300-440

Review 84 300-440 practice questions with answer explanations and community insights.

Question 1

Which method is used to create authorization boundary diagrams (ABDs)?

  1. identify only interconnected systems that are FedRAMP-authorized
  2. show all networks in CIDR notation only
  3. identify all tools as either external or internal to the boundary
  4. show only minor or small upgrade level software components

Question 2

A company has multiple branch offices across different geographic locations and a centralized data center. The company plans to migrate its critical business applications to the public cloud infrastructure that is hosted in Microsoft Azure. The company requires high availability, redundancy, and low latency for its business applications. Which connectivity model meets these requirements?

  1. ExpressRoute with private peering using SDCI
  2. hybrid connectivity with SD-WAN
  3. AWS Direct Connect with dedicated connections
  4. site-to-site VPN with Azure VPN gateway

Question 3

A company with multiple branch offices wants a suitable connectivity model to meet these network architecture requirements: high availability quality of service (QoS) multihoming specific routing needs Which connectivity model meets these requirements?

  1. hub-and-spoke topology using MPLS with static routing and dedicated bandwidth for QoS
  2. star topology with internet-based VPN connections and BGP for routing
  3. hybrid topology that combines MPLS and SD-WAN
  4. fully meshed topology with SD-WAN technology using dynamic routing and prioritized traffic for QoS

Question 4

Which approach does a centralized internet gateway use to provide connectivity to SaaS applications?

  1. A cloud-based proxy server routes traffic from the on-premises infrastructure to the SaaS provider data center.
  2. Internet traffic from the on-premises infrastructure is routed through a centralized gateway that provides access controls for SaaS applications.
  3. VPN connections are used to provide secure access to SaaS applications from the on-premises infrastructure.
  4. A dedicated, private connection is established between the on-premises infrastructure and the SaaS provider data center using colocation services.

Question 5

Which architecture model establishes internet-based connectivity between on-premises networks and AWS cloud resources?

  1. That establishes an IPsec VPN tunnel with Internet Key Exchange (IKE) for secure key negotiation and encrypted data transmission.
  2. That relies on AWS Elastic Load Balancing (ELB) for traffic distribution and uses SSL/TLS encryption for secure data transmission.
  3. That employs AWS Direct Connect for a dedicated network connection and uses private IP addresses for secure communication.
  4. That uses Amazon CloudFront for caching and distributing content globally and uses HTTPS for secure data transfer.
We are moving to a new platform

CertificationTest is being migrated. Some pages may be slow or briefly unavailable; everything will be back to normal within a few hours. If you run into any issue, email support@certificationtest.net.