Verified & Correct 500-470 Practice Test Reliable Source Feb 03, 2024 Updated
Free Cisco 500-470 Exam Files Downloaded Instantly
NEW QUESTION # 19
How many bytes does a VxLAN header add to an original Ethernet frame?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: C
Explanation:
Explanation
https://www.arista.com/assets/data/pdf/Whitepapers/Arista_Networks_VXLAN_White_Paper.pdf A VxLAN header adds 50 bytes to an original Ethernet frame. This is because a VxLAN header consists of the following components:
8-byte outer UDP header for VxLAN: The default VxLAN destination UDP port number is 47891
20-byte outer IP header: Valid addresses of VTEPs or VxLAN multicast groups on the transport network. Devices in the transport network forward VxLAN packets based on the outer IP header1
8-byte VxLAN header: VxLAN information for the frame. It includes a 24-bit VxLAN Network Identifier (VNI) that identifies the VxLAN of the frame, and an 8-bit flags field that indicates the validity of the VNI1
14-byte inner Ethernet header: The original Ethernet header of the encapsulated frame. It includes the source and destination MAC addresses, the EtherType, and optionally a 4-byte VLAN tag2 The total size of these components is 8 + 20 + 8 + 14 = 50 bytes. Therefore, a VxLAN header adds 50 bytes to an original Ethernet frame.
References :=
VXLAN packet format - Aruba
MTU Considerations for VXLAN | Matt Oswalt
NEW QUESTION # 20
Device Sensor provides which two types of information to ISE? (Choose two.)
- A. Encrypted traffic
- B. User/Device Name
- C. NetFlow
- D. DHCP
- E. CDP
Answer: D,E
NEW QUESTION # 21
What definition is not part of 4D Training?
- A. Defend
- B. Demo
- C. Discover
- D. Design
- E. Deploy
Answer: E
Explanation:
Explanation
The 4D Training is a methodology that helps Systems Engineers and Field Engineers to understand and sell Cisco Enterprise Networks solutions, such as SD-Access, SD-WAN, and ISE. The 4D stands for Discovery, Design, Demonstrate, and Defend12. These are the four phases of the sales cycle that the training covers, with each phase having specific objectives, activities, and outcomes.
Discovery: This phase involves identifying the customer's needs, challenges, goals, and opportunities, as well as the current state of their network. The objective is to establish a trusted relationship with the customer and uncover their pain points and requirements. The activities include conducting interviews, surveys, assessments, and audits. The outcome is a clear understanding of the customer's business and technical drivers, as well as their readiness and willingness to adopt Cisco solutions.
Design: This phase involves creating a high-level solution architecture that meets the customer's needs and aligns with their vision. The objective is to demonstrate the value proposition and benefits of Cisco solutions, as well as the differentiation from the competition. The activities include developing use cases, scenarios, diagrams, and presentations. The outcome is a compelling and customized solution design that addresses the customer's challenges and opportunities.
Demonstrate: This phase involves showing the capabilities and features of Cisco solutions in action, using live or simulated environments. The objective is to validate the solution design and showcase the advantages and benefits of Cisco solutions, as well as the ease of deployment and operation. The activities include conducting demos, proofs of concept, pilots, and trials. The outcome is a positive customer experience and feedback, as well as a confirmation of the solution fit and feasibility.
Defend: This phase involves addressing the customer's objections, concerns, and questions, as well as overcoming any barriers or risks that may prevent the deal closure. The objective is to reinforce the value proposition and benefits of Cisco solutions, as well as the trust and credibility of Cisco as a partner. The activities include providing references, testimonials, case studies, and best practices. The outcome is a successful deal closure and customer satisfaction.
Therefore, the definition that is not part of the 4D Training is Deploy, which is not one of the four phases of the sales cycle that the training covers.
References:
1: [500-470 ENSDENG - Cisco] : 2: [500-490 ENDESIGN - Cisco]
NEW QUESTION # 22
How does identity management solve two customer problems? (Choose two.)
