500-470 PDF Dumps | Apr 01, 2024 Recently Updated Questions
500-470 Exam Questions – Valid 500-470 Dumps Pdf
Cisco 500-470 certification exam is designed to test the knowledge and skills of system engineers in implementing Cisco Enterprise Networks SDA, SDWAN and ISE solutions. Cisco Enterprise Networks SDA, SDWAN and ISE Exam for System Engineers certification is highly valued in the industry as it is recognized globally and is a testament to an individual's expertise in Cisco networking technologies.
Cisco Enterprise Networks SDA, SDWAN, and ISE Exam for System Engineers is a valuable certification exam for professionals who want to gain expertise in implementing enterprise solutions. 500-470 exam covers critical technologies that are in high demand in the industry, and passing it will give candidates a competitive edge over their peers.
NEW QUESTION # 10
Which protocol is used between an Endpoint and a Switch with an 802.1 authentication?
- A. EAP
- B. MAB
- C. TACACS
- D. RADIUS
Answer: A
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750/software/release/15-0_2_se
/configuration/guide/scg3750/sw8021x.pdf
The protocol that is used between an endpoint and a switch with an 802.1 authentication is EAP, which stands for Extensible Authentication Protocol. EAP is a framework that defines how the endpoint (also called the supplicant) and the switch (also called the authenticator) exchange authentication messages over a wired or wireless network. EAP supports various authentication methods, such as passwords, certificates, tokens, or biometrics, and can be encapsulated in different transport protocols, such as RADIUS, Diameter, or EAPOL. EAP is used in 802.1X authentication, which is a standard for port-based network access control that prevents unauthorized access to a network1.
The other options, TACACS, MAB, and RADIUS, are not protocols that are used between an endpoint and a switch with an 802.1 authentication. TACACS is a protocol that provides remote authentication and authorization for network devices, such as routers or switches, but it is not used for endpoint authentication.
MAB is a technique that uses the MAC address of an endpoint as a credential for 802.1X authentication, but it is not a protocol itself. RADIUS is a protocol that provides centralized authentication, authorization, and accounting for network access, but it is not used directly between the endpoint and the switch, but rather between the switch and the authentication server1. References := : 2: What Is 802.1X Authentication? How Does 802.1x Work? - Fortinet2, 1: IEEE 802.1X - Wikipedia1
NEW QUESTION # 11
What is the default interval for BFD packets?
- A. 5 seconds
- B. 15 seconds
- C. 1 second
- D. 10 seconds
Answer: C
NEW QUESTION # 12
Device Sensor provides which two types of information to ISE? (Choose two.)
- A. User/Device Name
- B. CDP
- C. Encrypted traffic
- D. DHCP
- E. NetFlow
Answer: B,D
NEW QUESTION # 13
Which three methods can be implemented and deployed to gather data and provide insight? (Choose three.)
- A. Syslog
- B. FNF
- C. IPv6
- D. SNMP
- E. ARP caching
- F. BUM traffic
Answer: A,B,D
NEW QUESTION # 14
Device Sensor provides which two types of information to ISE? (Choose two.)
- A. User/Device Name
- B. CDP
- C. Encrypted traffic
- D. DHCP
- E. NetFlow
Answer: B,D
Explanation:
Explanation
Device Sensor is a feature that enables Cisco devices to collect and report information about the endpoints connected to them. This information can be used by ISE to identify and classify the endpoints, and apply appropriate policies based on their attributes. Device Sensor can collect information from various sources, such as DHCP, CDP, LLDP, and HTTP User-Agent. Among the options given, only DHCP and CDP are valid sources of information for Device Sensor. References := : Cisco Identity Services Engine Administrator Guide, Release 2.7 - Device Sensor [Cisco Identity Services Engine]- Cisco (https://learningnetworkstore.cisco.com/c/en/us/td/docs/security/ise/2-7/admin_guide/b_ise_admin_guide_27/b_i
2of30
NEW QUESTION # 15
Which two platforms can host a vEdge Cloud Router? (Choose two.)
