Latest 500-470 Exam Dumps Cisco Exam from Training Expert ActualCollection
Pass Cisco Cisco Enterprise Networks SDA, SDWAN and ISE Exam for System Engineers PDF Dumps | Recently Updated 38 Questions
Software-Defined Access (SDA) is a Cisco technology that simplifies network management by automating network policies and configurations. This technology enables IT teams to quickly and easily provision new devices, enforce security policies, and ensure compliance across the entire network. Software-Defined WAN (SDWAN) is another important technology that enables organizations to connect remote sites and branch offices to the main network securely and efficiently. Finally, Identity Services Engine (ISE) is an important component of Cisco's security infrastructure that provides network access control and policy enforcement.
Cisco 500-470 Exam Topics:
| Section | Weight | Objectives |
|---|---|---|
| SD-WAN Discover | 8% | - Describe 4D on-demand training - Describe customer discovery (use case, buying triggers) - Describe trends, challenges, benefits, and key capabilities - Describe 4D engagement |
| ISE Design | 12% | - Describe an overview of solutions and architecture - Describe ISE fundamentals - Describe the Access Control feature - Describe the Visibility - Profiling feature - Describe the Guest Access feature - Describe the BYOD feature - Describe the TrustSec feature - Describe high level design considerations |
| ISE Demonstration | 8% | - Describe Demo and POV - Describe products, software, and licensing - Describe ISE caveats - Describe roadmap - ISE, TrustSec, SDA Policy |
| SD-WAN Demonstration | 12% | - Describe demonstration of capability - Describe products - Describe licensing and software - Describe caveats - Describe SD-WAN “What to Sell” - Describe team exercises - Describe SD-WAN Closing-Partner |
| ISE Discover | 6% | - Introduce ISE - Describe trends, challenges, benefits, and capabilities - Describe discovery use case - buying triggers and insights |
| SD-Access Discovery | 6% | - Define discovery - Describe Software Defined Access - Describe trends, challenges, benefits, and key capabilities - Describe discovery use cases |
| SDA Defend | 8% | - Describe competition - Describe closing - Describe products - Describe caveats - Describe roadmap - Describe Software Defined Access “What to Sell” - Describe team exercises |
| ISE Defend | 8% | - Describe ISE competition - Describe ISE "What to Sell" |
| SD-WAN Design | 12% | - Describe high level design considerations - Describe solution-architecture - Describe reinventing WAN security - Describe reinventing WAN connectivity - Describe reinventing WAN application services - Describe reinventing WAN operations - Describe design use cases |
NEW QUESTION # 15
What is an example of Correlated Insights for SDA and Switching?
- A. Roaming Pattern Analysis
- B. AP License Utilization
- C. Control Plane Reachability
- D. Excessive Onboarding Time
Answer: C
Explanation:
Explanation/Reference:
Reference: http://www.tyrc.edu.tw/images/2/29/107051006.pdf page 72
NEW QUESTION # 16
Whatis a challenge of having an SD-Access Centralized design where a single fabric encompasses the main site and all branch sites across the WAN?
- A. SSIDs would be the same across all sites
- B. Since the traffic is encapsulated, SD-WAN features can't be used to optimize/route traffic.
- C. End to End Routing is not supported
- D. DNA Center does not support it.
Answer: B
NEW QUESTION # 17
Which three technologies are used in an SD-Access Fabric? (Choose three.)
- A. OTV
- B. RSVP
- C. LISP
- D. TrustSec
- E. MPLS
- F. VXLAN
Answer: C,D,F
NEW QUESTION # 18
Which are three Cisco ISE use cases? (Choose three.)
- A. BYOD
- B. Assurance
- C. Access Control
- D. Monitoring
- E. Segmentation
- F. Security Incident and Event Management
Answer: A,B,D
Explanation:
Explanation
Cisco ISE is a network access control solution that uses policy-based decision making to determine if a device is allowed access to the network and, if allowed, what level of access this device is given1.Cisco ISE can also provide authentication, authorization, and accounting (AAA) through the RADIUS protocol and device administration through TACACS+ service1.
