2021 500-490 Premium Files Test pdf - Free Dumps Collection
Get ready to pass the 500-490 Exam right now using our Field Engineer Exam Package
NEW QUESTION 21
Whichtwostatements regarding CiscoSD-WANvEdge routers canmitigate DoS attacks against the infrastructure? (Choose two.)
- A. In case of direct Internet access, the only traffic allowed back is the traffic matching the state table entries on the vEdge router.
- B. The vEdge routers run on hardened Linux operating systems.
- C. By default, all incoming traffic is denied at the transport (WAN) side interfaces.
- D. Only authorized controllers are allowed to communicate back to the vEdg e router after the vEdge router establishes connection with the controllers.
- E. Open Certificate Authority and automated enrollment feature.
Answer: A,D
NEW QUESTION 22
Which two options help you sell Cisco ISE? (Choose two.)
- A. Downplaying the value of pxGrid as compared to RESTful APIs
- B. Referring to TrustSec as being only supported on Cisco networks
- C. Discussing the importance of custom profiling
- D. Explaining ISE support for 3rd party network devices
- E. Showcasing the entire ISE feature set
Answer: D,E
NEW QUESTION 23
WhichCiscoproduct supports SD-Access and specificallybuilt to address new challenges faced by enterprises?
- A. Catalyst 9500
- B. Nexus 7700 w/ Sup2E and M3 line cards
- C. CSRv virtual router
- D. ASR 1000-HX
- E. ISR 4221
- F. Catalyst 6807-XL w/ Sup6T and C6800 10G line cards
Answer: D
NEW QUESTION 24
Which three options focus of the current digital business era'? (Choose three.)
- A. virtualized services
- B. centralized enterprise and web applications
- C. loT scale
- D. automation
- E. connectivity
- F. Human scale
Answer: A,D,E
NEW QUESTION 25
How would cisco ISE handle authentication for your printer that does not have a supplicant?
- A. ISE would not authenticate the printer as printers are not subject to ISE authentication.
- B. ISE would authenticate the printer using MAB.
- C. ISE would authenticate the printer using 8.2.1X authentication
- D. ISE would authenticate the printer using web authentication.
- E. ISE would authenticate the printer using MAC RADIUS authentication
Answer: B
NEW QUESTION 26
What is the easiest way to enable SD-Access for all your remote sites after you have your campus SD-Access fabric up and running?
- A. Use a separate fabric domain for each site and use SD-WAN a s the underlay.
- B. Use a separate fabric domain for each site and use the traditional physical network as theunderlay.
- C. Threat all the sites as one fabric domain and use the traditional physical network as the underlay.
- D. Threat all the sites as one fabric domain and use SD-WAN as the underlay.
Answer: D
NEW QUESTION 27
What are three ways in which Cisco ISE learns information about devices? (Choose three.)
- A. user authentication to the ISE
- B. RADIUS attributes
- C. network servers the device has accessed
- D. RPC mechanism via HTTPS
- E. traffic generated by the device
- F. SMTP agents
Answer: B,D,E
NEW QUESTION 28
Which Cisco vEdge router offers 20 Gb of encrypted throughput?
- A. Cisco vEdge 5000
- B. Cisco vEdge 1000
- C. Cisco vEdge 2000
- D. Cisco vEdge 100
Answer: A
NEW QUESTION 29
Winch two primary categories are displayed on the overall health page of the assurance component in the Cisco DNA Center? (Choose two.)
- A. Client
- B. Wired
- C. Server
- D. Access-Distribution
- E. Network
Answer: D,E
NEW QUESTION 30
Which two statements are true regarding Cisco ISE? (Choose two.)
- A. Without integration with any other product, ISE can track the actual physical location of a wireless endpoint as it moves
- B. An ISE deployment requires only a Cisco ISE network access control appliance
- C. ISE am provide data about when a specific device connected to the network
- D. ISE plays critical role in SD Access
- E. The major business outcomes of ISE are enhanced user experience and secure VLAN segmentation
Answer: C,D
NEW QUESTION 31
Which two statements are true regarding Cisco ISE? (Choose two.)