- A. Achieves dynamic and adaptive network segmentation
- B. Increases digitization
- C. Provides network visibility and security
- D. Enables and enforces 802.1X across the network platform
- E. Manages group membership
Answer: A,C
Explanation:
Explanation
Identity management is the practice of making sure that people and entities with digital identities have the right level of access to enterprise resources like networks and databases. User roles and access privileges are defined and managed through an identity management system, such as Cisco Identity Services Engine (ISE)1.
Identity management solves two customer problems:
Provides network visibility and security: Identity management allows customers to see who and what is on their network, and to control their access based on policies and context. Identity management also integrates with other security solutions, such as Cisco Firepower, Cisco Stealthwatch, or Cisco Umbrella, to detect and respond to threats, and to enforce adaptive network access policies based on the threat level of the endpoints2.
Achieves dynamic and adaptive network segmentation: Identity management enables customers to segment their network based on the identity and context of the users and devices, rather than the IP addresses and VLANs. This allows customers to implement a zero-trust model, where only trusted users and devices can access the resources they need, and where the access policies can be dynamically updated based on the changing conditions and requirements. Identity management also supports Cisco TrustSec, which is a technology that assigns scalable group tags (SGTs) to endpoints and enforces group-based policies (contracts) across the network3.
References:
1: [What Is Identity Access Management (IAM)? - Cisco
NEW QUESTION # 23
Which are three functions used by ISE automation BYOD flow? (Choose three.)
- A. Active Directory Group Membership
- B. LDAP Multi Tennant Provisioning
- C. Certificate Enrollment
- D. Supplicant Provisioning
- E. Device Registration
- F. BioMetrics
Answer: C,D,E
Explanation:
Explanation
ISE automation BYOD flow is a process that allows users to self-enroll their devices to the network without requiring IT intervention. The process consists of three main functions: certificate enrollment, device registration, and supplicant provisioning.
Certificate enrollment is the function that allows users to obtain a digital certificate from a certificate authority (CA) for their devices. This certificate is used to authenticate the device to the network and provide secure communication. ISE supports different CA options, such as Microsoft CA, Cisco ISE CA, or third-party CA .
Device registration is the function that allows users to register their devices to the network and associate them with their identity. This enables ISE to apply policies based on the device type, ownership, and posture. ISE supports different device registration methods, such as portal-based, API-based, or bulk import .
Supplicant provisioning is the function that allows users to install and configure a network access client (supplicant) on their devices. This client is used to connect to the network using the appropriate protocols and settings. ISE supports different supplicant provisioning methods, such as native supplicant, Cisco Network Setup Assistant (NSA), or Cisco AnyConnect Secure Mobility Client (AnyConnect) .
References:
[Cisco Identity Services Engine Administrator Guide, Release 2.7 - BYOD [Cisco Identity Services Engine]] :
[Cisco Identity Services Engine Administrator Guide, Release 2.7 - Certificate Provisioning [Cisco Identity Services Engine]] : [Cisco Identity Services Engine Administrator Guide, Release 2.7 - Device Registration
[Cisco Identity Services Engine]] : [Cisco Identity Services Engine Administrator Guide, Release 2.7 - Supplicant Provisioning [Cisco Identity Services Engine]]
NEW QUESTION # 24
Which Cisco SD WAN component provides a secure data plane with remote vEdge routers?
- A. vSmart
- B. vEdge
- C. vManage
- D. vBond
Answer: A
Explanation:
Explanation
Reference :https://sdwan-docs.cisco.com/Product_Documentation/Software_Features/ Release_18.1/05Security/01Security_Overview/Data_Plane_Security_Overview
NEW QUESTION # 25
Which three methods can be implemented and deployed to gather data and provide insight? (Choose three.)
- A. BUM traffic
- B. IPv6
- C. FNF
- D. SNMP
- E. Syslog
- F. ARP caching
Answer: C,D,E
NEW QUESTION # 26
Which two products are supported as "Extended" in DNA-C 1.1? (Choose two.)
- A. AP 3800
- B. Catalyst 4500-E
- C. Catalyst 3560-CX
- D. Catalyst 6807
- E. M3 Line cards
- F. IE switches
Answer: C,F
NEW QUESTION # 27
What is an example of Correlated Insights for SDA and Switching?
- A. AP License Utilization
- B. Control Plane Reachability
- C. Excessive Onboarding Time
- D. Roaming Pattern Analysis
Answer: B
Explanation:
Explanation
https://www.ciscolive.com/c/dam/r/ciscolive/latam/docs/2017/pdf/BRKEWN-2032.pdf
NEW QUESTION # 28
Which two are benefits from a WAN design? (Choose two.)
- A. Reduce cost and increase operational complexity
- B. Lower circuit bandwidth requirements
- C. Prioritize and secure with granular control
- D. Ensure remote site uptime
- E. Provide lower quality service to guest users
Answer: C,D
Explanation:
Explanation
A WAN design is a plan for how to connect multiple sites or locations over a wide area network (WAN). A WAN design can have various benefits, depending on the goals and requirements of the organization. Two of the possible benefits from a WAN design are:
Ensure remote site uptime: A WAN design can help to ensure that remote sites or branches have reliable and consistent connectivity to the central site or the cloud. This can improve the availability and performance of critical applications and services, such as voice, video, collaboration, and data backup. A WAN design can also provide redundancy and resiliency in case of network failures or disasters, by using multiple WAN links, backup routes, or failover mechanisms. For example, SD-WAN is a WAN design that uses software to dynamically route traffic over the best available WAN link, based on the network conditions and the application requirements1.
Prioritize and secure with granular control: A WAN design can also help to prioritize and secure the traffic and applications that flow over the WAN. This can enhance the quality of service (QoS) and the security of the network. A WAN design can use various techniques, such as traffic shaping, policy-based routing, encryption, firewall, or VPN, to classify, prioritize, and secure the WAN traffic according to the business needs and the security policies. For example, TrustSec is a WAN design that uses software-defined segmentation to enforce granular access policies based on the identity and context of users, devices, and applications2.
The other options, provide lower quality service to guest users, reduce cost and increase operational complexity, and lower circuit bandwidth requirements, are not benefits from a WAN design. Providing lower quality service to guest users is not a desirable outcome, as it can affect the user experience and the reputation of the organization. Reducing cost and increasing operational complexity is a trade-off that may not be worth it, as it can create more challenges and risks for the network management and maintenance. Lowering circuit bandwidth requirements is not a benefit in itself, but a means to achieve other benefits, such as reducing cost or improving performance. A WAN design should aim to optimize the bandwidth utilization and allocation, rather than simply lowering it. References := : 1: Cisco SD-WAN Solution Design Guide (CVD) - Cisco1, 2:
Cisco TrustSec Solution Overview - Cisco
NEW QUESTION # 29
Which three options describe fabric overlay concepts? (Choose three.)
- A. An Overlay uses alternate forwarding attributes
- B. An Overlay is a logical topology
- C. A link state routing protocol like OSPF
- D. Intermediate System to Intermediate System
- E. A virtual Local Area Network
- F. GRE is a type of Overlay
Answer: B,E,F
NEW QUESTION # 30
How many bytes does a VxLAN header add to an original Ethernet frame?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: C
NEW QUESTION # 31
Which three technologies are used in an SD-Access Fabric? (Choose three.)
- A. MPLS
- B. RSVP
- C. LISP
- D. VXLAN
- E. OTV
- F. TrustSec
Answer: A,C,D
NEW QUESTION # 32
Which two options are used as part of an ISE POV? (Choose two.)
- A. POV Kit
- B. Implementation on Production Network
- C. Cisco TV
- D. dCloud
- E. YouTube
Answer: A,D
Explanation:
Explanation
An ISE PoV (Proof of Value) is a service that demonstrates the value of Cisco Identity Services Engine (ISE) to potential customers. It consists of two components: a virtual machine (VM) and a license. The VM is a pre-configured ISE environment that can be deployed on any cloud platform, such as Cisco dCloud1. The license is a one-time payment that grants access to the ISE features and capabilities for three years2.
The two options that are used as part of an ISE PoV are A and E. Option A refers to the VM, which is the core component of the ISE PoV. Option E refers to the POV Kit, which is a bundle that includes the VM, the license, and some additional resources, such as documentation, videos, and webinars2. Option B, C, and D are not used as part of an ISE PoV.
References: 1 Cisco dCloud 2 ISE PoV licenses
NEW QUESTION # 33
Which three statements are true regarding Cisco SDWAN license tiers? (Choose three.)
- A. With Enterprise license, TCP optimization is not supported
- B. With Plus license, Hub and spoke, partial mesh are supported
- C. With Plus license, split-tunnel is supported
- D. With Pro license, unlimited segmentations are supported
- E. With Pro license, control and data policies are supported
- F. With Enterprise license, vAnalytics is included
Answer: C,E,F
Explanation:
Explanation
Some of the statements that are true regarding Cisco SD-WAN license tiers are:
With Pro license, control and data policies are supported2. This license tier enables network operators to define and enforce policies for traffic shaping, quality of service (QoS), application optimization, and security2.
With Plus license, split-tunnel is supported3. This license tier enables network operators to use split-tunneling technology to route traffic through different paths based on application or user preferences3.
With Enterprise license, vAnalytics is included4. This license tier enables network operators to use vAnalytics feature to collect and analyze data from various sources such as endpoints, applications, devices, networks, and cloud services4.
NEW QUESTION # 34
What is an example of Correlated Insights for SDA and Switching?
- A. AP License Utilization
- B. Control Plane Reachability
- C. Excessive Onboarding Time
- D. Roaming Pattern Analysis
Answer: B
NEW QUESTION # 35
Which three options describe fabric overlay concepts? (Choose three.)
- A. An Overlay uses alternate forwarding attributes
- B. An Overlay is a logical topology
- C. A link state routing protocol like OSPF
- D. A virtual Local Area Network
- E. Intermediate System to Intermediate System
- F. GRE is a type of Overlay
Answer: A,B,F
Explanation:
Explanation
Fabric overlay concepts are related to the creation of a virtual network topology on top of a physical network infrastructure. The overlay network is usually designed to provide services or features that are not directly supported by the underlay network, such as network segmentation, mobility, or security. Some of the fabric overlay concepts are:
An overlay is a logical topology: An overlay network is a network that is built on top of another network using software or hardware devices that encapsulate and decapsulate packets. The overlay network creates a logical topology that is independent of the physical topology of the underlay network. The overlay network can span multiple Layer 2 or Layer 3 domains and provide end-to-end connectivity for the overlay endpoints. An example of an overlay network is a VPN that connects remote sites over the Internet.
GRE is a type of overlay: Generic Routing Encapsulation (GRE) is a protocol that encapsulates packets of one protocol type within another protocol type. GRE is used to create tunnels between devices that can carry different types of traffic, such as IP, IPv6, MPLS, or Ethernet. GRE is a type of overlay network that can be used to extend Layer 2 or Layer 3 connectivity across different networks or to provide a secure and private communication channel. An example of a GRE overlay network is a DMVPN that uses GRE tunnels to connect branch offices to a central hub over the Internet.
An overlay uses alternate forwarding attributes: An overlay network uses different attributes or identifiers to forward packets than the underlay network. The overlay network adds specific headers or tags to the packets that contain information about the overlay endpoints, such as their logical addresses, group memberships, or policies. The overlay devices use these attributes to forward packets based on the overlay topology and services, rather than the underlay topology and protocols. The underlay devices are unaware of the overlay attributes and forward packets based on the underlay headers. An example of an overlay network that uses alternate forwarding attributes is a VXLAN network that uses VNIs to segment traffic and provide Layer 2 connectivity over a Layer 3 network.
The other options, Intermediate System to Intermediate System (IS-IS), a virtual Local Area Network (VLAN), and a link state routing protocol like OSPF, are not fabric overlay concepts. IS-IS and OSPF are routing protocols that are used to exchange routing information and build the routing table of the underlay network. A VLAN is a Layer 2 segmentation technique that divides a physical network into logical subnets based on the switch port membership. A VLAN is not an overlay network, but it can be part of the underlay network or the overlay network, depending on the design. References := : Fabric Technologies and Overlays - Cisco Learning Network1, What Is a Network Fabric? - Cisco2
NEW QUESTION # 36
How many vEdge router security zones (VPN's) can be configured?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: C
Explanation:
Explanation/Reference:
Reference: https://sdwan-docs.cisco.com/Product_Documentation/Software_Features/ Release_18.1/04Segmentation/02Configuring_Segmentation_(VPNs)
NEW QUESTION # 37
Which party solution integrates with Cisco's security and network portfolios within the ISE?
- A. 30+ 3rd party solutions
- B. 20+ 3rd party solutions
- C. 60+ 3rd party solutions
- D. 25+ 3rd party solutions
- E. 45+ 3rd party solutions
Answer: C
Explanation:
Explanation
Cisco ISE integrates with more than 60 third-party solutions that span across security and network portfolios.
These solutions include network access devices, firewalls, threat detection and prevention systems, vulnerability scanners, endpoint management platforms, cloud services, and more. By integrating with these solutions, Cisco ISE can leverage the information and capabilities of these solutions to enhance the identity and access management, network visibility and segmentation, threat detection and response, and policy enforcement of the network. Some of the examples of third-party solutions that integrate with Cisco ISE are:
Fortinet: Fortinet integrates with Cisco ISE through pxGrid to share user and device information, security group tags, and endpoint posture status. This enables Fortinet to apply granular and dynamic firewall policies based on the identity and context of the endpoints1.
Tripwire: Tripwire integrates with Cisco ISE through pxGrid to share vulnerability and compliance data of the endpoints. This enables Cisco ISE to apply appropriate network access policies based on the risk and compliance level of the endpoints2.
Splunk: Splunk integrates with Cisco ISE through REST APIs to collect and analyze the logs and events generated by Cisco ISE. This enables Splunk to provide network and security insights, dashboards, reports, and alerts based on the Cisco ISE data3.
References := : Cisco Identity Services Engine Administrator Guide, Release 2.7 - ISE Security Ecosystem Integration Guides [Cisco Identity Services Engine] - Cisco4, Solved: ISE Integration with 3rd party solution - Cisco Community1, ISE Security Ecosystem Integration Guides - Cisco Community5, Cisco Identity Services Engine Administrator Guide, Release 2.7 - Splunk Integration [Cisco Identity Services Engine] - Cisco3, Cisco Identity Services Engine Administrator Guide, Release 2.7 - Tripwire Integration [Cisco Identity Services Engine] - Cisco2
https://www.ciscolive.com/c/dam/r/ciscolive/apjc/docs/2017/pdf/BRKSEC-2141.pdf slide 9
NEW QUESTION # 38
Which Cisco SD WAN component provides a secure data plane with remote vEdge routers?
- A. vSmart
- B. vEdge
- C. vManage
- D. vBond
Answer: B
NEW QUESTION # 39
Which three services must be enabled under the ISE Admin settings to successfully integrate ISE, when integrating ISE with DNA-C? (Choose three.)
- A. Infoblox
- B. Passive Identity Service
- C. PxGrid
- D. SXP services
- E. Threat- Centric NAC
- F. ServiceNow
Answer: B,C,D
NEW QUESTION # 40
What definition is not part of 4D Training?
- A. Deploy
- B. Demo
- C. Discover
- D. Design
- E. Defend
Answer: E
NEW QUESTION # 41
Which are three functions used by ISE automation BYOD flow? (Choose three.)
- A. Active Directory Group Membership
- B. Certificate Enrollment
- C. Supplicant Provisioning
- D. LDAP Multi Tenant Provisioning
- E. Device Registration
- F. BioMetrics
Answer: B,C,E
NEW QUESTION # 42
How does identity management solve two customer problems? (Choose two.)
- A. Achieves dynamic and adaptive network segmentation
- B. Increases digitization
- C. Provides network visibility and security
- D. Enables and enforces 802.1X across the network platform
- E. Manages group membership
Answer: A,C
NEW QUESTION # 43
......
Pass Cisco 500-470 exam Dumps 100 Pass Guarantee With Latest Demo: https://pass4sure.troytecdumps.com/500-470-troytec-exam-dumps.html