最新的Cisco 650-472免費考試真題

問題1

Which two Cisco security products act as 802.1X authenticate servers? (Choose two)

A. Cisco Security Agent

B. Cisco Identity Services Engine

C. Cisco Information Security Engine

D. CiscoWorks Open RADIUS Server

E. Cisco Security Manager

F. CiscoWorks LAN Management Solution

G. CiscoWorks LAN Management System

H. Cisco Secure Access Control System for Windows

正確答案: B,H

問題2

What is the purpose of the fallback profile command?

A. This command configures the Critical VLAN policy on an interface.

B. This command configures the Guest VLAN policy on an interface.

C. This command globally enables WebAuth authentication.

D. This command configures a WebAuth profile to use in the event that MAB authentication fails.

E. This command configures a WebAuth profile to use in the event that 802.1X authentication fails.

F. This command configures the Restricted VLAN policy on an interface.

正確答案: E

問題3

The information security policy of your organization requires that ports should remain administratively Up. Which selection represents the best practice for an 802.1X-enabled port that is configured to allow only one host to authenticate on the port?

A. The 3k-access(config-if)# authentication violation ignore command can be used to prevent any MAC address from authenticating on the port.

B. The 3k-access(config-if)# authentication violation restrict command can be used to prevent any MAC address from authenticating on the port.

C. The 3k-access(config-if)# authentication violation shutdown command can be used to prevent a second MAC address from authenticating on the port.

D. The 3k-access(config-if)# authentication violation shutdown command can be used to prevent a second MAC address from authenticating on the port.

正確答案: B

問題4

Which two choices are valid components of a Cisco TrustSec wireless infrastructure solution? (Choose two.)

A. 802.11 supplicant

B. wireless repeater

C. wireless LAN controller

D. wired LAN controller

E. autonomous access point

F. lightweight access point

正確答案: C,F

問題5

Which two statements represent good use cases for Wake on LAN? (Choose two.)

A. WoL can be used to power-up hosts to access the IPMI.

B. WoL can be used to save electricity by powering down underused servers and desktops.

C. WoL can be used to power-up hosts for on-demand PXE booting.

D. WoL can be used to power-up hosts for after-hours operating system updates and application patching.

正確答案: C,D

問題6

Which three implementation modes are valid for phased implementation of Cisco TrustSec? (Choose three.)

A. low-security

B. administrative trace

C. monitor

D. low-impact

E. high-security

F. high-impact

正確答案: C,D,E

問題7

Which two statements are true regarding load balancing Cisco ISE Policy Services nodes with a Cisco Application Control Engine? (Choose two.)

A. The virtual IP address of the ACE must be on the same IP subnet as the unicast subnet of the Cisco ISE Policy Services node.

B. Each Cisco ISE Policy Services node must be configured with a unique unicast IP address that is used to receive policy requests from the load balancer.

C. Each Cisco ISE Policy Services node must be configured with a unique (and non-reserved) multicast IP address that is used as a heartbeat channel.

D. The virtual IP address of the ACE must not be on the same IP subnet as the unicast subnet of the Cisco ISE Policy Services node.

E. Each Cisco ISE Policy Services node must be configured with an identical (and non-reserved) multicast IP address that is used as a heartbeat channel.

F. Each Cisco ISE Policy Services node must be configured with an identical unicast IP address that is used to receive policy requests from the load balancer.

正確答案: A,B

最新的Cisco Introduction to 802.1X Operations for Cisco Security Professionals Exam (S802DT1X) - 650-472免費考試真題

聯系我們

站內鏈接

最新更新