Some of the use cases of Cisco ISE are:
Access Control: Cisco ISE can grant and control the right level of network access for both wired and wireless devices by employing mainly the 802.1x protocol and EAPoL (EAP over LAN)1.Cisco ISE can also use MAC authentication bypass (MAB) to authenticate devices that are unable to use the EAP protocol1.Additionally, Cisco ISE can integrate with Microsoft Active Directory for confirming user identity1.
Assurance: Cisco ISE can monitor and troubleshoot the various features on ISE and analyze trends of the network activities from a centralized admin node2.Cisco ISE can also provide reports on user andentity behavior analytics (UEBA), enterprise mobility management/mobile device management (EMM/MDM), security incident and event management (SIEM), and segmentation34.
Monitoring: Cisco ISE can provide endpoint visibility with context by collecting and analyzing data from various sources such as endpoints, users, applications, devices, networks, and cloud services4.Cisco ISE can also provide real-time alerts and notifications on security events and anomalies4.
NEW QUESTION # 19
Which are three functions used by ISE automation BYOD flow? (Choose three.)
- A. BioMetrics
- B. LDAP Multi Tenant Provisioning
- C. Active Directory Group Membership
- D. Device Registration
- E. Certificate Enrollment
- F. Supplicant Provisioning
Answer: D,E,F
NEW QUESTION # 20
How does identity management solve two customer problems? (Choose two.)
- A. Manages group membership
- B. Enables and enforces 802.1X across the network platform
- C. Achieves dynamic and adaptive network segmentation
- D. Provides network visibility and security
- E. Increases digitization
Answer: C,D
Explanation:
Explanation
Identity management is the practice of making sure that people and entities with digital identities have the right level of access to enterprise resources like networks and databases. User roles and access privileges are defined and managed through an identity management system, such as Cisco Identity Services Engine (ISE)1.
Identity management solves two customer problems:
Provides network visibility and security: Identity management allows customers to see who and what is on their network, and to control their access based on policies and context. Identity management also integrates with other security solutions, such as Cisco Firepower, Cisco Stealthwatch, or Cisco Umbrella, to detect and respond to threats, and to enforce adaptive network access policies based on the threat level of the endpoints2.
Achieves dynamic and adaptive network segmentation: Identity management enables customers to segment their network based on the identity and context of the users and devices, rather than the IP addresses and VLANs. This allows customers to implement a zero-trust model, where only trusted users and devices can access the resources they need, and where the access policies can be dynamically updated based on the changing conditions and requirements. Identity management also supports Cisco TrustSec, which is a technology that assigns scalable group tags (SGTs) to endpoints and enforces group-based policies (contracts) across the network3.
References:
1: [What Is Identity Access Management (IAM)? - Cisco
NEW QUESTION # 21
Which are three functions used by ISE automation BYOD flow? (Choose three.)
- A. LDAP Multi Tennant Provisioning
- B. BioMetrics
- C. Active Directory Group Membership
- D. Device Registration
- E. Certificate Enrollment
- F. Supplicant Provisioning
Answer: D,E,F
Explanation:
Explanation
ISE automation BYOD flow is a process that allows users to self-enroll their devices to the network without requiring IT intervention. The process consists of three main functions: certificate enrollment, device registration, and supplicant provisioning.
Certificate enrollment is the function that allows users to obtain a digital certificate from a certificate authority (CA) for their devices. This certificate is used to authenticate the device to the network and provide secure communication. ISE supports different CA options, such as Microsoft CA, Cisco ISE CA, or third-party CA .
Device registration is the function that allows users to register their devices to the network and associate them with their identity. This enables ISE to apply policies based on the device type, ownership, and posture. ISE supports different device registration methods, such as portal-based, API-based, or bulk import .