- A. Microsoft Azure
- B. AWS
- C. DigitalCloud
- D. Google
- E. Dreamhost
Answer: A,B
NEW QUESTION # 16
How many vEdge router security zones (VPN's) can be configured?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: A
Explanation:
Explanation
https://sdwan-docs.cisco.com/Product_Documentation/Software_Features/Release_18.1/04Segmentation/02Conf
NEW QUESTION # 17
Which two factors are used in calculating the Cisco SD WAN - 1yr, 3yr, or 5yr subscription cost? (Choose two.)
- A. Routing Protocol
- B. Security
- C. Features
- D. Hypervisor Platform
- E. Service Bandwidth
Answer: C,E
NEW QUESTION # 18
Which two are benefits from a WAN design? (Choose two.)
- A. Provide lower quality service to guest users
- B. Prioritize and secure with granular control
- C. Ensure remote site uptime
- D. Reduce cost and increase operational complexity
- E. Lower circuit bandwidth requirements
Answer: B,E
NEW QUESTION # 19
Which party solution integrates with Cisco's security and network portfolios within the ISE?
- A. 60+ 3rd party solutions
- B. 20+ 3rd party solutions
- C. 25+ 3rd party solutions
- D. 30+ 3rd party solutions
- E. 45+ 3rd party solutions
Answer: A
Explanation:
Explanation
Cisco ISE integrates with more than 60 third-party solutions that span across security and network portfolios.
These solutions include network access devices, firewalls, threat detection and prevention systems, vulnerability scanners, endpoint management platforms, cloud services, and more. By integrating with these solutions, Cisco ISE can leverage the information and capabilities of these solutions to enhance the identity and access management, network visibility and segmentation, threat detection and response, and policy enforcement of the network. Some of the examples of third-party solutions that integrate with Cisco ISE are:
Fortinet: Fortinet integrates with Cisco ISE through pxGrid to share user and device information, security group tags, and endpoint posture status. This enables Fortinet to apply granular and dynamic firewall policies based on the identity and context of the endpoints1.
Tripwire: Tripwire integrates with Cisco ISE through pxGrid to share vulnerability and compliance data of the endpoints. This enables Cisco ISE to apply appropriate network access policies based on the risk and compliance level of the endpoints2.
Splunk: Splunk integrates with Cisco ISE through REST APIs to collect and analyze the logs and events generated by Cisco ISE. This enables Splunk to provide network and security insights, dashboards, reports, and alerts based on the Cisco ISE data3.
References := : Cisco Identity Services Engine Administrator Guide, Release 2.7 - ISE Security Ecosystem Integration Guides [Cisco Identity Services Engine] - Cisco4, Solved: ISE Integration with 3rd party solution - Cisco Community1, ISE Security Ecosystem Integration Guides - Cisco Community5, Cisco Identity Services Engine Administrator Guide, Release 2.7 - Splunk Integration [Cisco Identity Services Engine] - Cisco3, Cisco Identity Services Engine Administrator Guide, Release 2.7 - Tripwire Integration [Cisco Identity Services Engine] - Cisco2
https://www.ciscolive.com/c/dam/r/ciscolive/apjc/docs/2017/pdf/BRKSEC-2141.pdf slide 9
NEW QUESTION # 20
Which three options describe fabric overlay concepts? (Choose three.)
- A. An Overlay uses alternate forwarding attributes
- B. A link state routing protocol like OSPF
- C. A virtual Local Area Network
- D. Intermediate System to Intermediate System
- E. An Overlay is a logical topology
- F. GRE is a type of Overlay
Answer: A,E,F
NEW QUESTION # 21
What is a challenge of having an SD-Access Centralized design where a single fabric encompasses the main site and all branch sites across the WAN?
- A. End to End Routing is not supported
- B. DNA Center does not support it
- C. Since the traffic is encapsulated. SD-WAN features can't be used to optimize/route traffic.
- D. SSIDs would be the same across all sites
Answer: A
NEW QUESTION # 22
Which three services must be enabled under the ISE Admin settings to successfully integrateISE, when integrating ISE with DNA-C? (Choose three.)
