300-440 무료 덤프문제 온라인 액세스

Which architecture model establishes internet-based connectivity between on-premises networks and AWS cloud resources?

• A.That employs AWS Direct Connect for a dedicated network connection and uses private IP addresses tor secure communication.
• B.That relies on AWS Elastic Load Balancing (ELB) for traffic distribution and uses SSL/TLS encryption for secure data transmission.
• C.That establishes an iPsec VPN tunnel with Internet Key Exchange (IKE) for secure key negotiation and encrypted data transmission
• D.That uses Amazon CloudFrontfor caching and distributing content globally and uses HTTPS for secure data transfer.

An engineer must configure a site-to-site IPsec VPN connection between an on-premises Cisco IOS XE router In Controller mode and AWS. The IKE version must be changed from IKEv1to IKEv2 in Cisco vManage.
Drag and drop the steps from the left onto the order on the right to complete the configuration.

정답:

Explanation:
Step 1 = Click Configuration, select Templates, and then select Feature Templates. Step 2 = Click Add Template, select the device, and then click Basic Configuration. Step 3 = Shut down the tunnel and then remove the ISAKMP profile. Step 4 = Attach the IKEv2 profile and then run the no shutdown command on the tunnel.
The process of configuring a site-to-site IPsec VPN connection between an on-premises Cisco IOS XE router in Controller mode and AWS, and changing the IKE version from IKEv1 to IKEv2 in Cisco vManage involves several steps123.
Click Configuration, select Templates, and then select Feature Templates: This is the first step where you navigate to the Templates section in the Configuration menu of Cisco vManage1.
Click Add Template, select the device, and then click Basic Configuration: In this step, you add a new template for the device and proceed with the basic configuration1.
Shut down the tunnel and then remove the ISAKMP profile: Before changing the IKE version, you need to shut down the existing tunnel and remove the ISAKMP profile that is configured for IKEv12.
Attach the IKEv2 profile and then run the no shutdown command on the tunnel: Finally, you attach the newly created IKEv2 profile to the tunnel and bring the tunnel back up2.
References :=
Configuring Internet Key Exchange Version 2 (IKEv2) - Cisco
Switch from IKEv1 to IKEv2 on Cisco Routers - Cisco Community
Configure IOS-XE Site-to-Site VPN Connection to Amazon Web Services - Cisco Community

An engineer must configure an IPsec tunnel to the cloud VPN gateway. Which Two actions send traffic into the tunnel? (Choose two.)

• A.Configure policy-based routing.
• B.Configure a local policy in Cisco vManage.
• C.Configure an IPsec profile and match the remote peer IP address.
• D.Configure a static route.
• E.Configure access lists that match the interesting user traffic.

An engineer must enable the OMP advertisement of BGP routes for a specific VRF instance on a Cisco IOS XE SD-WAN device. What should be configured after the global address-family ipv4 is configured?

• A.Enable bgp advertisement.
• B.Set the VRF-specific route advertisements.
• C.Disable bgp advertisement.
• D.Enter sdwan mode.

Refer to the exhibits. An engineer must redistribute only the 10.0.10.0/24 network into BGP to connect an on-premises network to a public cloud provider. These routes are currently redistributed:

Which command is missing on router R2?

• A.neighbor 10.0.10.0/24 remote-as 100
• B.redistribute ospf 1 match external
• C.neighbor 10.0.10.2 remote-as 100
• D.redistribute ospf 1 match internal