Cisco® 500-220 Exam Practice Questions (P. 2)
- Full Access (72 questions)
- Six months of Premium Access
- Access to one million comments
- Seamless ChatGPT Integration
- Ability to download PDF files
- Anki Flashcard files for revision
- No Captcha & No AdSense
- Advanced Exam Configuration
Question #6
What are two organization permission types? (Choose two.)
- AFullMost Voted
- BRead-onlyMost Voted
- CMonitor-only
- DWrite
- EWrite-only
Correct Answer:
AB
AB

Excellent find on referencing Meraki's documentation. Indeed, 'Full' and 'Read-only' are correct as they are specifically mentioned as types of organizational permissions on the Cisco Meraki dashboard. These permissions provide distinct levels of access — 'Full' grants complete administrative rights while 'Read-only' permits viewing configurations without making changes.
send
light_mode
delete
Question #7
What is the role of the Meraki Dashboard as the service provider when using SAML for single sign-on to the Dashboard?
- AThe Dashboard generates the SAML request.Most Voted
- BThe Dashboard provides user access credentials.
- CThe Dashboard parses the SAML request and authenticates users.
- DThe Dashboard generates the SAML response.
Correct Answer:
A
A

The Meraki Dashboard acts as the service provider in the SAML authentication process. It is responsible for generating the SAML request which is a critical initial step to "request" authentication from an Identity Provider. This setup is established under SP-initiated SAML allowing streamlined access management and single sign-on capabilities. This aspect ensures a secure yet simplified user access mechanism through external authentication services.
send
light_mode
delete
Question #8
A customer wants to use Microsoft Azure to host corporate application servers.
Which feature does the customer get by using a vMX appliance rather than connecting directly to Azure by VPN?
Which feature does the customer get by using a vMX appliance rather than connecting directly to Azure by VPN?
- Amalware protection
- BSD-WANMost Voted
- Cnext-generation firewall
- Dintrusion prevention
Correct Answer:
C -
C -

The correct answer, next-generation firewall capabilities, is rooted in the vMX appliance's design for Azure. This platform extends many Meraki benefits like auto-VPN and traffic shaping but primarily offers enhanced security features. As a one-armed concentrator, the vMX provides essential firewalling, differentiating it from a basic VPN connection by delivering more managed and secure access to cloud resources. It's crucial then to understand that while SD-WAN is a significant feature, the primary enhancement in this setup is the next-generation firewall capabilities focused on smart, secure connectivity.
send
light_mode
delete
Question #9
DRAG DROP -
Drag and drop the descriptions from the left onto the corresponding MX operation mode on the right.
Drag and drop the descriptions from the left onto the corresponding MX operation mode on the right.

send
light_mode
delete
Question #10
What is a feature of distributed Layer 3 roaming?
- AAn MX Security Appliance is not required as a concentrator.Most Voted
- BAn MX Security Appliance is required as a concentrator.
- CAll wireless client traffic can be split-tunneled.
- DAll wireless client traffic is tunneled.
Correct Answer:
A
A

Indeed, with distributed Layer 3 roaming, access points communicate directly with each other rather than relying on a concentrator. This mode is designed to support layer 3 connections as devices roam between different subnets without necessitating an MX Security Appliance to manage the traffic. It's a more decentralized approach that leverages access points’ capability to maintain continuity of session as they transit across network boundaries, enhancing scalability and performance within the network infrastructure.
send
light_mode
delete
All Pages