[May-2024] 500-470 Dumps are Available for Instant Access using Real4dumps
500-470 Dumps 2024 - New Cisco 500-470 Exam Questions
NEW QUESTION # 10
Device Sensor provides which two types of information to ISE? (Choose two.)
- A. User/Device Name
- B. CDP
- C. Encrypted traffic
- D. DHCP
- E. NetFlow
Answer: B,D
Explanation:
Explanation
Device Sensor is a feature that enables Cisco devices to collect and report information about the endpoints connected to them. This information can be used by ISE to identify and classify the endpoints, and apply appropriate policies based on their attributes. Device Sensor can collect information from various sources, such as DHCP, CDP, LLDP, and HTTP User-Agent. Among the options given, only DHCP and CDP are valid sources of information for Device Sensor. References := : Cisco Identity Services Engine Administrator Guide, Release 2.7 - Device Sensor [Cisco Identity Services Engine]- Cisco (https://learningnetworkstore.cisco.com/c/en/us/td/docs/security/ise/2-7/admin_guide/b_ise_admin_guide_27/b_i
2of30
NEW QUESTION # 11
Which protocol is used between an Endpoint and a Switch with an 802.1 authentication?
- A. EAP
- B. MAB
- C. TACACS
- D. RADIUS
Answer: A
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750/software/release/15-0_2_se
/configuration/guide/scg3750/sw8021x.pdf
The protocol that is used between an endpoint and a switch with an 802.1 authentication is EAP, which stands for Extensible Authentication Protocol. EAP is a framework that defines how the endpoint (also called the supplicant) and the switch (also called the authenticator) exchange authentication messages over a wired or wireless network. EAP supports various authentication methods, such as passwords, certificates, tokens, or biometrics, and can be encapsulated in different transport protocols, such as RADIUS, Diameter, or EAPOL. EAP is used in 802.1X authentication, which is a standard for port-based network access control that prevents unauthorized access to a network1.
The other options, TACACS, MAB, and RADIUS, are not protocols that are used between an endpoint and a switch with an 802.1 authentication. TACACS is a protocol that provides remote authentication and authorization for network devices, such as routers or switches, but it is not used for endpoint authentication.
MAB is a technique that uses the MAC address of an endpoint as a credential for 802.1X authentication, but it is not a protocol itself. RADIUS is a protocol that provides centralized authentication, authorization, and accounting for network access, but it is not used directly between the endpoint and the switch, but rather between the switch and the authentication server1. References := : 2: What Is 802.1X Authentication? How Does 802.1x Work? - Fortinet2, 1: IEEE 802.1X - Wikipedia1
NEW QUESTION # 12
Which Cisco SD WAN component provides a secure data plane with remote vEdge routers?
- A. vSmart
- B. vBond
- C. vEdge
- D. vManage
Answer: A
Explanation:
Explanation/Reference:
Reference : https://sdwan-docs.cisco.com/Product_Documentation/Software_Features/ Release_18.1/05Security/01Security_Overview/Data_Plane_Security_Overview
NEW QUESTION # 13
Which two are benefits from a WAN design? (Choose two.)
- A. Provide lower quality service to guest users
- B. Prioritize and secure with granular control
- C. Reduce cost and increase operational complexity
- D. Lower circuit bandwidth requirements
- E. Ensure remote site uptime
Answer: B,E
Explanation:
Explanation
A WAN design is a plan for how to connect multiple sites or locations over a wide area network (WAN). A WAN design can have various benefits, depending on the goals and requirements of the organization. Two of the possible benefits from a WAN design are:
Ensure remote site uptime: A WAN design can help to ensure that remote sites or branches have reliable and consistent connectivity to the central site or the cloud. This can improve the availability and performance of critical applications and services, such as voice, video, collaboration, and data backup. A WAN design can also provide redundancy and resiliency in case of network failures or disasters, by using multiple WAN links, backup routes, or failover mechanisms. For example, SD-WAN is a WAN design that uses software to dynamically route traffic over the best available WAN link, based on the network conditions and the application requirements1.
Prioritize and secure with granular control: A WAN design can also help to prioritize and secure the traffic and applications that flow over the WAN. This can enhance the quality of service (QoS) and the security of the network. A WAN design can use various techniques, such as traffic shaping, policy-based routing, encryption, firewall, or VPN, to classify, prioritize, and secure the WAN traffic according to the business needs and the security policies. For example, TrustSec is a WAN design that uses software-defined segmentation to enforce granular access policies based on the identity and context of users, devices, and applications2.
The other options, provide lower quality service to guest users, reduce cost and increase operational complexity, and lower circuit bandwidth requirements, are not benefits from a WAN design. Providing lower quality service to guest users is not a desirable outcome, as it can affect the user experience and the reputation of the organization. Reducing cost and increasing operational complexity is a trade-off that may not be worth it, as it can create more challenges and risks for the network management and maintenance. Lowering circuit bandwidth requirements is not a benefit in itself, but a means to achieve other benefits, such as reducing cost or improving performance. A WAN design should aim to optimize the bandwidth utilization and allocation, rather than simply lowering it. References := : 1: Cisco SD-WAN Solution Design Guide (CVD) - Cisco1, 2:
Cisco TrustSec Solution Overview - Cisco
NEW QUESTION # 14
Which three options describe fabric overlay concepts? (Choose three.)
- A. A virtual Local Area Network
- B. A link state routing protocol like OSPF
- C. Intermediate System to Intermediate System
- D. An Overlay uses alternate forwarding attributes
- E. An Overlay is a logical topology
- F. GRE is a type of Overlay
Answer: A,E,F
NEW QUESTION # 15
Which three services must be enabled under the ISE Admin settings to successfully integrate ISE, when integrating ISE with DNA-C? (Choose three.)
