Verified 500-470 dumps Q&As - 100% Pass from ActualCollection
Pass 500-470 Exam in First Attempt Guaranteed 2024 Dumps!
Cisco 500-470 certification exam is an important qualification for system engineers who want to work with Cisco Enterprise Networks SDA, SDWAN, and ISE. 500-470 exam is designed to test the knowledge and skills of professionals who are responsible for designing, deploying, and managing complex network solutions. 500-470 exam covers a range of topics, including network design, implementation, and troubleshooting.
NEW QUESTION # 14
Which three statements are true regarding Cisco SDWAN license tiers? (Choose three.)
- A. With Pro license, unlimited segmentations are supported
- B. With Plus license, split-tunnel is supported
- C. With Enterprise license, vAnalytics is included
- D. With Plus license, Hub and spoke, partial mesh are supported
- E. With Pro license, control and data policies are supported
- F. With Enterprise license, TCP optimization is not supported
Answer: B,C,E
Explanation:
Explanation
Some of the statements that are true regarding Cisco SD-WAN license tiers are:
With Pro license, control and data policies are supported2. This license tier enables network operators to define and enforce policies for traffic shaping, quality of service (QoS), application optimization, and security2.
With Plus license, split-tunnel is supported3. This license tier enables network operators to use split-tunneling technology to route traffic through different paths based on application or user preferences3.
With Enterprise license, vAnalytics is included4. This license tier enables network operators to use vAnalytics feature to collect and analyze data from various sources such as endpoints, applications, devices, networks, and cloud services4.
NEW QUESTION # 15
Device Sensor provides which two types of information to ISE? (Choose two.)
- A. User/Device Name
- B. Encrypted traffic
- C. CDP
- D. DHCP
- E. NetFlow
Answer: C,D
Explanation:
Explanation
Device Sensor is a feature that enables Cisco devices to collect and report information about the endpoints connected to them. This information can be used by ISE to identify and classify the endpoints, and apply appropriate policies based on their attributes. Device Sensor can collect information from various sources, such as DHCP, CDP, LLDP, and HTTP User-Agent. Among the options given, only DHCP and CDP are valid sources of information for Device Sensor. References := : Cisco Identity Services Engine Administrator Guide, Release 2.7 - Device Sensor [Cisco Identity Services Engine]- Cisco (https://learningnetworkstore.cisco.com/c/en/us/td/docs/security/ise/2-7/admin_guide/b_ise_admin_guide_27/b_i
2of30
NEW QUESTION # 16
How many vEdge router security zones (VPN's) can be configured?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: B
NEW QUESTION # 17
How many bytes does a VxLAN header add to an original Ethernet frame?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: B
Explanation:
Explanation/Reference:
Reference: https://www.cisco.com/c/en/us/support/docs/lan-switching/vlan/212682-virtual-extensible-lan- and-ethernet-virt.html
NEW QUESTION # 18
Which are three Cisco recommendations on "How to Win"? (Choose three.)
- A. Explain support for 3rd party network devices.
- B. Show case Cisco portfolio or ISE feature set during PoC
- C. Talk about Cisco's focus on Security and integration with StealthWatch, Sourcefire, WSA, vulnerability scanner to make smarter policy decisions.
- D. Demonstrate complex policy flows, rather show case Wizards and enhanced context visibility.
- E. Explain architectural advantage of holistic Cisco solution.
Answer: B,C,E
NEW QUESTION # 19
What is the maximum # of concurrent endpoint with a distributed deployment?
- A. 10,000
- B. 500,000
- C. 100,000
- D. 20,000
Answer: B
Explanation:
Explanation
The maximum number of concurrent endpoints with a distributed deployment depends on the type of deployment and the hardware used. According to the Cisco documentation1, there are two types of distributed deployments: hybrid and dedicated.
A hybrid deployment is where the Policy Administration Node (PAN) and the Monitoring Node (MnT) personas are co-located on the same node, and the Policy Service Node (PSN) persona is distributed across multiple nodes. A hybrid deployment can support up to 20,000 concurrent endpoints with a maximum of 5 PSNs on SNS-36xx or SNS-35xx hardware.
A dedicated deployment is where the PAN, MnT, and PSN personas are separated on different nodes. A dedicated deployment can support up to 500,000 concurrent endpoints with a maximum of 50 PSNs on SNS-36xx or SNS-35xx hardware.
