Field Engineer 500-490 Dumps Full Questions with Free PDF Questions to Pass [Q16-Q30]

4.3/5 - (3 votes)

Field Engineer 500-490 Dumps Full Questions with Free PDF Questions to Pass

100% Updated Cisco 500-490 Enterprise PDF Dumps

Cisco 500-490 certification exam is a rigorous exam that requires candidates to have a deep understanding of network design principles, routing and switching, wireless access, security, and network management. 500-490 exam consists of 60-70 multiple-choice questions that must be completed within 90 minutes. The passing score for the exam is 750 out of 1000 points.

Cisco 500-490 exam, also known as Designing Cisco Enterprise Networks, is a certification exam that validates the knowledge and skills of network designers who are responsible for designing and implementing complex enterprise network solutions. 500-490 exam is part of the Cisco Certified Network Professional (CCNP) Enterprise certification track and is designed to test the candidates’ ability to design and implement secure, scalable, and resilient enterprise networks.

NO.16 Which are two advantages of a”one switch at a time”approach to integrating SD-Access into an existing brownfield environment? (Choose two.)

appropriate for campus and remote site environments

ideal for protecting recent investment s while upgrading legacy hardware

involves the least risk of all approaches

allows simplified roll back

opens up many new design and deployment opportunities

allows simplified testing prior to cutover

NO.17 Which two activities should occur during an SE’s demo process? (Choose two.)

determining whether the customer would like to dive deeper during a follow up.

asking the customer to provide network drawings or white board the environment for you.

identifying which capabilities require demonstration.

leveraging a company such as Complete Communications to build a financial case.

highlighting opportunities that although not currently within scope would result in lower operational costs and complexity.

NO.18 Which Cisco product supports SD-Access and specifically built lo address new challenges faced by enterprises?

Nexus 7700 w/ Sup2E and M3 line cards

ISR 4221

Catalyst 9500

ASR 1000 MX

CSRv virtual router

Catalyst 6807-XL W/ Sup6T and C6800 10G line cards

NO.19 Which two options are primary functions of Cisco ISE? (Choose two.)

providing VPN access for any type of device

providing information about every device that touches the network

enabling WAN deployment over any type of connection

automatically enabling, disabling, or reducing allocated power to certain devices

enforcing endpoint compliance with network security policies

allocating resources

Explanation/Reference:

NO.20 Which two statements regarding Cisco SD WAN vEdge routers can mitigate DoS attacks against the infrastructure? (Choose two)

Open Certificate Authority and automated enrollment feature

By default, all incoming traffic is denied art the transport (WAN) side interfaces,

Only authorized controllers are allowed to communicate back to the vEdge router after the vEdge router establishes connections with the controllers

In case of direct Internet access, the only traffic allowed back is the traffic matching the state table entries on the vEdge router.

The vEdge routers run on hardened Linux operating systems

NO.21 Which two statements regarding Cisco SD-WAN vEdge routers can mitigate DoS attacks against the infrastructure? (Choose two.)

The vEdge routers run on hardened Linux operating systems.

Only authorized controllers are allowed to communicate back to the vEdg e router after the vEdge router establishes connection with the controllers.

In case of direct Internet access, the only traffic allowed back is the traffic matching the state table entries on the vEdge router.

Open Certificate Authority and automated enrollment feature.

By default, all incoming traffic is denied at the transport (WAN) side interfaces.

Explanation
Cisco SD-WAN vEdge routers can mitigate DoS attacks against the infrastructure by using two mechanisms:
Only authorized controllers are allowed to communicate back to the vEdge router after the vEdge router establishes connection with the controllers. This means that the vEdge router initiates a secure connection to the vSmart controller and the vBond orchestrator using DTLS or TLS, and verifies their identity using certificates. The vEdge router does not accept any incoming connections from the controllers, and only responds to the messages that match the established sessions. This prevents unauthorized or malicious traffic from reaching the vEdge router and consuming its resources12.
By default, all incoming traffic is denied at the transport (WAN) side interfaces. This means that the vEdge router applies an implicit deny-all policy to any traffic that arrives from the WAN side, unless it is explicitly allowed by a security policy. The security policy can be configured to permit only the traffic that matches certain criteria, such as source, destination, protocol, port, or application. This reduces the attack surface of the vEdge router and protects it from unwanted or harmful traffic34.
References:
Cisco SD-WAN Security Features
Cisco SD-WAN Design Guide
Cisco SD-WAN Security Policy Configuration Guide
Cisco SD-WAN vEdge Routers Denial of Service Vulnerability

NO.22 What should you do if you are looking at a strategic win with a customer and the customer wants to examine Cisco ISE for longer than a few weeks?

