300-440 Dumps 2024 – New Cisco 300-440 Exam Questions [Q18-Q35]

By adminOn May 23, 2024

Rate this post

300-440 Dumps 2024 – New Cisco 300-440 Exam Questions

Free 300-440 Braindumps Download Updated on May 23, 2024 with 40 Questions

Cisco 300-440 Exam Syllabus Topics:

Topic	Details
Topic 1	Operation: The topic delves into diagnosis of IPsec-based secure cloud connectivity between an on-premises native Cloud endpoints and Cisco IOS XE router. It also explains the diagnosis of routing issues on Cisco IOS XE routers, and diagnosis of Cisco SD-WAN policy issues, focusing on all the traffic.
Topic 2	IPsec Cloud Connectivity: The configuration of IPsec-based secure cloud connectivity is one of the focal points of this topic. Additionally, it delves into configuration of IPsec-based secure cloud connectivity between an on-premises Cisco IOS XE router and native Azure, AWS, and Google Cloud endpoints. Lastly, the topic discusses configuration of routing on Cisco IOS XE routers.
Topic 3	SD-WAN Cloud Connectivity: Questions about configuration of SD-WAN-based cloud connectivity using Cisco infrastructure appear in this topic. Furthermore, it discusses configuration of Cisco SD-WAN OnRamp, configuration for connecting to a SaaS cloud provider, and configuration of Cisco SD-WAN policies to address traffic.
Topic 4	Design: Questions about cloud-native security policies for AWS, Azure, and Google Cloud appear in this topic. It also recommends connectivity models that ensure high availability, resiliency, SLAs, and reliability. Furthermore, the topic delves into connectivity models based on network architecture requirements. The topic further discusses factors including bandwidth, QoS, dedicated vs shared connections and multi-homing.
Topic 5	Architecture Models: In this topic different aspects of connectivity to cloud providers are discussed. It focuses on AWS, Azure, and Google Cloud. Moreover, the topic explains private connectivity to leading cloud providers and connectivity options for Software as a Service (SaaS) cloud providers.

NO.18 An engineer signs in to Cisco vManage and needs to configure a custom application with a Cisco SD-WAN centralized policy. Drag and drop the steps from the left onto the order on the right to complete the configuration.

NO.19 Refer to the exhibit.

Refer to the exhibits. An engineer must redistribute IBGP routes into OSPF to connect an on-premises network to a cloud provider. Which command must be configured on router R2?

redistribute ospf 1

redistribute bgp 100 ospf 1

redistribute bgp 100 subnets

bgp redistrlbute-lnternal

NO.20 Drag and drop the commands from the left onto the purposes on the right to identify issues on a Cisco IOS XE SD-WAN device.

NO.21

Refer to the exhibits. An engineer must redistribute only the 10.0.10.0/24 network into BGP to connect an on-premises network to a public cloud provider. These routes are currently redistributed:

Which command is missing on router R2?

neighbor 10.0.10.2 remote-as 100

redistribute ospf 1 match internal

redistribute ospf 1 match external

neighbor 10.0.10.0/24 remote-as 100

NO.22

Refer to the exhibit. An engineer successfully brings up the site-to-site VPN tunnel between the remote office and the AWS virtual private gateway, and the site-to-site routing works correctly. However, the end-to-end ping between the office user PC and the AWS EC2 instance is not working. Which two actions diagnose the loss of connectivity? (Choose two.)

Check the network security group rules on the host VNET.

Check the security group rules for the host VPC.

Check the IPsec SA counters.

On the Cisco VPN router, configure the IPsec SA to allow ping packets.

On the AWS private virtual gateway, configure the IPsec SA to allow ping packets.

NO.23

Refer to the exhibits. An engineer must redistribute OSPF internal routes into BGP to connect an on-premises network to a cloud provider. Which two commands should the engineer run on router R2? (Choose two.)

router bgp 100

redistribute bgp 100

router ospf 1

redistribute ospf 1

redistribute ospf 100

NO.24 An engineer must configure an AppGoE service node for WAN optimization for applications that are hosted in the cloud using Cisco vManage for C8000V or C8500L-8S4X devices. Drag and drop the steps from the left onto the order on the right to complete the configuration.

NO.25

Refer to the exhibits. An engineer needs to configure a site-to-site IPsec VPN connection between an on premises Cisco IOS XE router and Amazon Web Services (AWS). Which two IP prefixes should be used to configure the AWS routing options? (Choose two.)