The main difference between the hybrid and dedicated deployments is the scalability and redundancy of the MnT persona, which collects and stores the logs and sessions from the PSNs. By breaking the PAN and MnT roles out on to their own servers, the dedicated deployment can handle more concurrent endpoints and PSNs, as well as provide failover and load balancing for the MnT persona2 References := Performance and Scalability Guide for Cisco Identity Services Engine Solved: ISE concurrent connections query - Cisco Community
NEW QUESTION # 20
Which three statements best describe Cisco ISE configuration capabilities? (Choose three.)
- A. Cisco ISE includes wireless setup wizard and visibility wizard.
- B. ISE requires an understanding of the command line for set-up and configuration.
- C. ISE wizards and pre-canned configurations ease ISE roll-out significantly.
- D. ISE Deployment Assistant (IDA) is a built in application designed to accelerate the deployment of Cisco Identity Service Engine (ISE)
- E. Cisco Active Advisor provides additional guidance for ISE deployments
Answer: A,D,E
NEW QUESTION # 21
Which three methods can be implemented and deployed to gather data and provide insight? (Choose three.)
- A. IPv6
- B. BUM traffic
- C. ARP caching
- D. FNF
- E. SNMP
- F. Syslog
Answer: D,E,F
NEW QUESTION # 22
Which three wireless product families are supported in the current DNA-C 1.1 release? (Choose three.)
- A. AP 1260
- B. WLC 3504
- C. AP 3800
- D. WLC 5508
- E. WLC 8540
Answer: B,C,E
Explanation:
Explanation
The current DNA-C 1.1 release supports the following wireless product families:
WLC 3504: This is a wireless LAN controller that provides centralized control, management, and troubleshooting for small to medium-sized enterprises and branch offices. It supports up to 150 access points and 3,000 clients, and offers high availability, scalability, and security features. It is compatible with Cisco DNA Center 1.1 and later releases1.
WLC 8540: This is a wireless LAN controller that provides centralized control, management, and troubleshooting for large enterprises and service providers. It supports up to 6,000 access points and
64,000 clients, and offers high performance, reliability, and flexibility. It is compatible with Cisco DNA Center 1.1 and later releases2.
AP 3800: This is an access point that delivers high-performance wireless connectivity for indoor and outdoor environments. It supports 802.11ac Wave 2 technology, multiuser multiple-input multiple-output (MU-MIMO), flexible radio assignment, and modular design. It is compatible with Cisco DNA Center 1.1 and later releases3.
References:
1: [Cisco Wireless LAN Controller 3504 Data Sheet - Cisco] : 2: [Cisco 8540 Wireless Controller Data Sheet
- Cisco] : 3: [Cisco Aironet 3800 Series Access Points Data Sheet - Cisco]
NEW QUESTION # 23
Which protocol is used between an Endpoint and a Switch with an 802.1 authentication?
- A. TACACS
- B. MAB
- C. EAP
- D. RADIUS
Answer: C
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750/software/release/15-0_2_se
/configuration/guide/scg3750/sw8021x.pdf
The protocol that is used between an endpoint and a switch with an 802.1 authentication is EAP, which stands for Extensible Authentication Protocol. EAP is a framework that defines how the endpoint (also called the supplicant) and the switch (also called the authenticator) exchange authentication messages over a wired or wireless network. EAP supports various authentication methods, such as passwords, certificates, tokens, or biometrics, and can be encapsulated in different transport protocols, such as RADIUS, Diameter, or EAPOL. EAP is used in 802.1X authentication, which is a standard for port-based network access control that prevents unauthorized access to a network1.
The other options, TACACS, MAB, and RADIUS, are not protocols that are used between an endpoint and a switch with an 802.1 authentication. TACACS is a protocol that provides remote authentication and authorization for network devices, such as routers or switches, but it is not used for endpoint authentication.
MAB is a technique that uses the MAC address of an endpoint as a credential for 802.1X authentication, but it is not a protocol itself. RADIUS is a protocol that provides centralized authentication, authorization, and accounting for network access, but it is not used directly between the endpoint and the switch, but rather between the switch and the authentication server1. References := : 2: What Is 802.1X Authentication? How Does 802.1x Work? - Fortinet2, 1: IEEE 802.1X - Wikipedia1
NEW QUESTION # 24
Which two factors are used in calculating the Cisco SD WAN - 1yr, 3yr, or 5yr subscription cost? (Choose two.)
- A. Hypervisor Platform
- B. Routing Protocol
- C. Features
- D. Service Bandwidth
- E. Security
Answer: C,D
NEW QUESTION # 25
Which two products are supported as "Extended" in DNA-C 1.1? (Choose two.)
