100% Guaranteed Results 500-470 Unlimited 38 Questions [2024]
500-470 Dumps PDF - Want To Pass 500-470 Fast
NEW QUESTION # 16
Which two options are used as part of an ISE POV? (Choose two.)
- A. Youtube
- B. Implementation on Production Network
- C. CiscoTV
- D. POV Kit
- E. dCloud
Answer: D,E
NEW QUESTION # 17
Which are three key features within the Cisco ISE that mainly compete with the other RADIUS and NAC products? (Choose three.)
- A. Software based firewall capabilities for selected devices and endpoints.
- B. BYOD provides auto configuration of endpoints.
- C. Deep packet inspection upon authorization of endpoints.
- D. Guest access and guest lifecycle management functionality.
- E. Ability to authenticate and authorize users and endpoints.
Answer: B,D,E
NEW QUESTION # 18
Which three services must be enabled under the ISE Admin settings to successfully integrateISE, when integrating ISE with DNA-C? (Choose three.)
- A. PxGrid
- B. Passive Identity Service
- C. SXP services
- D. Infoblox
- E. Threat-Centric NAC
- F. ServiceNow
Answer: C,D,F
Explanation:
Explanation
Cisco ISE configuration capabilities include the following features:
ISE Deployment Assistant (IDA): This is a built-in application designed to accelerate the deployment of Cisco Identity Service Engine (ISE) by providing a guided workflow for configuring the most common ISE use cases, such as guest access, BYOD, and secure wired and wireless access1. IDA also provides validation checks, best practices, and troubleshooting tips to ensure a successful deployment.
Wireless Setup Wizard and Visibility Wizard: These are two of the several wizards that Cisco ISE provides to simplify the configuration of various ISE functions and features. The Wireless Setup Wizard helps to configure the wireless network settings, such as SSIDs, authentication methods, and policies, for secure wireless access2. The Visibility Wizard helps to enable the ISE profiling service, which collects and analyzes endpoint data to identify, classify, and monitor devices on the network3.
ISE Wizards and Pre-Canned Configurations: These are the tools that ease the ISE roll-out significantly by providing ready-made templates, policies, and settings for common ISE scenarios, such as posture assessment, device administration, and threat-centric NAC. These tools help to reduce the manual configuration efforts and errors, and speed up the time to value.
References:
1: [Cisco Identity Services Engine Administrator Guide, Release 3.3 - ISE Deployment Assistant [Cisco Identity Services Engine]] : 2: [Cisco Identity Services Engine Administrator Guide, Release 3.3 - Wireless Setup Wizard [Cisco Identity Services Engine]] : 3: [Cisco Identity Services Engine Administrator Guide, Release 3.3 - Visibility Wizard [Cisco Identity Services Engine]] : : [Cisco Identity Services Engine Administrator Guide, Release 3.3 - ISE Wizards and Pre-Canned Configurations [Cisco Identity Services Engine]]
NEW QUESTION # 19
Which Cisco SD WAN component provides a secure data plane with remote vEdge routers?
- A. vSmart
- B. vEdge
- C. vManage
- D. vBond
Answer: A
Explanation:
Explanation/Reference:
Reference : https://sdwan-docs.cisco.com/Product_Documentation/Software_Features/ Release_18.1/05Security/01Security_Overview/Data_Plane_Security_Overview
NEW QUESTION # 20
What two best describe self-healing functionality on vEdges?
- A. With configuration change, rolling back the configuration change when loss of connectivity to vManage
- B. Software reconfiguration capability allowing for dynamic reconfiguration of existing channels
- C. vManage detect routing outage detection to detect reachability outages and understand their scope and likely root cause
- D. In software upgrade process, rolling back to the previously running software image when connectivity to vManage fails
Answer: A,D
Explanation:
Explanation
Self-healing functionality on vEdges refers to the ability of the vEdge routers to recover from failures or errors that affect their connectivity or performance. Two examples of self-healing functionality on vEdges are:
In software upgrade process, rolling back to the previously running software image when connectivity to vManage fails: When a vEdge router is upgraded to a new software version, it maintains a backup copy of the previous software image and configuration. If the vEdge router loses connectivity to the vManage controller during or after the upgrade process, it automatically reboots and restores the previous software image and configuration. This ensures that the vEdge router can resume its normal operation and reconnect to the vManage controller1.