- A. ISE supports up to 100 Policy Services Nodes
- B. ISE can detected endpoints whose addresses have been translated via NAT.
- C. In two-node standalone ISE deployments failover must be done manually
- D. ISE supports IPv6 downloadable ACLs
- E. The number of logs that ISE can retain is determined by your disk space
- F. In distributed deployments, failover from primary to secondary Policy Administration Nodes happens automatically.
Answer: E,F
NEW QUESTION 32
Which two Cisco ISE use cases typically involve the highest level of implementation complexity? (Choose two.)
- A. Guest and wireless access
- B. Asset visibility
- C. Device management
- D. Software defined access
- E. Software defined segmentation
Answer: A,C
NEW QUESTION 33
Which two statements are true regarding CiscoISE?(Choose two.)
- A. ISE can detected endpoints whose addresses have been translated via NAT.
- B. In two-node standalone ISE deployments, failover must be done manually.
- C. ISE supports up to 100 Policy Services Nodes.
- D. The number of logs that ISE can retain is determined by your disk space.
- E. ISE supports IPv6 downloadable ACLs.
- F. In distributed deployments, failover from primary to secondary Policy Administration Nodes happens automatically.
Answer: A,B
NEW QUESTION 34
Which two activities should occur during an SE's discovery process? (Choose two.)
- A. Establishing credibility with the customer
- B. Mapping Cisco innovation to customer's needs
- C. Referencing the PPDIOO model to effectively facilitate the discussion
- D. Working with the customer to develop a reference architecture
- E. Gathering information about the current state of the customer's network environment
Answer: B,C
NEW QUESTION 35
What are the three foundational elements required for the new operational paradigm'? (Choose three.)
- A. policy based automated provisioning of network of
- B. application QoS
- C. centralization
- D. assurance
- E. multiple technologies at multiple OSI layers
- F. fabric
Answer: A,D,F
NEW QUESTION 36
What statement is true regarding the current time in Enterprise Networking history?
- A. advent of cloud computing
- B. pervasive use of mobile devices
- C. advent of loT
- D. pace of change
Answer: D
NEW QUESTION 37
Which are two Cisco ISE that benefits our customers ? (Choose two.)
- A. helps them stop and contain real time threats
- B. provides network access controller
- C. enables them to set traffic priorities across the network
- D. helps them accelerate application deployment and delivery
Answer: A,B
NEW QUESTION 38
Which three ways are SD-Access and ACI Fabric similar? (Choose three.)
- A. use of group policy
- B. use of Endpoint Groups
- C. use of Virtual Network IDs
- D. focus on user endpoints
- E. use of overlays
- F. use of Scalable Group Tags
Answer: C,D,E
NEW QUESTION 39
What is the easiest way to enable SD-Access for all your remote site after you have your campus SD-Access fabric up and running?
- A. Treat all the sites as one fabric domain and use the traditional physical network as the underlay
- B. Use a separate fabric domain for each site and use the traditional physical network as the underlay
- C. Treat all the sites as one fabric domain and use SD-WAN as the underlay
- D. Use a separate fabric domain for each site and use SD-WAN as the underlay
Answer: A
NEW QUESTION 40
What are the three foundational elements required for the new operational paradigm'? (Choose three.)
- A. fabric
- B. policy based automated provisioning of network of
- C. centralization
- D. assurance
- E. multiple technologies at multiple OSI layers
- F. application QoS
Answer: B,D,F
NEW QUESTION 41
WhichnodeenablesCiscoISEtosharecontextualinformationonadevicewithCiscoStealthwatch?
- A. Policy Administration Node
- B. pXGrid Controller
- C. Inline Posture Node
- D. Monitoring and Troubleshooting Node
Answer: B
NEW QUESTION 42
......
Master 2021 Latest The Questions Field Engineer and Pass 500-490 Real Exam!: https://www.practicetorrent.com/500-490-practice-exam-torrent.html
A fully updated 2021 500-490 Exam Dumps exam guide from training expert PracticeTorrent: https://drive.google.com/open?id=1NyNuOPEpYE3FuDSMISF9Z0U2MQ2WkPZS