Cisco 500-490 Practice Test Questions – Designing Cisco Enterprise Networks – PassQuestion Free Questions To Test Online

1. Which component of the SD-Access fabric is responsible for communicating with networks that are external to the fabric?

edge nodes

control plane nodes

intermediate nodes

border nodes

2. Which protocol runs between the vSmart controllers and between the vSmart controllers and the vEdge routers, and unifies all control plane functions under a single protocol umbrella?

BGP

OSPF

IKE

OMP

VRRP

3. Which two statements regarding Cisco SD-WAN vEdge routers can mitigate DoS attacks against the infrastructure? (Choose two.)

Open Certificate Authority and automated enrollment feature.

By default, all incoming traffic is denied at the transport (WAN) side interfaces.

Only authorized controllers are allowed to communicate back to the vEdge router after the vEdge router establishes connections with the controllers.

In case of direct Internet access, the only traffic allowed back is the traffic matching the state table entries on the vEdge router.

The vEdge routers run on hardened Linux operating systems

4. Which two activities should occur during an SE’s discovery process? (Choose two.)

Establishing credibility with the customer

Working with the customer to develop a reference architecture

Referencing the PPDIOO model to effectively facilitate the discussion

Gathering information about the current state of the customer’s network environment

Mapping Cisco innovation to customer’s needs

5. What are the three foundational elements required for the new operational paradigm? (Choose three.)

centralization

assurance

application QoS

multiple technologies at multiple OSI layers

policy-based automated provisioning of network

fabric

6. Which two statements are true regarding Cisco ISE? (Choose two.)

It distributed deployments, failover from primary to secondary Policy Administration Nodes happens automatically.

The number of logs that ISE can retain is determined by your disk space

ISE supports IPv6 downloadable ACLs

ISE can detected endpoints whose addresses have been translated via NAT.

ISE supports up to 100 Policy Services Nodes.

In two-nodes standalone ISE deployments, failover must be done manually.

7. Which Cisco product were incorporated into Cisco ISE between ISE releases 2.0 and 2.3?

Cisco ASA

Cisco ESA

Cisco ACS

Cisco WSA

8. Which two Cisco ISE use cases typically involve the highest level of implementation complexity? (Choose two.)

Guest and wireless access

Software-defined access

Device management

Asset visibility

Software-defined segmentation

Cisco 500-490 Practice Test Questions – Designing Cisco Enterprise Networks

Cisco 500-490 Practice Test Questions – Designing Cisco Enterprise Networks

Leave a Reply Cancel reply