Cisco ENCC (300-440) flashcards
Cisco ENCC (300-440) · Build recall with a focused review session.
33 cards. Read the term and the definition here. The deck at the top of this page is optional.
- UCS X-Fabric
- Cisco technology in UCS X-Series that pools PCIe resources across the chassis so GPU and other PCIe devices can be shared and allocated dynamically to compute nodes.
- RoCEv2
- RDMA over Converged Ethernet version 2, which encapsulates InfiniBand transport over UDP/IP. Used for low-latency AI east-west traffic on Nexus fabrics.
- PFC
- Priority Flow Control, an IEEE 802.1Qbb mechanism that pauses a specific traffic class on an Ethernet link. Prevents buffer drops for lossless RoCE traffic.
- ECN marking
- Explicit Congestion Notification marks packets instead of dropping them, signaling congestion to endpoints. Combined with DCQCN, it enables rate adaptation on AI fabrics.
- Nexus Dashboard Insights
- Cisco telemetry and assurance application that collects flow, buffer, and PFC statistics from Nexus switches to validate fabric health and troubleshoot AI workloads.
- Oversubscription ratio
- Ratio of total downstream capacity to uplink capacity in a leaf-spine fabric. Training AI clusters typically need 1:1, while inference tolerates higher ratios.
- Cisco AI Defense
- Cisco security product for AI applications that provides model validation, runtime guardrails, and red-teaming to detect unsafe or malicious model behavior.
- Intersight
- Cisco cloud-based management platform for UCS, HyperFlex, and Nexus. Handles server lifecycle, firmware, and policy through device connectors and SSO identity.
- Cisco Secure Access
- Cisco's SSE platform combining ZTNA, secure web gateway, CASB, DLP, and remote browser isolation in one cloud-delivered service with identity-based policy.
- Umbrella DNS security
- Cisco cloud security service that blocks malicious domains at the DNS layer before connections are made, using roaming clients, AD connectors, and category policies.
- Duo MFA
- Cisco multi-factor authentication service that verifies user identity and device trust before granting access to applications, integrated with VPN and ZTNA flows.
- ZTNA
- Zero Trust Network Access grants per-application access after verifying user identity and device posture, replacing broad VPN access with least-privilege tunnels.
- Cisco ISE
- Identity Services Engine provides network access control using 802.1X, MAB, and profiling, and enforces TrustSec group-based segmentation policy across the network.
- TrustSec SGT
- Security Group Tag assigned to traffic by ISE or the switch. SGACLs enforce segmentation policy based on tags rather than IP addresses or subnets.
- Encrypted Traffic Analytics
- Cisco technique that uses TLS fingerprinting and flow metadata to detect malware in encrypted traffic without requiring decryption of the sessions.
- SASE
- Secure Access Service Edge converges network and security functions such as SD-WAN, SWG, CASB, and ZTNA into a cloud-delivered architecture for distributed users.
- SD-WAN Cloud OnRamp
- Cisco SD-WAN feature that optimizes access to SaaS and cloud workloads by directing trusted traffic to the internet or cloud gateways with policy-based routing.
- Catalyst Center
- Cisco intent-based controller for campus networks, providing automation, assurance, and SD-Access fabric management through templates, telemetry, and health scoring.
- SD-Access fabric roles
- Fabric edge, border, and control plane nodes. LISP handles control plane mapping, VXLAN carries data, and ISE supplies identity and group-based policy.
- NDFC
- Nexus Dashboard Fabric Controller, formerly DCNM. Manages Nexus data center fabrics, VXLAN EVPN overlays, and device lifecycle as a service on Nexus Dashboard.
- Catalyst SD-WAN Manager
- Formerly vManage. Provides centralized configuration, monitoring, and policy for SD-WAN fabrics, working with vSmart controller and vBond orchestrator.
- Cisco Meraki
- Cloud-managed networking platform with dashboard-based configuration for wireless, switching, security, and SD-WAN, aimed at branch and mid-market deployments.
- Intersight device connector
- Agent that establishes outbound-only communication from managed devices to Intersight, enabling claiming and management without inbound firewall openings.
- Catalyst Center templates
- Reusable configuration artifacts, including CLI, velocity, and Jinja2 templates, used to deploy consistent device and fabric settings across the campus.
- DNA Advantage tier
- Cisco Catalyst Center licensing tier that adds advanced automation, assurance, and analytics features beyond the Essentials baseline for campus devices.
- Cisco Success Tracks
- Cisco CX offering combining software support, adoption guidance, and telemetry through CX Cloud to help customers plan, build, operate, and optimize deployments.
- Cisco Expert Care
- High-touch CX service tier providing named experts, proactive reviews, and rapid escalation for critical accounts with complex or high-risk environments.
- CX Cloud
- Cisco digital platform that aggregates device telemetry and contract data to surface adoption gaps, lifecycle alerts, and risk for Success Tracks customers.
- Solution Support
- Cisco support service that owns cross-technology issues end to end, coordinating multiple product teams and providing a single escalation point for the customer.
- Business Critical Services
- Cisco advisory and architecture service delivering proactive consulting in areas such as security, cloud, and automation beyond standard break-fix support.
- Cisco Learning Credits
- Prepaid entitlements tied to Cisco contracts that fund authorized training courses and certifications, consumed when ordering eligible learning offerings.
- CX lifecycle stages
- Cisco Customer Experience framework of Plan, Build, Operate, and Optimize, mapping support and adoption services to each phase of a customer deployment.
- Designated Support Engineer
- Named Cisco engineer assigned to a critical account under Expert Care, providing proactive reviews and direct reactive support with deep knowledge of the environment.