Architecture Models in ENCC are the reference designs for connecting enterprises to cloud — direct IPsec, SD-WAN, colocation, and provider interconnects. This domain frames the connectivity options the rest of the exam implements.
Cloud Connectivity is the set of designs and technologies that securely connect an enterprise network to public cloud providers.
IPsec is the protocol suite that authenticates and encrypts IP traffic, used to build secure site-to-cloud and site-to-site tunnels.
IKEv2 (Internet Key Exchange version 2) negotiates the security associations and keys that establish an IPsec tunnel.
SD-WAN (Cisco Catalyst SD-WAN) is an overlay architecture that centrally manages transport-independent connectivity, including to cloud on-ramps.
Cloud OnRamp is the Cisco Catalyst SD-WAN feature that optimizes and automates connectivity to SaaS and IaaS cloud workloads.
A Transit Gateway is a cloud-provider hub (such as AWS Transit Gateway) that interconnects VPCs/VNets and on-premises networks.
A Virtual Private Cloud (VPC), or VNet in Azure, is an isolated virtual network within a cloud provider where workloads run.
Border Gateway Protocol (BGP) exchanges routing between the enterprise, SD-WAN, and cloud networks over the connectivity tunnels.
Redundancy is the use of multiple tunnels, paths, or regions so cloud connectivity survives a single failure.
A Service Level Agreement (SLA) defines the performance and availability targets a cloud-connectivity design must meet.
Telemetry is the streamed operational data used to monitor and assure cloud-connectivity health and performance.
Multicloud describes connecting an enterprise to more than one cloud provider (such as AWS, Azure, and Google Cloud) simultaneously.
Architecture Models in ENCC are the reference designs for connecting enterprises to cloud — direct IPsec, SD-WAN, colocation, and provider interconnects.
A Private Interconnect (such as AWS Direct Connect or Azure ExpressRoute) is a dedicated private link between the enterprise and a cloud provider, bypassing the public internet.
Encryption protects data in transit across cloud-connectivity tunnels, primarily via IPsec with modern ciphers.