- A. IE switches
- B. M3 Line cards
- C. Catalyst 6807
- D. Catalyst 3560-CX
- E. Catalyst 4500-E
- F. AP 3800
Answer: A,D
Explanation:
Explanation
https://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise-networks/software-defined-access/guide-c07-7
NEW QUESTION # 26
Which three technologies are used in an SD-Access Fabric? (Choose three.)
- A. RSVP
- B. OTV
- C. VXLAN
- D. LISP
- E. TrustSec
- F. MPLS
Answer: C,D,E
NEW QUESTION # 27
What is the role of DNA Center in SD-Access?
- A. The point of exchange of reachability and policy for two domains
- B. Maintain a database of Endpoint IDs to Fabric Edge Nodes
- C. Provide GUI management abstraction & Analytics via Multiple Service Apps
- D. Identifying and Authenticating Endpoints
Answer: C
Explanation:
Explanation
DNA Center is the central point of management for SD-Access. It provides a graphical user interface (GUI) to design, provision, and monitor the SD-Access fabric. DNA Center also offers various service applications that leverage the network data and analytics to provide insights, automation, and assurance for the network and the applications running on it. DNA Center does not perform the functions of identifying and authenticating endpoints, which are handled by ISE; nor does it act as the point of exchange of reachability and policy for two domains, which are the roles of the border nodes and the control plane nodes; nor does it maintain a database of endpoint IDs to fabric edge nodes, which is the function of the LISP mapping system. References:
Cisco DNA Center User Guide, Release 2.2.2.0, Chapter 1: Introduction to Cisco DNA Center,
https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management
Cisco SD-Access Design Guide, Release 2.2.2.0, Chapter 2: SD-Access Fabric Design,
https://www.cisco.com/c/en/us/td/docs/solutions/CVD/Campus/sda-design-guide-2-2-2-0.html#_Toc67188
NEW QUESTION # 28
Which options are Network Access Device types?
- A. Switches, Wireless Controllers, and Routers
- B. Switches, Routers, and VPN Gateways
- C. Switches, Wireless Controllers, and VPN Gateways
- D. Wireless Controllers, Routers, and VPN Gateways
Answer: C
Explanation:
Explanation/Reference:
Reference: https://www.cisco.com/c/en/us/td/docs/security/ise/1-4/admin_guide/b_ise_admin_guide_14/ b_ise_admin_guide_14_chapter_0100.html
NEW QUESTION # 29
Which two options are used as part of an ISE POV? (Choose two.)
- A. YouTube
- B. Implementation on Production Network
- C. POV Kit
- D. dCloud
- E. Cisco TV
Answer: C,D
Explanation:
Explanation
An ISE PoV (Proof of Value) is a service that demonstrates the value of Cisco Identity Services Engine (ISE) to potential customers. It consists of two components: a virtual machine (VM) and a license. The VM is a pre-configured ISE environment that can be deployed on any cloud platform, such as Cisco dCloud1. The license is a one-time payment that grants access to the ISE features and capabilities for three years2.
The two options that are used as part of an ISE PoV are A and E. Option A refers to the VM, which is the core component of the ISE PoV. Option E refers to the POV Kit, which is a bundle that includes the VM, the license, and some additional resources, such as documentation, videos, and webinars2. Option B, C, and D are not used as part of an ISE PoV.
References: 1 Cisco dCloud 2 ISE PoV licenses
NEW QUESTION # 30
How many vEdge router security zones (VPN's) can be configured?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: B
Explanation:
Explanation/Reference:
Reference: https://sdwan-docs.cisco.com/Product_Documentation/Software_Features/ Release_18.1/04Segmentation/02Configuring_Segmentation_(VPNs)
NEW QUESTION # 31
What is an example of Correlated Insights for SDA and Switching?
- A. Roaming Pattern Analysis
- B. AP License Utilization
- C. Excessive Onboarding Time
- D. Control Plane Reachability
Answer: D
NEW QUESTION # 32
......
Software Defined Access (SDA) is a new approach to network infrastructure that separates the control and data planes, providing a more flexible and scalable network. The SDA solution provides automation and policy-based segmentation to simplify network management and improve security. 500-470 exam covers topics such as configuring and troubleshooting the SDA fabric, implementing group-based policies, and integrating SDA with other network services.
Cisco 500-470 exam is an important credential for system engineers who work with Cisco networking technologies. Passing the exam demonstrates that the candidate has the knowledge and skills required to design and implement Cisco Enterprise Networks using SDA, SDWAN, and ISE technologies, and is a valuable asset to any organization that relies on Cisco network solutions.
500-470 Dumps Full Questions - Exam Study Guide: https://examcollection.actualcollection.com/500-470-exam-questions.html