Give then, some of our flash files mat can be played on any browser

Set them up with an account on a Cisco UCS server that hosts ISE

Set them up with a d Cloud account

Give them our ISE YouTube videos

Provide them with a downloadable POV kit

Provide them to our d Cloud demo library

NO.23 What should you do if you are looking at a strategic win with a customer and the customer wants to examine Cisco ISE for longer than a few weeks?

Give then, some of our flash files mat can be played on any browser

Set them up with an account on a Cisco UCS server that hosts ISE

Set them up with a d Cloud account

Give them our ISE YouTube videos

Provide them with a downloadable POV kit

Provide them to our d Cloud demo library

NO.24 Which three options focus of the current digital business era’? (Choose three.)

loT scale

connectivity

virtualized services

automation

centralized enterprise and web applications

Human scale

NO.25 Which two statements are true regarding CiscoISE?(Choose two.)

ISE plays a critical role in SD-Access.

ISE can provide data about when aspecific device connected to the network.

ThemajorbusinessoutcomesofISEareenhanceduserexperienceandsecureVLAN segmentation.

An ISE deployment requires only a Cisco ISE network access control appliance.

Without integration with any other product, ISE can track the actual physical location of a wireless endpoint as it moves.

NO.26 Which component of the SD Access fabric is responsible for communicating with networks that are external to the fabric?

edge nodes

control plane nodes

intermediate nodes

border-nodes

Explanation
https://www.cisco.com/c/dam/en/us/td/docs/solutions/CVD/Campus/CVD-Software-Defined-Access-Design-Guide-2018AUG.pdf
https://www.cisco.com/c/dam/en/us/td/docs/solutions/CVD/Campus/CVD-Software-Defined-Access-Design-Gu

NO.27 Which two options help you sell Cisco ISE? (Choose two.)

Downplaying the value of px Grid as compared to REST ful APIs

Explaining ISE support for 3rd party network devices

Show casing the entire ISE feature set

Referring to Trust Sec as being only supported on Cisco networks

Discussing (he importance of custom profiling

NO.28 Whichtwostatements regarding CiscoSD-WANvEdge routers canmitigate DoS attacks against the infrastructure? (Choose two.)

The vEdge routers run on hardened Linux operating systems.

Only authorized controllers are allowed to communicate back to the vEdg e router after the vEdge router establishes connection with the controllers.

In case of direct Internet access, the only traffic allowed back is the traffic matching the state table entries on the vEdge router.

Open Certificate Authority and automated enrollment feature.

By default, all incoming traffic is denied at the transport (WAN) side interfaces.

NO.29 Which component of the SD Access fabric is responsible for communicating with networks that are external to the fabric?

edge nodes

control plane nodes

intermediate nodes

border-nodes

Explanation
https://www.cisco.com/c/dam/en/us/td/docs/solutions/CVD/Campus/CVD-Software-Defined-Access-Design-G

NO.30 What is the easiest way to enable SD-Access for all your remote site after you have your campus SD-Access fabric up and running?

Treat all the sites as one fabric domain and use the traditional physical network as the underlay

Use a separate fabric domain for each site and use SD-WAN as the underlay

Use a separate fabric domain for each site and use the traditional physical network as the underlay

Treat all the sites as one fabric domain and use SD-WAN as the underlay

Loading …

Use Valid Exam 500-490 by SurePassExams Books For Free Website: https://www.surepassexams.com/500-490-exam-bootcamp.html

Leave a Reply Cancel reply