With configuration change, rolling back the configuration change when loss of connectivity to vManage: When a vEdge router receives a configuration change from the vManage controller, it applies the change and verifies the connectivity to the vManage controller. If the vEdge router detects that the configuration change has caused a loss of connectivity to the vManage controller, it automatically reverts the configuration change and restores the previous configuration. This prevents the vEdge router from being isolated from the vManage controller and the rest of the SD-WAN fabric2.
References:
Software Upgrade for vEdge Routers - Viptela Documentation
Configuration Rollback - Viptela Documentation
NEW QUESTION # 21
Which options are Network Access Device types?
- A. Switches, Routers, and VPN Gateways
- B. Switches, Wireless Controllers, and Routers
- C. Wireless Controllers, Routers, and VPN Gateways
- D. Switches, Wireless Controllers, and VPN Gateways
Answer: D
Explanation:
Explanation
https://www.cisco.com/c/dam/en/us/td/docs/solutions/CVD/Campus/CVD-Software-Defined-Access-Design-Gu References := Some possible references are:
Cisco Enterprise Networks SDA, SDWAN and ISE Exam for System Engineers (ENSDENG) Study Guide Cisco Identity Services Engine Administrator Guide, Release 2.7 - Configure Network Access Devices
[Cisco Identity Services Engine]
NEW QUESTION # 22
Whatis a challenge of having an SD-Access Centralized design where a single fabric encompasses the main site and all branch sites across the WAN?
- A. DNA Center does not support it.
- B. SSIDs would be the same across all sites
- C. End to End Routing is not supported
- D. Since the traffic is encapsulated, SD-WAN features can't be used to optimize/route traffic.
Answer: D
NEW QUESTION # 23
Which two platforms can host a vEdge Cloud Router? (Choose two.)
- A. Microsoft Azure
- B. AWS
- C. DigitalCloud
- D. Dreamhost
- E. Google
Answer: A,B
Explanation:
Explanation
https://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise-networks/sd-wan/nb-07-clo ud-router-data-sheet-cte-en.pdf A vEdge Cloud Router is a virtualized version of the vEdge router that can be deployed in various cloud environments. According to the Cisco vEdge Cloud Data Sheet1, the vEdge Cloud Router can be instantiated as a virtual machine (VM) on a KVM hypervisor or as a VM on a VMware ESXi hypervisor, as well as in public cloud environments, such as Amazon AWS or Google Cloud Platform. Therefore, the two platforms that can host a vEdge Cloud Router are AWS and Microsoft Azure.
References:
1: [Solutions - Cisco vEdge Cloud Data Sheet - Cisco]
NEW QUESTION # 24
Which three methods three technologies and deployed to gather data and provide insight? (Choose three.)
- A. ARP caching
- B. SNMP
- C. Syslog
- D. BUM traffic
- E. FNF
- F. IPv6
Answer: B,C,E
Explanation:
Explanation
Syslog, FNF (Flexible NetFlow), and SNMP (Simple Network Management Protocol) are three technologies that can be deployed to gather data and provide insight into the network performance, health, and behavior.
Syslog is a standard protocol for logging messages from network devices, such as routers, switches, firewalls, and servers. Syslog messages can be sent to a centralized server for analysis, correlation, and alerting. FNF is a Cisco technology that captures and exports information about network flows, such as source and destination IP addresses, ports, protocols, bytes, packets, and timestamps. FNF can be used to monitor network traffic patterns, identify anomalies, and optimize network resources. SNMP is a protocol that allows network devices to communicate with management systems, such as Cisco DNA Center. SNMP can be used to collect statistics, configuration, and status information from network devices, as well as to send commands and notifications. SNMP can help network administrators to troubleshoot, configure, and manage their network devices remotely. References: Cisco DNA Center User Guide, Release 1.3.1.0 - Monitor the Network 1, Cisco DNA Center User Guide, Release 1.3.1.0 - Configure Flexible NetFlow 2, Cisco DNA Center User Guide, Release 1.3.1.0 - Configure SNMP 3
NEW QUESTION # 25
Which two are benefits from a WAN design? (Choose two.)
- A. Prioritize and secure with granular control
- B. Ensure remote site uptime
- C. Provide lower quality service to guest users
- D. Reduce cost and increase operational complexity
- E. Lower circuit bandwidth requirements
Answer: A,E
NEW QUESTION # 26
How does identity management solve two customer problems? (Choose two.)
