500-470 試験問題と解答 - 模擬練習 - 練習問題・模擬試験

Question No : 1
Which Cisco SD WAN component provides a secure data plane with remote vEdge routers?

A.vManage
B.vSmart
C.vBond
D.vEdge

正解:
Explanation:
Reference:
vEdge: The Data Plane Data Plane Physical/Virtual Cisco vEdge • WAN edge routers • Provides secure data plane with remote vEdge routers •
https://sdwan-docs.cisco.com/Product_Documentation/Software_Features/Release_18.1/05Security/01Security_Overview/Data_Plane_Security_Overview

Question No : 2
What is the role of DNA Center in SD-Access?

A.Identifying and Authenticating Endpoints
B.The point of exchange of reachability and policy for two domains
C.Maintain a database of Endpoint IDs to Fabric Edge Nodes
D.provide GUI management abstraction & Analytics via Multiple Service Apps

正解:
Explanation:
§ DNA Controller C Enterprise SDN Controller
(e.g. DNA Center) provides GUI management
and abstraction via Apps that share context

Question No : 3
Which are three Cisco recommendations on “How to Win”? (Choose three.)

A.Talk about Cisco’s focus on Security and integration with StealthWatch, Sourcefire, WSA, vulnerability scanner to make smarter policy decisions.
B.Explain support for 3rd party network devices.
C.Explain architectural advantage of holistic Cisco solution.
D.Demonstrate complex policy flows, rather show case Wizards and enhanced context visibility.
E.Show case Cisco portfolio or ISE feature set during PoC

正解:

Question No : 4
Which three statements are true regarding Cisco SDWAN license tiers? (Choose three.)

A.With Pro license, control and data policies are supported
B.With Plus license, split-tunnel is supported
C.With Pro license, unlimited segmentations are supported
D.With Plus license, Hub and spoke, partial mesh are supported
E.With Enterprise license, vAnalytics is included
F.With Enterprise license, TCP optimization is not supported

正解:

Question No : 5
Which are three Cisco ISE use cases? (Choose three.)

A.BYOD
B.Assurance
C.Monitoring
D.Security Incident and Event Management
E.Access Control
F.Segmentation

正解:
Explanation:
Deployed the following ISE services:
User and Endpoint Visibility
Access Control
Guest Services
BYOD
Segmentation
Device Administration

Question No : 6
Which are three functions used by ISE automation BYOD flow? (Choose three.)

A.Supplicant Provisioning
B.Device Registration
C.Certificate Enrollment
D.BioMetrics
E.LDAP Multi Tenant Provisioning
F.Active Directory Group Membership

正解:

Question No : 7
Which workflow is necessary for setting up a network hierarchy?

A.Provision
B.Design
C.Policy
D.Assurance

正解:
Explanation:
From the Cisco DNA Center home page, choose Design > Network Hierarchy.
https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center-assurance/1-2-8/b_dnac_assurance_1_2_8/b_dnac_assurance_1_2_8_chapter_010.html

Question No : 8
Which three services must be enabled under the ISE Admin settings to successfully integrate ISE, when integrating ISE with DNA-C? (Choose three.)

A.SXP services
B.ServiceNow
C.Threat- Centric NAC
D.Infoblox
E.PxGrid
F.Passive Identity Service

正解:
Explanation:
Select the host name of the ISE node with which you will integrate and, under the General Settings tab, make sure
the following boxes are checked: Enable SXP Service, Enable Passive Identity Service, and pxGrid.
Reference: https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center/1-1/install/b_dnac_install_1_1_0P2/b_dnac_install_1_1_0P2_chapter_010.pdf

Question No : 9
Which are three key features within the Cisco ISE that mainly compete with the other RADIUS and NAC products? (Choose three.)

A.BYOD provides auto configuration of endpoints.
B.Deep packet inspection upon authorization of endpoints.
C.Guest access and guest lifecycle management functionality.
D.Software based firewall capabilities for selected devices and endpoints.
E.Ability to authenticate and authorize users and endpoints.

正解:

Question No : 10
Which two options are used as part of an ISE POV? (Choose two.)

A.Youtube
B.CiscoTV
C.dCloud
D.POV Kit
E.Implementation on Production Network

正解:
Explanation:
https://community.cisco.com/t5/security-documents/selling-ise-demos-and-povs/ta-p/3629542

Question No : 11
Which three wireless product families are supported in the current DNA-C 1.1 release? (Choose three.)

A.AP 1260
B.WLC 8540
C.WLC 5508
D.AP 3800
E.WLC 3504

正解:
Explanation:
https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/8-5/b_SD_Access_Wireless_Deployment_Guide.html

Question No : 12
Which three statements best describe Cisco ISE configuration capabilities? (Choose three.)

A.ISE Deployment Assistant (IDA) is a built in application designed to accelerate the deployment of Cisco Identity Service Engine (ISE)
B.Cisco ISE includes wireless setup wizard and visibility wizard.
C.ISE requires an understanding of the command line for set-up and configuration.
D.ISE wizards and pre-canned configurations ease ISE roll-out significantly.
E.Cisco Active Advisor provides additional guidance for ISE deployments

正解:

Question No : 13
What two best describe self-healing functionality on vEdges? (Choose two.)

A.Software reconfiguration capability allowing for dynamic reconfiguration of existing channels
B.In software upgrade process, rolling back to the previously running software image when connectivity to vManage fails
C.vManage detect routing outage detection to detect reachability outages and understand their scope and likely root cause
D.With configuration change, rolling back the configuration change when loss of connectivity to vManage

正解:

Cisco 500-470 問題練習