Supplicant provisioning is the function that allows users to install and configure a network access client (supplicant) on their devices. This client is used to connect to the network using the appropriate protocols and settings. ISE supports different supplicant provisioning methods, such as native supplicant, Cisco Network Setup Assistant (NSA), or Cisco AnyConnect Secure Mobility Client (AnyConnect) .
References:
[Cisco Identity Services Engine Administrator Guide, Release 2.7 - BYOD [Cisco Identity Services Engine]] :
[Cisco Identity Services Engine Administrator Guide, Release 2.7 - Certificate Provisioning [Cisco Identity Services Engine]] : [Cisco Identity Services Engine Administrator Guide, Release 2.7 - Device Registration
[Cisco Identity Services Engine]] : [Cisco Identity Services Engine Administrator Guide, Release 2.7 - Supplicant Provisioning [Cisco Identity Services Engine]]
NEW QUESTION # 22
Which three wireless product families are supported in the current DNA-C 1.1 release? (Choose three.)
- A. WLC 3504
- B. WLC 5508
- C. WLC 8540
- D. AP 1260
- E. AP 3800
Answer: A,C,E
Explanation:
Explanation
The current DNA-C 1.1 release supports the following wireless product families:
WLC 3504: This is a wireless LAN controller that provides centralized control, management, and troubleshooting for small to medium-sized enterprises and branch offices. It supports up to 150 access points and 3,000 clients, and offers high availability, scalability, and security features. It is compatible with Cisco DNA Center 1.1 and later releases1.
WLC 8540: This is a wireless LAN controller that provides centralized control, management, and troubleshooting for large enterprises and service providers. It supports up to 6,000 access points and
64,000 clients, and offers high performance, reliability, and flexibility. It is compatible with Cisco DNA Center 1.1 and later releases2.
AP 3800: This is an access point that delivers high-performance wireless connectivity for indoor and outdoor environments. It supports 802.11ac Wave 2 technology, multiuser multiple-input multiple-output (MU-MIMO), flexible radio assignment, and modular design. It is compatible with Cisco DNA Center 1.1 and later releases3.
References:
1: [Cisco Wireless LAN Controller 3504 Data Sheet - Cisco] : 2: [Cisco 8540 Wireless Controller Data Sheet
- Cisco] : 3: [Cisco Aironet 3800 Series Access Points Data Sheet - Cisco]
NEW QUESTION # 23
What definition is not part of 4D Training?
- A. Demo
- B. Defend
- C. Discover
- D. Deploy
- E. Design
Answer: B
Explanation:
Explanation/Reference:
Reference: https://www.cisco.com/c/en_sg/partners/blackbelt/enterprise-networking.html#~stickynav=2
NEW QUESTION # 24
Which Cisco SD WAN component provides a secure data plane with remote vEdge routers?
- A. vSmart
- B. vEdge
- C. vBond
- D. vManage
Answer: A
Explanation:
Explanation
Reference :https://sdwan-docs.cisco.com/Product_Documentation/Software_Features/ Release_18.1/05Security/01Security_Overview/Data_Plane_Security_Overview
NEW QUESTION # 25
Which three services must be enabled under the ISE Admin settings to successfully integrate ISE, when integrating ISE with DNA-C? (Choose three.)
- A. ServiceNow
- B. Threat- Centric NAC
- C. SXP services
- D. Infoblox
- E. Passive Identity Service
- F. PxGrid
Answer: C,E,F
NEW QUESTION # 26
Which is a key function of a Digital Network?
- A. Provides secure data plane with remote vEdge routers
- B. Centralized provisioning
- C. Nat traversal
- D. Software upgrades
Answer: A
NEW QUESTION # 27
How does identity management solve two customer problems? (Choose two.)
