Free Designing and Implementing Cloud Connectivity Exam 300-440 Exam Practice Test

Which approach does a centralized internet gateway use to provide connectivity to SaaS applications?

• A cloud-based proxy server routes traffic from the on-premises infrastructure to the SaaS provider data center.
• Internet traffic from the on-premises infrastructure is routed through a centralized gateway that provides access controls for SaaS applications.
• VPN connections are used to provide secure access to SaaS applications from the on-premises infrastructure.
• A dedicated, private connection is established between the on-premises infrastructure and the SaaS provider data center using colocation services.

Which architecture model establishes internet-based connectivity between on-premises networks and AWS cloud resources?

• That establishes an iPsec VPN tunnel with Internet Key Exchange (IKE) for secure key negotiation and encrypted data transmission
• That relies on AWS Elastic Load Balancing (ELB) for traffic distribution and uses SSL/TLS encryption for secure data transmission.
• That employs AWS Direct Connect for a dedicated network connection and uses private IP addresses tor secure communication.
• That uses Amazon CloudFront for caching and distributing content globally and uses HTTPS for secure data transfer.

A cloud engineer is setting up a new set of nodes in the AWS EKS cluster to manage database integration with Mongo Atlas. The engineer set up security to Mongo but now wants to ensure that the nodes are also secure on the network side. Which feature in AWS should the engineer use?

• EC2 Trust Lock
• security groups
• tagging
• key pairs

Which method is used to create authorization boundary diagrams (ABDs)?

• identify only interconnected systems that are FedRAMP-authorized
• show all networks in CIDR notation only
• identify all tools as either external or internal to the boundary
• show only minor or small upgrade level software components

What is the role of service providers to establish private connectivity between on-premises networks and Google Cloud resources?

• facilitate direct, dedicated network connections through Google Cloud Interconnect
• enable intelligent routing and dynamic path selection using software-defined networking
• provide end-to-end encryption for data transmission using native IPsec
• accelerate content delivery through integration with Google Cloud CDN

An engineer must configure an IPsec tunnel to the cloud VPN gateway. Which Two actions send traffic into the tunnel? (Choose two.)

• Configure access lists that match the interesting user traffic.
• Configure a static route.
• Configure a local policy in Cisco vManage.
• Configure an IPsec profile and match the remote peer IP address.
• Configure policy-based routing.

A company with multiple branch offices wants a connectivity model to meet its network architecture requirements. The company focuses on ensuring low latency and efficient routing for its critical business applications. Which connectivity model meets these requirements?

• hub-and-spoke topology with SD-WAN technology, using dynamic routing and OSPF as the routing protocol
• fully meshed topology with SD-WAN technology, using dynamic routing and BGP as the routing protocol
• point-to-point topology using dedicated leased lines and static routing
• star topology with internet-based VPN connections and static routing

Which Microsoft Azure service enables a dedicated and secure connection between an on-premises infrastructure and Azure data centers through a colocation provider?

• Azure Private Link
• Azure ExpressRoute
• Azure Virtual Network
• Azure Site-to-Site VPN

A company has multiple branch offices across different geographic locations and a centralized data center. The company plans to migrate Its critical business applications to the public cloud infrastructure that is hosted in Microsoft Azure. The company requires high availability, redundancy, and low latency for its business applications. Which connectivity model meets these requirements?

• ExpressRoute with private peering using SDCI
• hybrid connectivity with SD-WAN
• AWS Direct Connect with dedicated connections
• site-to-site VPN with Azure VPN gateway

An engineer must enable the OMP advertisement of BGP routes for a specific VRF instance on a Cisco IOS XE SD-WAN device. What should be configured after the global address-family ipv4 is configured?

• Set the VRF-specific route advertisements.
• Enable bgp advertisement.
• Enter sdwan mode.
• Disable bgp advertisement.