30.30.30.0/30

20.20.20.0/24

30.30.30.0/24

50.50.50.0/30

40.40.40.0/24

NO.26

Refer to the exhibit. These configurations are complete:
* Create an account in the Equinix portal.
* Associate the Equinix account with Cisco vManage.
* Configure the global settings for Interconnect Gateways.
Drag the prerequisite steps from the left onto the order on the right to configure a Cisco SD-WAN Cloud Interconnect with Equinix

NO.27 Which method is used to create authorization boundary diagrams (ABDs)?

identify only interconnected systems that are FedRAMP-authorized

show all networks in CIDR notation only

identify all tools as either external or internal to the boundary

show only minor or small upgrade level software components

NO.28 Refer to the exhibit.

Refer to the exhibits. An engineer troubleshoots a Cisco SD-WAN connectivity issue between an on-premises data center WAN Edge and a public cloud provider WAN Edge. The engineer discovers that BFD is Dapping on vEdge1. What is the problem?

The remote Edge device BFD is down.

The remote Edgedevice failed to respond BFD keepalives.

The remote Edge device has a duplicate IP address.

The control plane deleted the BFD session.

BFD (Bidirectional Forwarding Detection) is a protocol that detects failures in the overlay tunnel between Cisco SD-WAN devices. BFD packets are sent and received periodically by each device to check the liveliness and quality of the connection. If a device does not receive a BFD packet from its peer within a specified timeout interval, itconsiders the peer to be unreachable and reports a BFD down event. This event triggers a control connection state change and a possible route change in the SD-WAN fabric.
In this scenario, the engineer discovers that BFD is flapping on vEdge1, which means that the BFD session between vEdge1 and the remote Edge device is going up and down repeatedly. This indicates a connectivity issue between the two devices, such as network congestion, packet loss, or misconfiguration. The most likely cause of the problem is that the remote Edge device failed to respond BFD keepalives within the timeout interval, which resulted in a BFD timeout event on vEdge1. This event caused vEdge1 to mark the remote Edge device as down and notify the control plane. The control plane then tried to establish a new BFD session with the remote Edge device, which may have succeeded or failed depending on the network condition. This cycle of BFD session creation and deletion caused the BFD flapping on vEdge1.
The other options are less likely to be the cause of the problem. Option A is incorrect because if the remote Edge device BFD was down, vEdge1 would not receive any BFD packets from it and would not flap. Option C is incorrect because if the remote Edge device had a duplicate IP address, vEdge1 would not be able to establish a BFD session with it in the first place. Option D is incorrect because the control plane does not delete the BFD session unless there is a configuration change or a port-hop event on the device. References: Bidirectional Forwarding Detection Flap-Reason Definitions on Cisco vEdge Routers, Cisco Catalyst SD-WAN BFD, Cisco SD WAN: BFD (Bidirectional Forwarding Detection)

NO.29 A company with multiple branch offices wants a suitable connectivity model to meet these network architecture requirements:
* high availability
* quality of service (QoS)
* multihoming
* specific routing needs
Which connectivity model meets these requirements?

hub-and-spoke topology using MPLS with static routing and dedicated bandwidth for QoS

star topology with internet-based VPN connections and BGP for routing

hybrid topology that combines MPLS and SD-WAN

fully meshed topology with SD-WAN technology using dynamic routing and prioritized traffic for QoS

NO.30 An engineer must enable the OMP advertisement of BGP routes for a specific VRF instance on a Cisco IOS XE SD-WAN device. What should be configured after the global address-family ipv4 is configured?

Set the VRF-specific route advertisements.

Enable bgp advertisement.

Enter sdwan mode.

Disable bgp advertisement.

NO.31 Refer to the exhibits.

While troubleshooting, a network engineer discovers that the backup path fails between ASBR3 and ASBR4 for traffic between BGP AS6000 and BGP AS6500 when the connection between ASBR1 and ASBR2 goes down. The following configurations were performed on ASBR1:

Which command is missing?

bgp additional-paths Install

bgp additional-paths select

redistribute static

bgp advertise-best-external

NO.32 A company with multiple branch offices wants a connectivity model to meet its network architecture requirements. The company focuses on ensuring low latency and efficient routing for its critical business applications. Which connectivity model meets these requirements?

hub-and-spoke topology with SD-WAN technology, using dynamic routing and OSPF as the routing protocol

fully meshed topology with SD-WAN technology, using dynamic routing and BGP as the routing protocol

point-to-point topology using dedicated leased lines and static routing

star topology with internet-based VPN connections and static routing

NO.33 An engineer needs to configure enhanced policy-based routing (ePBR) for IPv4 by using Cisco vManage.
Drag and drop the steps from the left onto the order on the right to complete the configuration of the ePBR using the CLI add-on template.