- A. Manages group membership
- B. Enables and enforces 802.1X across the network platform
- C. Achieves dynamic and adaptive network segmentation
- D. Provides network visibility and security
- E. Increases digitization
Answer: C,D
NEW QUESTION # 28
Which are three key features within the Cisco ISE that mainly compete with the other RADIUS and NAC products? (Choose three.)
- A. Software based firewall capabilities for selected devices and endpoints.
- B. Ability to authenticate and authorize users and endpoints.
- C. Guest access and guest lifecycle management functionality.
- D. Deep packet inspection upon authorization of endpoints.
- E. BYOD provides auto configuration of endpoints.
Answer: B,C,E
NEW QUESTION # 29
How many vEdge router security zones (VPN's) can be configured?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: D
NEW QUESTION # 30
Which are three Cisco recommendations on "How to Win"? (Choose three.)
- A. Explain support for 3rd party network devices.
- B. Demonstrate complex policy flows, rather show case Wizards and enhanced context visibility.
- C. Show case Cisco portfolio or ISE feature set during PoC
- D. Talk about Cisco's focus on Security and integration with StealthWatch, Sourcefire, WSA, vulnerability scanner to make smarter policy decisions.
- E. Explain architectural advantage of holistic Cisco solution.
Answer: A,D,E
NEW QUESTION # 31
What is the role of DNA Center in SD-Access?
- A. Identifying and Authenticating Endpoints
- B. The point of exchange of reachability and policy for two domains
- C. Maintain a database of Endpoint IDs to Fabric Edge Nodes
- D. Provide GUI management abstraction & Analytics via Multiple Service Apps
Answer: D
Explanation:
Explanation
DNA Center is the central point of management for SD-Access. It provides a graphical user interface (GUI) to design, provision, and monitor the SD-Access fabric. DNA Center also offers various service applications that leverage the network data and analytics to provide insights, automation, and assurance for the network and the applications running on it. DNA Center does not perform the functions of identifying and authenticating endpoints, which are handled by ISE; nor does it act as the point of exchange of reachability and policy for two domains, which are the roles of the border nodes and the control plane nodes; nor does it maintain a database of endpoint IDs to fabric edge nodes, which is the function of the LISP mapping system. References:
Cisco DNA Center User Guide, Release 2.2.2.0, Chapter 1: Introduction to Cisco DNA Center,
https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management
Cisco SD-Access Design Guide, Release 2.2.2.0, Chapter 2: SD-Access Fabric Design,
https://www.cisco.com/c/en/us/td/docs/solutions/CVD/Campus/sda-design-guide-2-2-2-0.html#_Toc67188
NEW QUESTION # 32
Whatis a challenge of having an SD-Access Centralized design where a single fabric encompasses the main site and all branch sites across the WAN?
- A. SSIDs would be the same across all sites
- B. Since the traffic is encapsulated, SD-WAN features can't be used to optimize/route traffic.
- C. End to End Routing is not supported
- D. DNA Center does not support it.
Answer: B
Explanation:
Explanation
A centralized SD-Access design is where a single fabric domain spans across the main site and all branch sites over the WAN. This design has some challenges, such as:
Since the traffic is encapsulated in VXLAN headers, SD-WAN features such as application-aware routing, QoS, and security policies cannot be applied to the traffic based on the original IP headers. This means that the SD-WAN controller cannot optimize or route the traffic based on the application or user identity. The traffic is treated as a single class of service across the WAN.
The centralized design also introduces a single point of failure and a potential bottleneck at the main site, where the border nodes and the control plane nodes are located. If the main site goes down or the WAN link fails, the branch sites will lose connectivity to the fabric domain and the external networks.
The centralized design also requires a high bandwidth and low latency WAN connection between the main site and the branch sites, which may not be feasible or cost-effective for some scenarios.
References :=
Some possible references are:
Cisco Enterprise Networks SDA, SDWAN and ISE Exam for System Engineers (ENSDENG) Study Guide Cisco SD-Access and SD-WAN Integration Design Guide
NEW QUESTION # 33
Which options are Network Access Device types?
