Designing and Implementing Cloud Connectivity (ENCC)

Here you have the best Cisco 300-440 practice exam questions

You have 84 total questions to study from
Each page has 5 questions, making a total of 17 pages
You can navigate through the pages using the buttons at the bottom
This questions were last updated on December 14, 2025
This site is not affiliated with or endorsed by Cisco.

Question 1 of 84

Which method is used to create authorization boundary diagrams (ABDs)?

identify only interconnected systems that are FedRAMP-authorized

show all networks in CIDR notation only

identify all tools as either external or internal to the boundary

show only minor or small upgrade level software components

Correct Answer: C

Question 2 of 84

A company has multiple branch offices across different geographic locations and a centralized data center. The company plans to migrate its critical business applications to the public cloud infrastructure that is hosted in Microsoft Azure. The company requires high availability, redundancy, and low latency for its business applications. Which connectivity model meets these requirements?

ExpressRoute with private peering using SDCI

hybrid connectivity with SD-WAN

AWS Direct Connect with dedicated connections

site-to-site VPN with Azure VPN gateway

Correct Answer: A

Question 3 of 84

A company with multiple branch offices wants a suitable connectivity model to meet these network architecture requirements: high availability quality of service (QoS) multihoming specific routing needs
Which connectivity model meets these requirements?

hub-and-spoke topology using MPLS with static routing and dedicated bandwidth for QoS

star topology with internet-based VPN connections and BGP for routing

hybrid topology that combines MPLS and SD-WAN

fully meshed topology with SD-WAN technology using dynamic routing and prioritized traffic for QoS

Correct Answer: C

Question 4 of 84

Which approach does a centralized internet gateway use to provide connectivity to SaaS applications?

A cloud-based proxy server routes traffic from the on-premises infrastructure to the SaaS provider data center.

Internet traffic from the on-premises infrastructure is routed through a centralized gateway that provides access controls for SaaS applications.

VPN connections are used to provide secure access to SaaS applications from the on-premises infrastructure.

A dedicated, private connection is established between the on-premises infrastructure and the SaaS provider data center using colocation services.

Correct Answer: B

Question 5 of 84

Which architecture model establishes internet-based connectivity between on-premises networks and AWS cloud resources?

That establishes an IPsec VPN tunnel with Internet Key Exchange (IKE) for secure key negotiation and encrypted data transmission.

That relies on AWS Elastic Load Balancing (ELB) for traffic distribution and uses SSL/TLS encryption for secure data transmission.

That employs AWS Direct Connect for a dedicated network connection and uses private IP addresses for secure communication.

That uses Amazon CloudFront for caching and distributing content globally and uses HTTPS for secure data transfer.

Correct Answer: A