Cisco Cisco Certifications 500-470 Questions & Answers

• Question 1:

  What definition is not part of 4D Training?

  A. Demo

  B. Discover

  C. Deploy

  D. Defend

  E. Design

  Correct Answer: C

  Deploy is the correct answer for this question. Defend is part of the 4D's.

• Question 2:

  Which party solution integrates with Cisco's security and network portfolios within the ISE?

  A. 25+ 3rd party solutions

  B. 20+ 3rd party solutions

  C. 30+ 3rd party solutions

  D. 45+ 3rd party solutions

  E. 60+ 3rd party solutions

  Correct Answer: E

• Question 3:

  Device Sensor provides which two types of information to ISE? (Choose two.)

  A. DHCP

  B. Encrypted traffic

  C. User/Device Name

  D. CDP

  E. NetFlow

  Correct Answer: AD

  Reference:https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/200292-Configure-Device-Sensor-for-ISE-Profilin.html?referring_site=REandpos=1andpage=https://www.cisco.com/c/en/us/td/docs/switches/lan/ catalyst3750/software/release/15-0_1_se/device_sensor/guide/sensor_guide.html

• Question 4:

  How many bytes does a VxLAN header add to an original Ethernet frame?

  A. 36

  B. 50

  C. 48

  D. 64

  Correct Answer: B

  Reference:https://www.cisco.com/c/en/us/support/docs/lan-switching/vlan/212682-virtual-extensible-lan-andethernet-virt.html

• Question 5:

  Which options are Network Access Device types?

  A. Switches, Wireless Controllers, and VPN Gateways

  B. Wireless Controllers, Routers, and VPN Gateways

  C. Switches, Wireless Controllers, and Routers

  D. Switches, Routers, and VPN Gateways

  Correct Answer: A

  Reference:https://www.cisco.com/c/en/us/td/docs/security/ise/1-4/admin_guide/b_ise_admin_guide_14/ b_ise_admin_guide_14_chapter_0100.html

• Question 6:

  How does identity management solve two customer problems? (Choose two.)

  A. Enables and enforces 802.1X across the network platform

  B. Manages group membership

  C. Provides network visibility and security

  D. Increases digitization

  E. Achieves dynamic and adaptive network segmentation

  Correct Answer: CE

  Reference:https://www.slideshare.net/robboyd/techwisetv-workshop-cisco-identity-services-engine-ise slide 3

• Question 7:

  Which two products are supported as "Extended" in DNA-C 1.1? (Choose two.)

  A. IE switches

  B. Catalyst 6807

  C. Catalyst 3560-CX

  D. M3 Line cards

  E. AP 3800

  F. Catalyst 4500-E

  Correct Answer: AC

  Reference:https://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise-networks/software-definedaccess/guide-c07-739242.pdf

• Question 8:

  How many vEdge router security zones (VPN's) can be configured?

  A. 256

  B. 32

  C. 510

  D. 16

  Correct Answer: C

  Reference:https://sdwan-docs.cisco.com/Product_Documentation/Software_Features/ Release_18.1/04Segmentation/02Configuring_Segmentation_(VPNs)

• Question 9:

  Which three options describe fabric overlay concepts? (Choose three.)

  A. A link state routing protocol like OSPF

  B. A virtual Local Area Network

  C. An Overlay uses alternate forwarding attributes

  D. GRE is a type of Overlay

  E. Intermediate System to Intermediate System

  F. An Overlay is a logical topology

  Correct Answer: CDF

  https://www.cisco.com/c/dam/m/hr_hr/training-events/2017/cisco-connect/pdf/Cisco-Campus-Fabric-Introduction.pdf (page 13)

• Question 10:

  Which three methods can be implemented and deployed to gather data and provide insight? (Choose three.)

  A. IPv6

  B. ARP caching

  C. FNF

  D. BUM traffic

  E. Syslog

  F. SNMP

  Correct Answer: CEF

  https://www.cisco.com/c/dam/m/en_ph/connect/pdfs/introducing-dna-assurance-jason-pernell-final.pdf