Cisco 500-470 Free Practice Questions

NEW QUESTION 1
Which options are Network Access Device types?

• A. Switches, Wireless Controllers, and VPN Gateways
• B. Wireless Controllers, Routers, and VPN Gateways
• C. Switches, Wireless Controllers, and Routers
• D. Switches, Routers, and VPN Gateways

Answer: A

NEW QUESTION 2
What two best describe self-healing functionality on vEdges? (Choose two.)

• A. Software reconfiguration capability allowing for dynamic reconfiguration of existing channels
• B. In software upgrade process, rolling back to the previously running software image when connectivity to vManage fails
• C. vManage detect routing outage detection to detect reachability outages and understand their scope and likely root cause
• D. With configuration change, rolling back the configuration change when loss of connectivity to vManage

Answer: BD

NEW QUESTION 3
Which are three key features within the Cisco ISE that mainly compete with the other RADIUS and NAC products? (Choose three.)

• A. BYOD provides auto configuration of endpoints.
• B. Deep packet inspection upon authorization of endpoints.
• C. Guest access and guest lifecycle management functionality.
• D. Software based firewall capabilities for selected devices and endpoints.
• E. Ability to authenticate and authorize users and endpoints.

Answer: ACE

NEW QUESTION 4
Which two options are SD-WAN solution capabilities? (Choose two.)

• A. Ability to provide and integrate security with complementary products and applications
• B. The separation of management plane, control plane and data plane to enable horizontal scaling
• C. Truck roll branch turn up for easy provisioning and new installations
• D. Cloud hosted or on-Premise fully redundant management and control plane functions

Answer: BD

NEW QUESTION 5
How does identity management solve two customer problems? (Choose two.)

• A. Enables and enforces 802.1X across the network platform
• B. Manages group membership
• C. Provides network visibility and security
• D. Increases digitization
• E. Achieves dynamic and adaptive network segmentation

Answer: CE

NEW QUESTION 6
Which three methods can be implemented and deployed to gather data and provide insight? (Choose three.)

• A. IPv6
• B. ARP caching
• C. FNF
• D. BUM traffic
• E. Syslog
• F. SNMP

Answer: CEF

NEW QUESTION 7
What is a challenge of having an SD-Access Centralized design where a single fabric encompasses the main site and all branch sites across the WAN?

• A. End to End Routing is not supported
• B. SSIDs would be the same across all sites
• C. DNA Center does not support it
• D. Since the traffic is encapsulate
• E. SD-WAN features can’t be used to optimize/route traffic.

Answer: A

NEW QUESTION 8
Which three options describe fabric overlay concepts? (Choose three.)

• A. A link state routing protocol like OSPF
• B. A virtual Local Area Network
• C. An Overlay uses alternate forwarding attributes
• D. GRE is a type of Overlay
• E. Intermediate System to Intermediate System
• F. An Overlay is a logical topology

Answer: BDF

NEW QUESTION 9
Which is a key function of a Digital Network?

• A. Centralized provisioning
• B. Software upgrades
• C. Provides secure data plane with remote vEdge routers
• D. Nat traversal

Answer: C

NEW QUESTION 10
Which two factors are used in calculating the Cisco SD WAN – 1yr, 3yr, or 5yr subscription cost? (Choose two.)

• A. Service Bandwidth
• B. Security
• C. Routing Protocol
• D. Features
• E. Hypervisor Platform

Answer: AD

NEW QUESTION 11
Which two products are supported as “Extended” in DNA-C 1.1? (Choose two.)

• A. IE switches
• B. Catalyst 6807
• C. Catalyst 3560-CX
• D. M3 Line cards
• E. AP 3800
• F. Catalyst 4500-E

Answer: AC

NEW QUESTION 12
What definition is not part of 4D Training?

• A. Demo
• B. Discover
• C. Deploy
• D. Defend
• E. Design

Answer: D

NEW QUESTION 13
Which are three Cisco recommendations on “How to Win”? (Choose three.)

• A. Talk about Cisco’s focus on Security and integration with StealthWatch, Sourcefire, WSA, vulnerability scanner to make smarter policy decisions.
• B. Explain support for 3rdparty network devices.
• C. Explain architectural advantage of holistic Cisco solution.
• D. Demonstrate complex policy flows, rather show case Wizards and enhanced context visibility.
• E. Show case Cisco portfolio or ISE feature set during PoC

Answer: ACE

NEW QUESTION 14
Which two are benefits from a WAN design? (Choose two.)

• A. Prioritize and secure with granular control
• B. Reduce cost and increase operational complexity
• C. Lower circuit bandwidth requirements
• D. Provide lower quality service to guest users
• E. Ensure remote site uptime

Answer: AC

NEW QUESTION 15
Which protocol is used between an Endpoint and a Switch with an 802.1 authentication?

• A. RADIUS
• B. EAP
• C. MAB
• D. TACACS

Answer: B

NEW QUESTION 16
Which are three Cisco ISE use cases? (Choose three.)

• A. BYOD
• B. Assurance
• C. Monitoring
• D. Security Incident and Event Management
• E. Access Control
• F. Segmentation

Answer: AEF

NEW QUESTION 17
Which Cisco SD WAN component provides a secure data plane with remote vEdge routers?

• A. vManage
• B. vSmart
• C. vBond
• D. vEdge

Answer: B

Explanation:
Reference :https://sdwan-docs.cisco.com/Product_Documentation/Software_Features/Release_18.1/05Security/01Security_Overview/Data_Plane_Security_Overview

NEW QUESTION 18
Which are three functions used by ISE automation BYOD flow? (Choose three.)

• A. Supplicant Provisioning
• B. Device Registration
• C. Certificate Enrollment
• D. BioMetrics
• E. LDAP Multi Tenant Provisioning
• F. Active Directory Group Membership

Answer: ABC

NEW QUESTION 19
Which three services must be enabled under the ISE Admin settings to successfully integrate ISE, when integrating ISE with DNA-C? (Choose three.)

• A. SXP services
• B. ServiceNow
• C. Threat- Centric NAC
• D. Infoblox
• E. PxGrid
• F. Passive Identity Service

Answer: AEF

NEW QUESTION 20
......