWS. The GigabitEthernet1 interface is used for public Internet connectivit...

Refer to the exhibit. An engineer is analyzing the packet flow from the Cisco Edge router named Branch1 on a Cisco vSmart controller. The engineer discovers that traffic destined f...

Refer to the exhibit. An engineer configured Cisco Catalyst SD-WAN interfaces on the SD-WAN router for AWS Direct Connect. Which command must be configured on router R1 for a secur...

Refer to the exhibit. An engineer needs to implement a centralized control policy on a Cisco vSmart controller so that traffic from Cisco IOS XE 1 is load balanced across Cisco IOS...

An engineer needs to configure a Cisco Catalyst SD-WAN centralized policy for peer-to-peer applications using Cisco vManage. Which list is required to create the groups of interest...

An engineer must implement a Cisco Secure Internet Gateway by using Cisco Umbrella over a gateway site that has the NBAR protocol enabled. Which action is required after the tunnel...

An engineer needs to implement a connectivity framework that will dynamically adjust the shaper parameters based on the current available Internet bandwidth in both directions. Whi...

Refer to the exhibit. An engineer troubleshoots a Cisco Catalyst SD-WAN connectivity issue between an on-premises data center and a public cloud provider WAN Edge device. The engin...

An engineer is creating tunnel connections to establish control connections from a Cisco WAN Edge device to a Cisco vSmart Controller that is hosted in Amazon Web Services. What is...

An engineer must enable the OMP advertisement of BGP routes for all the VRFs on a Cisco IOS XE SD-WAN device. Which action should be taken after the address family is configured?

An engineer is configuring a Cisco Catalyst SD-WAN device access policy using Cisco vManage. SSH traffic from 192.168.10.0/24 to the control plane is allowed. After allowing connec...

Refer to the exhibit. A network engineer is troubleshooting an issue where a remote router fails to learn any routes from a local Cisco IOS XE router that has BGP configured. The e...

An engineer is resolving connectivity complications in a tunnel linking on-premises Cisco Catalyst SD-WAN. Amazon Web Services, and a Cisco IOS XE unit with IP configuration errors...

Refer to the exhibit. An engineer troubleshoots the control connection from the Cisco Catalyst SD-WAN router to the cloud-hosted SD-WAN vManage controller. What is the problem?

Drag and Drop Question A redundant service-side IPsec tunnel is created between the on-premises data center SD-WAN edge router and AWS. An engineer must configure dynamic routing b...

Drag and Drop Question An engineer must use Cisco vManage to configure Cloud OnRamp for Microsoft 365. The engineer enabled Cloud OnRamp for SaaS. Drag and drop the steps from the...

Drag and Drop Question Drag and drop the commands from the bottom onto the blanks where the code is missing in the configuration for an application probe class with a 10ms latency...

Drag and Drop Question Drag and drop the commands from the bottom onto the blanks where the code is missing in the configuration to complete the Cloud onRamp for SaaS over SIG tunn...

Drag and Drop Question Drag and drop the code snippets from the bottom onto the boxes in the Cisco vManage configuration to configure unconditional DNS redirect to send all DNS req...

Drag and Drop Question Drag and drop the protocols below onto the boxes to complete the policy in this order: TCP, ICMP, then UDP. Answer:

Drag and Drop Question An engineer must use the CLI to disable the weak SSH-1 encryption algorithm in Cisco vManage Drag and drop the commands from the left into the order on the r...

Drag and Drop Question Refer to the exhibit. An engineer needs to enable QoS on the egress interface at the Montreal branch. Drag and drop the commands from the bottom onto the bla...

When resolving east/west security policy issues in Cisco SD-WAN, what is essential to verify?

Diagnosing Cisco SD-WAN policy issues often involves checking which of the following?

Which diagnostic step is important for resolving redistribution issues between BGP and OSPF on a Cisco IOS XE router?

When diagnosing routing issues on Cisco IOS XE, which command is used to verify OSPF neighbor relationships?

How does Cisco SD-WAN enhance security for north/south traffic?

In diagnosing OSPF routing integration with cloud networks, what common issue should be looked for?

How can a network administrator diagnose intermittent connectivity issues in an SD-WAN deployment aimed at Google Cloud? (Choose Two)

In the context of diagnosing IPsec cloud connectivity issues, what command is crucial for checking IPsec tunnel status on a Cisco IOS XE router?

In Cisco SD-WAN, what is the primary role of vManage?

What is a typical issue to look for when diagnosing north/south application routing in a Cisco SD- WAN environment?