- A. Switches, Wireless Controllers, and VPN Gateways
- B. Switches, Routers, and VPN Gateways
- C. Wireless Controllers, Routers, and VPN Gateways
- D. Switches, Wireless Controllers, and Routers
Answer: A
Explanation:
Explanation/Reference:
Reference: https://www.cisco.com/c/en/us/td/docs/security/ise/1-4/admin_guide/b_ise_admin_guide_14/ b_ise_admin_guide_14_chapter_0100.html
NEW QUESTION # 34
What definition is not part of 4D Training?
- A. Demo
- B. Defend
- C. Discover
- D. Deploy
- E. Design
Answer: D
NEW QUESTION # 35
What definition is not part of 4D Training?
- A. Demo
- B. Defend
- C. Discover
- D. Deploy
- E. Design
Answer: D
Explanation:
Explanation
The 4D Training is a methodology that helps Systems Engineers and Field Engineers to understand and sell Cisco Enterprise Networks solutions, such as SD-Access, SD-WAN, and ISE. The 4D stands for Discovery, Design, Demonstrate, and Defend12. These are the four phases of the sales cycle that the training covers, with each phase having specific objectives, activities, and outcomes.
Discovery: This phase involves identifying the customer's needs, challenges, goals, and opportunities, as well as the current state of their network. The objective is to establish a trusted relationship with the customer and uncover their pain points and requirements. The activities include conducting interviews, surveys, assessments, and audits. The outcome is a clear understanding of the customer's business and technical drivers, as well as their readiness and willingness to adopt Cisco solutions.
Design: This phase involves creating a high-level solution architecture that meets the customer's needs and aligns with their vision. The objective is to demonstrate the value proposition and benefits of Cisco solutions, as well as the differentiation from the competition. The activities include developing use cases, scenarios, diagrams, and presentations. The outcome is a compelling and customized solution design that addresses the customer's challenges and opportunities.
Demonstrate: This phase involves showing the capabilities and features of Cisco solutions in action, using live or simulated environments. The objective is to validate the solution design and showcase the advantages and benefits of Cisco solutions, as well as the ease of deployment and operation. The activities include conducting demos, proofs of concept, pilots, and trials. The outcome is a positive customer experience and feedback, as well as a confirmation of the solution fit and feasibility.
Defend: This phase involves addressing the customer's objections, concerns, and questions, as well as overcoming any barriers or risks that may prevent the deal closure. The objective is to reinforce the value proposition and benefits of Cisco solutions, as well as the trust and credibility of Cisco as a partner. The activities include providing references, testimonials, case studies, and best practices. The outcome is a successful deal closure and customer satisfaction.
Therefore, the definition that is not part of the 4D Training is Deploy, which is not one of the four phases of the sales cycle that the training covers.
References:
1: [500-470 ENSDENG - Cisco] : 2: [500-490 ENDESIGN - Cisco]
NEW QUESTION # 36
Which three wireless product families are supported in the current DNA-C 1.1 release? (Choose three.)
- A. WLC 3504
- B. WLC 5508
- C. WLC 8540
- D. AP 1260
- E. AP 3800
Answer: A,C,E
NEW QUESTION # 37
......
Cisco 500-470 exam contains questions that cover a wide range of topics related to Cisco Enterprise Networks, including network design, deployment, and optimization. 500-470 exam also tests the candidate’s knowledge of Cisco SDWAN, which allows for simplified management and control of WAN traffic, and Cisco SDA, which provides end-to-end segmentation and policy enforcement across the network. Additionally, the exam covers Cisco ISE, which is a comprehensive security solution that provides secure access to network resources and helps prevent unauthorized access.
Updated Test Engine to Practice 500-470 Dumps & Practice Exam: https://examcollection.actualcollection.com/500-470-exam-questions.html