OpenExamsFREE PRACTICE — ANY EXAM

Designing and Implementing Secure Cloud Connectivity — Information & Free Practice

US · Examination information

100 free questions · Answer explanations · No signup required

Start free practice →

Designing and Implementing Secure Cloud Connectivity

Provider
Cisco Systems, Inc.
Format
Performance-based questions, multiple choice, and drag-and-drop
Time limit
90 minutes
Exam fee
$300 USD, or redeemable with Cisco Learning Credits
Examination outline
  • Architecture Models (15%)
    • Describe internet-based connectivity to cloud providers (AWS, Azure, and Google Cloud)
    • Describe private connectivity to cloud providers (AWS, Azure, and Google Cloud)
    • Describe connectivity to SaaS cloud providers (AWS, Azure, and Google Cloud)
  • Design (15%)
    • Recommend a connectivity model to provide high availability, resiliency, SLAs, and reliability based on business and technical requirements
    • Recommend a connectivity model based on network architecture requirements such as bandwidth, QoS, dedicated vs shared, multi-homing, and routing needs based on business and technical requirements
    • Recommend a connectivity model to meet regulatory compliance (NIST, FEDRAMP, ISO) based on business and technical requirements
    • Describe cloud security policies for AWS, Azure, and Google Cloud, such as east/west traffic within the cloud provider, backhaul internet traffic, inbound connectivity to the internet
  • IPsec Cloud Connectivity (25%)
    • Configure GRE/IPsec internet-based secure cloud connectivity between an on-premises Cisco IOS XE router to a native AWS, Azure, and Google Cloud endpoint, or to a secure internet gateway
    • Configure IPsec internet-based secure cloud connectivity between an on-premises Cisco IOS XE router and an AWS, Azure, or Google cloud-hosted Cisco IOS XE router
    • Configure routing on Cisco IOS XE to integrate with cloud networks using BGP and OSPF, including redistribution and static routing
  • SD-WAN Cloud Connectivity (25%)
    • Configure Cisco Catalyst SD-WAN internet-based secure cloud connectivity for AWS, Azure, and Google Cloud, or for a secure internet gateway
    • Configure Cisco Catalyst SD-WAN OnRamp to a SaaS cloud provider
    • Configure Cisco Catalyst SD-WAN policies (north/south and east/west)
  • Operation (20%)
    • Diagnose IPsec internet-based secure cloud connectivity between an on-premises Cisco IOS XE router to a native AWS, Azure, and Google Cloud endpoint, or to a secure internet gateway
    • Diagnose routing issues on Cisco IOS XE to integrate with cloud networks using BGP and OSPF, including redistribution and static routing
    • Diagnose Cisco Catalyst SD-WAN internet-based secure cloud connectivity for AWS, Azure, and Google Cloud, or for a secure internet gateway
    • Diagnose Cisco Catalyst SD-WAN policy issues (north/south and east/west)
Examination sources

Related license preparation

This examination may be required or accepted as an alternative, depending on the license and application pathway.