- A. Passive Identity Service
- B. PxGrid
- C. Threat-Centric NAC
- D. SXP services
- E. ServiceNow
- F. Infoblox
Answer: D,E,F
Explanation:
Explanation
Cisco ISE configuration capabilities include the following features:
ISE Deployment Assistant (IDA): This is a built-in application designed to accelerate the deployment of Cisco Identity Service Engine (ISE) by providing a guided workflow for configuring the most common ISE use cases, such as guest access, BYOD, and secure wired and wireless access1. IDA also provides validation checks, best practices, and troubleshooting tips to ensure a successful deployment.
Wireless Setup Wizard and Visibility Wizard: These are two of the several wizards that Cisco ISE provides to simplify the configuration of various ISE functions and features. The Wireless Setup Wizard helps to configure the wireless network settings, such as SSIDs, authentication methods, and policies, for secure wireless access2. The Visibility Wizard helps to enable the ISE profiling service, which collects and analyzes endpoint data to identify, classify, and monitor devices on the network3.
ISE Wizards and Pre-Canned Configurations: These are the tools that ease the ISE roll-out significantly by providing ready-made templates, policies, and settings for common ISE scenarios, such as posture assessment, device administration, and threat-centric NAC. These tools help to reduce the manual configuration efforts and errors, and speed up the time to value.
References:
1: [Cisco Identity Services Engine Administrator Guide, Release 3.3 - ISE Deployment Assistant [Cisco Identity Services Engine]] : 2: [Cisco Identity Services Engine Administrator Guide, Release 3.3 - Wireless Setup Wizard [Cisco Identity Services Engine]] : 3: [Cisco Identity Services Engine Administrator Guide, Release 3.3 - Visibility Wizard [Cisco Identity Services Engine]] : : [Cisco Identity Services Engine Administrator Guide, Release 3.3 - ISE Wizards and Pre-Canned Configurations [Cisco Identity Services Engine]]
NEW QUESTION # 23
Which are three key features within the Cisco ISE that mainly compete with the other RADIUS and NAC products? (Choose three.)
- A. Ability to authenticate and authorize users and endpoints.
- B. Deep packet inspection upon authorization of endpoints.
- C. Guest access and guest lifecycle management functionality.
- D. BYOD provides auto configuration of endpoints.
- E. Software based firewall capabilities for selected devices and endpoints.
Answer: A,C,D
NEW QUESTION # 24
Which options are Network Access Device types?
- A. Switches, Wireless Controllers, and VPN Gateways
- B. Switches, Wireless Controllers, and Routers
- C. Wireless Controllers, Routers, and VPN Gateways
- D. Switches, Routers, and VPN Gateways
Answer: A
NEW QUESTION # 25
What two best describe self-healing functionality on vEdges? (Choose two.)
- A. With configuration change, rolling back the configuration change when loss of connectivity to vManage
- B. vManage detect routing outage detection to detect reachability outages and understand their scope and likely root cause
- C. In software upgrade process, rolling back to the previously running software image when connectivity to vManage fails
- D. Software reconfiguration capability allowing for dynamic reconfiguration of existing channels
Answer: A,C
NEW QUESTION # 26
Which two products are supported as "Extended" in DNA-C 1.1? (Choose two.)
- A. M3 Line cards
- B. Catalyst 6807
- C. Catalyst 3560-CX
- D. IE switches
- E. AP 3800
- F. Catalyst 4500-E
Answer: C,D
Explanation:
Explanation
https://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise-networks/software-defined-access/guide-c07-7
NEW QUESTION # 27
What is an example of Correlated Insights for SDA and Switching?
- A. Excessive Onboarding Time
- B. Roaming Pattern Analysis
- C. Control Plane Reachability
- D. AP License Utilization
Answer: C
NEW QUESTION # 28
......
500-470 dumps Sure Practice with 38 Questions: https://www.passreview.com/500-470_exam-braindumps.html
500-470 Practice Test Questions Answers Updated 38 Questions: https://drive.google.com/open?id=17sBJWT0Y1LuZqz-Q5yrxF_j8R4mHLkZL