- A. Achieves dynamic and adaptive network segmentation
- B. Manages group membership
- C. Enables and enforces 802.1X across the network platform
- D. Increases digitization
- E. Provides network visibility and security
Answer: A,E
Explanation:
Explanation
Identity management is the practice of making sure that people and entities with digital identities have the right level of access to enterprise resources like networks and databases. User roles and access privileges are defined and managed through an identity management system, such as Cisco Identity Services Engine (ISE)1.
Identity management solves two customer problems:
Provides network visibility and security: Identity management allows customers to see who and what is on their network, and to control their access based on policies and context. Identity management also integrates with other security solutions, such as Cisco Firepower, Cisco Stealthwatch, or Cisco Umbrella, to detect and respond to threats, and to enforce adaptive network access policies based on the threat level of the endpoints2.
Achieves dynamic and adaptive network segmentation: Identity management enables customers to segment their network based on the identity and context of the users and devices, rather than the IP addresses and VLANs. This allows customers to implement a zero-trust model, where only trusted users and devices can access the resources they need, and where the access policies can be dynamically updated based on the changing conditions and requirements. Identity management also supports Cisco TrustSec, which is a technology that assigns scalable group tags (SGTs) to endpoints and enforces group-based policies (contracts) across the network3.
References:
1: [What Is Identity Access Management (IAM)? - Cisco
NEW QUESTION # 27
What is the role of DNA Center in SD-Access?
- A. Maintain a database of Endpoint IDs to Fabric Edge Nodes
- B. The point of exchange of reachability and policy for two domains
- C. provide GUI management abstraction & Analytics via Multiple Service Apps
- D. Identifying and Authenticating Endpoints
Answer: C
NEW QUESTION # 28
Which two are benefits from a WAN design? (Choose two.)
- A. Prioritize and secure with granular control
- B. Ensure remote site uptime
- C. Lower circuit bandwidth requirements
- D. Provide lower quality service to guest users
- E. Reduce cost and increase operational complexity
Answer: A,B
NEW QUESTION # 29
Which is a key function of a Digital Network?
- A. Provides secure data plane with remote vEdge routers
- B. Software upgrades
- C. Centralized provisioning
- D. Nat traversal
Answer: C
Explanation:
Explanation
A Digital Network is a network that is based on the Cisco Digital Network Architecture (Cisco DNA), which is an open and extensible, software-driven network architecture designed to rapidly deliver services that enable IT to innovate faster, reduce costs and complexity, lower risk, and comply with regulatory requirements1. A key function of a Digital Network is centralized provisioning, which allows IT to automate the deployment and configuration of network devices and services using a single platform, such as the Cisco DNA Center2.
Centralized provisioning simplifies network management, reduces human errors, and accelerates network changes.
References:
2: [Cisco DNA Software - Digital Network Architecture - Cisco] : 1: [Cisco Digital Network Architecture]
NEW QUESTION # 30
Which two options are used as part of an ISE POV? (Choose two.)
- A. Implementation on Production Network
- B. POV Kit
- C. YouTube
- D. Cisco TV
- E. dCloud
Answer: B,E
Explanation:
Explanation
An ISE PoV (Proof of Value) is a service that demonstrates the value of Cisco Identity Services Engine (ISE) to potential customers. It consists of two components: a virtual machine (VM) and a license. The VM is a pre-configured ISE environment that can be deployed on any cloud platform, such as Cisco dCloud1. The license is a one-time payment that grants access to the ISE features and capabilities for three years2.
The two options that are used as part of an ISE PoV are A and E. Option A refers to the VM, which is the core component of the ISE PoV. Option E refers to the POV Kit, which is a bundle that includes the VM, the license, and some additional resources, such as documentation, videos, and webinars2. Option B, C, and D are not used as part of an ISE PoV.
References: 1 Cisco dCloud 2 ISE PoV licenses
NEW QUESTION # 31
How many bytes does a VxLAN header add to an original Ethernet frame?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: C
Explanation:
Explanation/Reference:
Reference: https://www.cisco.com/c/en/us/support/docs/lan-switching/vlan/212682-virtual-extensible-lan- and-ethernet-virt.html
NEW QUESTION # 32
......
Updated Verified 500-470 Q&As - Pass Guarantee: https://www.pass4leader.com/Cisco/500-470-exam.html
500-470 Practice Exam Dumps - 99% Marks In Cisco Exam: https://drive.google.com/open?id=1D1mQoj0BlwbFe9m_4DRxfIEL3erE7DDo