Cisco Exam 300-440 Topic 1 Question 16 Discussion

Actual exam question for Cisco's 300-440 exam

Question #: 16
Topic #: 1

A cloud engineer is setting up a new set of nodes in the AWS EKS cluster to manage database integration with Mongo Atlas. The engineer set up security to Mongo but now wants to ensure that the nodes are also secure on the network side. Which feature in AWS should the engineer use?

AEC2 Trust Lock

Bsecurity groups

Ctagging

Dkey pairs

Show Suggested Answer

Suggested Answer: D

A fully meshed topology with SD-WAN technology using dynamic routing and prioritized traffic for QoS meets the network architecture requirements of the company. A fully meshed topology provides high availability by eliminating single points of failure and allowing multiple paths between branch offices. SD-WAN technology enables multihoming by supporting multiple transport options, such as MPLS, internet, LTE, etc. SD-WAN also provides QoS by applying policies to prioritize traffic based on application, user, or network conditions. Dynamic routing allows the SD-WAN solution to adapt to changing network conditions and optimize the path selection for each traffic type. A fully meshed topology with SD-WAN technology can also support specific routing needs, such as segment routing, policy-based routing, or application-aware routing.Reference:

Designing and Implementing Cloud Connectivity (ENCC) v1.0

[Cisco SD-WAN Design Guide]

[Cisco SD-WAN Configuration Guide]

by Vicente at Jul 10, 2024, 08:21 PM

Limited Time Offer

25%

Off

Get Premium 300-440 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Kaycee

1 months ago

I bet the engineer wishes they had a pair of 'EKStra' security groups to choose from. Eh? Eh? *nudges you*

upvoted 0 times

...

Susana

1 months ago

EC2 Trust Lock? I've never even heard of that! Definitely not the right choice. Security groups all the way.

upvoted 0 times

...

Georgeanna

1 months ago

Tagging? That's more for organization and management, not security. I'd have to say security groups is the way to go here.

upvoted 0 times

Janessa

12 days ago

I agree, security groups are the way to go for network security.

upvoted 0 times

...

Lilli

14 days ago

Using security groups will definitely help ensure the nodes are secure on the network side.

upvoted 0 times

...

Shawn

18 days ago

Yes, security groups help control inbound and outbound traffic to the nodes.

upvoted 0 times

...

Carin

26 days ago

I agree, security groups are essential for network security.

upvoted 0 times

...

Laticia

2 months ago

Key pairs? Really? That's more for authentication, not network security. I think the engineer should go with security groups on this one.

upvoted 0 times

Rima

17 days ago

Definitely, security groups will add an extra level of security to the network setup.

upvoted 0 times

...

Isabella

25 days ago

It's important to have that extra layer of protection for the nodes in the AWS EKS cluster.

upvoted 0 times

...

Elly

1 months ago

Yeah, security groups will help control inbound and outbound traffic to the nodes.

upvoted 0 times

...

Margret

2 months ago

I agree, security groups are the way to go for network security.

upvoted 0 times

...

Toshia

2 months ago

I also think security groups is the right choice. It's a common practice to use them for network security in AWS.

upvoted 0 times

...

Gail

2 months ago

I agree with Nathan. Security groups can help secure the nodes on the network side.

upvoted 0 times

...

Nathan

2 months ago

I think the engineer should use security groups.

upvoted 0 times

...

Caprice

2 months ago

I'm not sure, but I think security groups make sense because they control inbound and outbound traffic.

upvoted 0 times

...

Tammara

2 months ago

I agree with Sharee. Security groups can help secure the nodes on the network side.

upvoted 0 times

...

Edna

2 months ago

Hmm, security groups seem like the obvious choice here. They allow you to control inbound and outbound traffic to your nodes, which is exactly what the engineer needs to secure the network.

upvoted 0 times

Elouise

27 days ago

Yes, security groups provide a good level of control over the traffic to the nodes.

upvoted 0 times

...

Meghan

1 months ago

I agree, security groups are the way to go for network security.

upvoted 0 times

...

Sharee

2 months ago

I think the engineer should use security groups.

upvoted 0 times

...