300-440: Cisco Designing and Implementing Cloud Connectivity (ENCC)

To earn your CCNP Enterprise certification you must pass the 350-401 ENCOR exam and an eligible concentration exam of your choice, such as 300-440 ENCC. 

This exam certifies a candidate's knowledge of:

◉ Designing and implementing cloud connectivity

◉ Including architecture models

◉ IPsec

◉ SD-WAN

◉ Operation

◉ Design

300-440: Cisco Designing and Implementing Cloud Connectivity (ENCC)

Cisco 300-440 Exam Overview:

Exam Name	Cisco Designing and Implementing Cloud Connectivity
Exam Number	300-440 ENCC
Exam Number	$300 USD
Duration	90 minutes
Number of Questions	55-65
Passing Score	Variable (750-850 / 1000 Approx.)
Recommended Training	Designing and Implementing Cloud Connectivity
Sample Questions	Cisco 300-440 Sample Questions
Practice Exam	Cisco Certified Specialist Enterprise Cloud Connectivity Practice Test

Cisco 300-440 Exam Topics:

Section	Weight	Objectives
Collaboration Environment	15%	- Describe internet-based connectivity to cloud providers (AWS, Azure, and Google Cloud) ◉ Native IPsec ◉ Cisco SD-WAN internet connectivity - Describe private connectivity to cloud providers (AWS, Azure, and Google Cloud) ◉ MPLS provider ◉ Colocation provider ◉ SDCI regional cross-connect - Describe connectivity to SaaS cloud providers (AWS, Azure, and Google Cloud) ◉ Direct internet access models into SaaS ◉ Indirect access models via a Cloud Security Provider ◉ SaaS connectivity via a centralized internet gateway ◉ Dedicated connectivity to a SaaS provider
Design	15%	- Recommend the connectivity model to provide high availability, resiliency, SLAs, and reliability based on business and technical requirements - Recommend the connectivity model based on network architecture requirements such as bandwidth, QoS, dedicated vs shared, multi-homing, and routing needs based on business and technical requirements - Recommend a connectivity model to meet regulatory compliance (NIST, FEDRAMP, ISO) based on business and technical requirements - Describe cloud-native security policies for AWS, Azure, and Google Cloud, such as east/west traffic within the cloud provider, backhaul internet traffic, inbound connectivity to the internet
IPsec Cloud Connectivity	25%	- Configure IPsec internet-based secure cloud connectivity between an on-premises Cisco IOS XE router to a native AWS, Azure, and Google Cloud endpoint - Configure IPsec internet-based secure cloud connectivity between an on-premises Cisco IOS XE router and an AWS, Azure, or Google cloud-hosted Cisco IOS XE router - Configure routing on Cisco IOS XE to integrate with cloud networks using BGP and OSPF, including redistribution and static routing
SD-WAN Cloud Connectivity	25%	- Configure Cisco SD-WAN internet-based secure cloud connectivity for AWS, Azure, and Google Cloud - Configure Cisco SD-WAN OnRamp to a SaaS cloud provider - Configure Cisco SD-WAN policies (north/south and east/west) ◉ Security ◉ Routing ◉ Application
Operation	20%	- Diagnose IPsec internet-based secure cloud connectivity between an on-premises Cisco IOS XE router to a native AWS, Azure, and Google Cloud endpoint - Diagnose routing issues on Cisco IOS XE to integrate with cloud networks using BGP and OSPF, including redistribution and static routing - Diagnose Cisco SD-WAN internet-based secure cloud connectivity for AWS, Azure, and Google Cloud - Diagnose Cisco SD-WAN policy issues (north/south and east/west) ◉ Security ◉ Routing ◉ Application