- A. ServiceNow
- B. PxGrid
- C. SXP services
- D. Passive Identity Service
- E. Threat- Centric NAC
- F. Infoblox
Answer: B,C,D
NEW QUESTION # 16
Which party solution integrates with Cisco's security and network portfolios within the ISE?
- A. 60+ 3rd party solutions
- B. 20+ 3rd party solutions
- C. 25+ 3rd party solutions
- D. 30+ 3rd party solutions
- E. 45+ 3rd party solutions
Answer: A
Explanation:
Explanation/Reference:
NEW QUESTION # 17
What definition is not part of 4D Training?
- A. Defend
- B. Discover
- C. Demo
- D. Deploy
- E. Design
Answer: D
NEW QUESTION # 18
Which Cisco SD WAN component provides a secure data plane with remote vEdge routers?
- A. vBond
- B. vSmart
- C. vEdge
- D. vManage
Answer: C
NEW QUESTION # 19
Which three wireless product families are supported in the current DNA-C 1.1 release? (Choose three.)
- A. AP 3800
- B. WLC 8540
- C. WLC 3504
- D. AP 1260
- E. WLC 5508
Answer: A,B,C
Explanation:
Explanation
According to the Cisco DNA Center Compatibility Matrix1, the current DNA-C 1.1 release supports the following wireless product families:
WLC 8540: This is a high-performance wireless controller that can support up to 6000 access points and
64,000 clients. It is designed for large-scale wireless deployments and offers advanced features such as application visibility and control, flexible radio assignment, and software-defined access2.
AP 3800: This is a high-performance access point that can support up to 5.2 Gbps data rates and 4x4 MIMO with four spatial streams. It is designed for high-density environments and offers features such as flexible radio assignment, CleanAir, ClientLink, and Smart Antenna Connector3.
WLC 3504: This is a compact wireless controller that can support up to 150 access points and 3000 clients. It is designed for small to medium-sized wireless deployments and offers features such as application visibility and control, software-defined access, and TrustSec4.
The other wireless product families, such as AP 1260 and WLC 5508, are not supported in the current DNA-C
1.1 release.
References:
1: Cisco DNA Center Compatibility Matrix
2: Cisco 8540 Wireless Controller Data Sheet - Cisco
3: Cisco Aironet 3800 Series Access Points Data Sheet - Cisco
4: Cisco 3504 Wireless Controller Data Sheet - Cisco
NEW QUESTION # 20
Which three options describe fabric overlay concepts? (Choose three.)
- A. An Overlay uses alternate forwarding attributes
- B. A link state routing protocol like OSPF
- C. A virtual Local Area Network
- D. Intermediate System to Intermediate System
- E. An Overlay is a logical topology
- F. GRE is a type of Overlay
Answer: A,E,F
NEW QUESTION # 21
What two best describe self-healing functionality on vEdges? (Choose two.)
- A. With configuration change, rolling back the configuration change when loss of connectivity to vManage
- B. vManage detect routing outage detection to detect reachability outages and understand their scope and likely root cause
- C. In software upgrade process, rolling back to the previously running software image when connectivity to vManage fails
- D. Software reconfiguration capability allowing for dynamic reconfiguration of existing channels
Answer: A,C
NEW QUESTION # 22
Whatis a challenge of having an SD-Access Centralized design where a single fabric encompasses the main site and all branch sites across the WAN?
- A. Since the traffic is encapsulated, SD-WAN features can't be used to optimize/route traffic.
- B. End to End Routing is not supported
- C. DNA Center does not support it.
- D. SSIDs would be the same across all sites
Answer: A
Explanation:
Explanation
A centralized SD-Access design is where a single fabric domain spans across the main site and all branch sites over the WAN. This design has some challenges, such as:
Since the traffic is encapsulated in VXLAN headers, SD-WAN features such as application-aware routing, QoS, and security policies cannot be applied to the traffic based on the original IP headers. This means that the SD-WAN controller cannot optimize or route the traffic based on the application or user identity. The traffic is treated as a single class of service across the WAN.
The centralized design also introduces a single point of failure and a potential bottleneck at the main site, where the border nodes and the control plane nodes are located. If the main site goes down or the WAN link fails, the branch sites will lose connectivity to the fabric domain and the external networks.
The centralized design also requires a high bandwidth and low latency WAN connection between the main site and the branch sites, which may not be feasible or cost-effective for some scenarios.
References :=
Some possible references are:
Cisco Enterprise Networks SDA, SDWAN and ISE Exam for System Engineers (ENSDENG) Study Guide Cisco SD-Access and SD-WAN Integration Design Guide
NEW QUESTION # 23
Which three statements best describe Cisco ISE configuration capabilities? (Choose three.)
- A. ISE requires an understanding of the command line for set-up and configuration.
- B. ISE wizards and pre-canned configurations ease ISE roll-out significantly.
- C. Cisco Active Advisor provides additional guidance for ISE deployments
- D. ISE Deployment Assistant (IDA) is a built in application designed to accelerate the deployment of Cisco Identity Service Engine (ISE)
- E. Cisco ISE includes wireless setup wizard and visibility wizard.
Answer: B,C,E
NEW QUESTION # 24
What is the default interval for BFD packets?
- A. 5 seconds
- B. 15 seconds
- C. 1 second
- D. 10 seconds
Answer: C
NEW QUESTION # 25
......
Cisco 500-470 Exam Practice Test Questions: https://prep4sure.real4dumps.com/500-470-prep4sure-exam.html
