QUESTION: 9

DRAG DROP (Drag and Drop is not supported)
Drag and drop the commands from the left onto the purposes on the right to identify issues on a Cisco IOS XE SD-WAN device.

See Explanation section for answer.

Answer(s): A

Explanation:

Display the time and process information of the device, as well as CPU, memory, and disk usage dat a. = show sdwan system status1
Validate the configured zone-based firewall. = show policy-firewall config1 Display information about application-aware routing policy matched packet counts on the Cisco IOS XE SD-WAN devices. = show sdwan policy app-route-policy-filter1

View the security information that is configured for IPsec tunnel connections. = show sdwan security- info
The commands used to identify issues on a Cisco IOS XE SD-WAN device are as follows1:
show sdwan system status: This command is used to display the time and process information of the device, as well as CPU, memory, and disk usage data1.
show policy-firewall config: This command is used to validate the configured zone-based firewall1. show sdwan policy app-route-policy-filter: This command is used to display information about application-aware routing policy matched packet counts on the Cisco IOS XE SD-WAN devices1. show sdwan security-info: This command is used to view the security information that is configured for IPsec tunnel connections1.

Reveal Solution Next Question

QUESTION: 10

Refer to the exhibits.

While troubleshooting, a network engineer discovers that the backup path fails between ASBR3 and ASBR4 for traffic between BGP AS6000 and BGP AS6500 when the connection between ASBR1 and ASBR2 goes down. The following configurations were performed on ASBR1:

Which command is missing?

bgp additional-paths Install
bgp additional-paths select
redistribute static
bgp advertise-best-external

Answer(s): D

Explanation:

The bgp advertise-best-external command is used to enable the advertisement of the best external path to internal BGP peers. This command is useful when there are multiple exit points from the local AS to other ASes, and the local AS wants to use the closest exit point for each destination. By default, BGP only advertises the best path to its peers, and the best path is usually the one with the lowest IGP metric to the next hop. However, this may not be the optimal path for traffic leaving the local AS, as it may result in suboptimal hot-potato routing or MED oscillations. The bgp advertise- best-external command allows BGP to advertise the best external path, which is the path with the lowest MED among the paths from different neighboring ASes, in addition to the best path. This way, the internal BGP peers can choose the best exit point based on the MED value, rather than the IGP metric. In this scenario, ASBR1 is configured to receive additional paths from ASBR2, which is a route reflector. ASBR2 receives two paths for the same prefix from AS6500, one from ASBR3 and one from ASBR4. ASBR2 selects the best path based on the IGP metric to the next hop, and advertises it to

ASBR1. However, this path may not be the best external path, as it may have a higher MED value than the other path. If the connection between ASBR1 and ASBR2 goes down, ASBR1 will not have any backup path to reach AS6500, as it does not know the other path from ASBR4. To prevent this situation, ASBR1 should be configured with the bgp advertise-best-external command, so that it can receive the best external path from ASBR2, along with the best path. This way, ASBR1 will have a backup path to reach AS6500, in case the primary path fails. Reference := IP Routing: BGP Configuration Guide - BGP Additional Paths ... - Cisco, BGP Additional Paths

Reveal Solution Next Question

QUESTION: 11

What is the role of service providers to establish private connectivity between on-premises networks and Google Cloud resources?

facilitate direct, dedicated network connections through Google Cloud Interconnect
enable intelligent routing and dynamic path selection using software-defined networking
provide end-to-end encryption for data transmission using native IPsec
accelerate content delivery through integration with Google Cloud CDN

Answer(s): A

Explanation:

The role of service providers to establish private connectivity between on-premises networks and Google Cloud resources is to facilitate direct, dedicated network connections through Google Cloud Interconnect. Google Cloud Interconnect is a service that allows customers to connect their on- premises networks to Google Cloud through a service provider partner. This provides low latency, high bandwidth, and secure connectivity to Google Cloud services, such as Google Compute Engine, Google Cloud Storage, and Google BigQuery. Google Cloud Interconnect also supports hybrid cloud scenarios, such as extending on-premises networks to Google Cloud regions, or connecting multiple Google Cloud regions together. Google Cloud Interconnect offers two types of connections:
Dedicated Interconnect and Partner Interconnect. Dedicated Interconnect provides physical connections between the customer's network and Google's network at a Google Cloud Interconnect location. Partner Interconnect provides virtual connections between the customer's network and Google's network through a supported service provider partner. Both types of connections use VLAN attachments to establish private connectivity to Google Cloud Virtual Private Cloud (VPC) networks.

Reference:

Designing and Implementing Cloud Connectivity (ENCC) v1.0

[Google Cloud Interconnect Overview]
[Google Cloud Interconnect Documentation]

Reveal Solution Next Question

QUESTION: 12

Refer to the exhibit.

Refer to the exhibits. An engineer must redistribute IBGP routes into OSPF to connect an on-premises network to a cloud provider.
Which command must be configured on router R2?

redistribute ospf 1
redistribute bgp 100 ospf 1
redistribute bgp 100 subnets
bgp redistrlbute-lnternal

Answer(s): B

Explanation:

This command redistributes the routes learned from BGP AS100 into OSPF Area 1, which allows router R2 to advertise those routes to router R1 and connect the on-premises network to the cloud provider. The other options are incorrect because they either redistribute the wrong routes or use the wrong syntax5 .
I hope this helps you understand the question and the answer. If you have any other questions or requests, please let me know. I am always happy to help.

Reference:

1: Learning Plan: Designing and Implementing Cloud Connectivity v1.0 (ENCC 300-440) Exam Prep 2: Designing and Implementing Cloud Connectivity (ENCC) v1.0 3: Cisco Multiprotocol Label Switching 4: Exploring Cisco Cloud OnRamp for Colocation 5: ENCC: Configuring IPsec VPN from Cisco IOS XE to AWS : [Deploying Cisco IOS VTI-Based Point-to-Point IPsec VPNs]

Reveal Solution Next Question

Free 300-440 Exam Braindumps (page: 3)

QUESTION: 9

Explanation:

QUESTION: 10

Explanation:

QUESTION: 11

Explanation:

Reference:

QUESTION: 12

Explanation:

Reference: