2022 Realistic Verified Free Cisco 500-490 Exam Questions [Q15-Q38]

By adminOn May 19, 2022

Rate this post

2022 Realistic Verified Free Cisco 500-490 Exam Questions

500-490 Real Exam Questions and Answers FREE

NEW QUESTION 15
Which three options focus of the current digital business era’? (Choose three.)

loT scale

connectivity

virtualized services

automation

centralized enterprise and web applications

Human scale

NEW QUESTION 16
Which two statements describes Cisco SD-Access? (Choose Two.)

programmable overlays enabling network virtualization across the campus

an automated encryption/decryption engine for highly secured transport requirements

software-defined segmentation and policy enforcement based on user identity and group membership

a collection of tools and applications that are a combination of loose and tight coupling

an overlay for the wired infrastructure in which traffic is tunneled via a GRF tunnel lo a mobility controller for policy and application visibility.

NEW QUESTION 17
Which Cisco product supports SD-Access and specifically built lo address new challenges faced by enterprises?

Nexus 7700 w/ Sup2E and M3 line cards

ISR 4221

Catalyst 9500

ASR 1000 MX

CSRv virtual router

Catalyst 6807-XL W/ Sup6T and C6800 10G line cards

NEW QUESTION 18
What is the easiest way to enable SD-Access for all your remote site after you have your campus SD-Access fabric up and running?

Treat all the sites as one fabric domain and use the traditional physical network as the underlay

Use a separate fabric domain for each site and use SD-WAN as the underlay

Use a separate fabric domain for each site and use the traditional physical network as the underlay

Treat all the sites as one fabric domain and use SD-WAN as the underlay

NEW QUESTION 19
What is the easiest way to enable SD-Access for all your remote sites after you have your campus SD-Access fabric up and running?

Use a separate fabric domain for each site and use the traditional physical network as theunderlay.

Threat all the sites as one fabric domain and use the traditional physical network as the underlay.

Threat all the sites as one fabric domain and use SD-WAN as the underlay.

Use a separate fabric domain for each site and use SD-WAN a s the underlay.

NEW QUESTION 20
Which are two Cisco recommendations that demonstrates SDA? (Choose two.)

Use the CLI to perform as much of the configuration as possible.

Show the customer how to integrate ISE into DNA Center at the end of the demo.

Focus on business benefits.

Keep the demo at a high level.

Be sure you explain the major technologies such as VXLAN and LISP in depth.

NEW QUESTION 21
Which three key differentiators that DNA Assurance provides that our competitors are unable match?
(Choose three.)

Support for Overlay Virtual Transport

On-premise and cloud-base analytics

Apple Insights

VXLAN support

Proactive approach to guided remediation

Network time travel

NEW QUESTION 22
Which two statements are true regarding SD-WAN demonstrations? (Choose two.)

As a Cisco SD-WAN SF, you should you should spend your time learning about the technology rather than contributing to demo innovation

Use demonstrations primarily for large opportunities and competitive situations

During a demo, you should demonstrate and discuss what the team considers important details

There is a big difference between demos that use a top down approach and demos that use a bottom up approach

During a demo you should consider the target audience and the desired outcome

NEW QUESTION 23
Whichtwostatements regarding CiscoSD-WANvEdge routers canmitigate DoS attacks against the infrastructure? (Choose two.)

The vEdge routers run on hardened Linux operating systems.

Only authorized controllers are allowed to communicate back to the vEdg e router after the vEdge router establishes connection with the controllers.

In case of direct Internet access, the only traffic allowed back is the traffic matching the state table entries on the vEdge router.

Open Certificate Authority and automated enrollment feature.

By default, all incoming traffic is denied at the transport (WAN) side interfaces.

NEW QUESTION 24
What are the three foundational elements required for the new operational paradigm? (Choose three.)

centralization

assurance

application QoS

multiple technologies at multiple OSI layers

policy-based automated provisioning of network

fabric

NEW QUESTION 25
Which two statements are true regarding SD-WAN demonstrations? (Choose two.)

As a Cisco SD-WAN SE, you should spend your time learning about the technology rather than contributing to demo innovation.

Use demonstrations primarily for large opportunities and competitive situations.

During a demo, you should demonstrate and discuss what the team considers important details.

There is a big difference between demos that use a top down approach and demos that use a bottom up approach.

During a demo, you should consider the target audience and the desired outcome.

NEW QUESTION 26
Which two statements are true regarding Cisco ISE? (Choose two.)

It distributed deployments, failover from primary to secondary Policy Administration Nodes happens automatically.

The number of logs that ISE can retain is determined by your disk space.

ISE supports IPv6 downloadable ACLs.

ISE can detected endpoints whose addresses have been translated via NAT.

ISE supports up to 100 Policy Services Nodes.

In two-nodes standalone ISE deployments, failover must be done manually.

NEW QUESTION 27
Which protocol runs between the vSmart controllers and between the vSmart controllers and the vEdge routers, and unifies all control plane functions under a single: protocol umbrella1?

BGP

OSPF

IKE

VRRP

NEW QUESTION 28
Which two statements are true regarding Cisco ISE? (Choose two.)

In distributed deployments, failover from primary to secondary Policy Administration Nodes happens automatically.

The number of logs that ISE can retain is determined by your disk space

ISE supports IPv6 downloadable ACLs

ISE can detected endpoints whose addresses have been translated via NAT.

ISE supports up to 100 Policy Services Nodes

In two-node standalone ISE deployments failover must be done manually

NEW QUESTION 29
Which are the three focus areas for reinventing the WAN? (Choose three.)

Centralized device authentication

Secure Elastic Connectivity

Application Quality of Experience

Operations

Cloud Fast

Execution

NEW QUESTION 30
Which two statements regarding Cisco SD WAN vEdge routers can mitigate DoS attacks against the infrastructure? (Choose two)

Open Certificate Authority and automated enrollment feature

By default, all incoming traffic is denied art the transport (WAN) side interfaces,

Only authorized controllers are allowed to communicate back to the vEdge router after the vEdge router establishes connections with the controllers

In case of direct Internet access, the only traffic allowed back is the traffic matching the state table entries on the vEdge router.

The vEdge routers run on hardened Linux operating systems

NEW QUESTION 31
What are three ways in Which Cisco ISE learns information about devices? (Choose three,)

user authentication to the ISE

SMIP agents

RPC mechanism via HTTPS

traffic generated by the device

network servers the device has accessed

RADIUS attributes

NEW QUESTION 32
WhichCiscoproduct supports SD-Access and specificallybuilt to address new challenges faced by enterprises?

ASR 1000-HX

ISR 4221

CSRv virtual router

Catalyst 6807-XL w/ Sup6T and C6800 10G line cards

Catalyst 9500

Nexus 7700 w/ Sup2E and M3 line cards

NEW QUESTION 33
Which two options help you sell Cisco ISE? (Choose two.)

Downplaying the value of px Grid as compared to REST ful APIs

Explaining ISE support for 3rd party network devices

Show casing the entire ISE feature set

Referring to Trust Sec as being only supported on Cisco networks

Discussing (he importance of custom profiling

NEW QUESTION 34
Which are two Cisco recommendations that demonstrates SDA? (Choose two.)

Use the CLI to perform as much of the configuration as possible

Show lite customer how to integrate ISL into DMA Center at the end of the demo

Focus on business benefits

Keep the demo at a high level

Be sure you explain the major technologies such as VXLAN and LISP in depth

NEW QUESTION 35
Which two options are primary functions of Cisco ISE? (Choose two.)

providing VPN access for any type of device

providing information about every device that touches the network

enabling WAN deployment over any type of connection

automatically enabling, disabling, or reducing allocated power to certain devices

enforcing endpoint compliance with network security policies

allocating resources

NEW QUESTION 36
Which two primary categories are displayed on the overall health page of the assurance component in the Cisco DNA Center? (Choose two.)

Client

Server

Access-Distribution

Core

Wired

Network

NEW QUESTION 37
Which element of the Cisco SD-WAN architecture facilitates the functions of controller discovery and NAT traversal?

vBond orchestrator

vManage

vSmart controller

vEdge

NEW QUESTION 38
Which Cisco product were incorporated into Cisco ISE between ISE releases 2.0 and 2.3?

Cisco WSA

Cisco ACS

Cisco ESA

Cisco ASA

Exam Dumps 500-490 Practice Free Latest Cisco Practice Tests: https://www.testkingit.com/Cisco/latest-500-490-exam-dumps.html

2022 Realistic Verified Free Cisco 500-490 Exam Questions [Q15-Q38]

Leave a Reply Cancel reply