Nest 0 Cart
Nest Account
Popular Exams
All Categories...
Nest
Nest 0
Contact
Log In / Sign Up
Copyright 2024 © store. All rights reserved.
Home Cisco® 650-472

Cisco® 650-472 Exam Practice Questions (P. 3)

  • Full Access (69 questions)
  • Six months of Premium Access
  • Access to one million comments
  • Seamless ChatGPT Integration
  • Ability to download PDF files
  • Anki Flashcard files for revision
  • No Captcha & No AdSense
  • Advanced Exam Configuration
Get Contributor Access
Question #11
Which two Cisco Catalyst switch command fragments enable WebAuth support on an interface? (Choose two.)
  1. A
    3k-access(config-if)# authentication fallback
  2. B
    3k-access(config-if)# authentication dotlx webauth
  3. C
    3k-access(config-if)S authentication webauth
  4. D
    3k-access(config-if)# dotlx priority webauth
  5. E
    3k-access(config-if)- ip admission
  6. F
    3k-access(config-if)ff dotlx fallback
  7. G
    3k-access(config-if)# authentication order dotlx webauth

Correct Answer:
AE

Question #12
Which two statements are true with regard to the inner and outer phases of an EAP method? (Choose two.)
  1. A
    PEAP can include an optional phase 0 for PAC provisioning.
  2. B
    All EAP methods include an inner and outer phase.
  3. C
    The outer phase is used for authentication.
  4. D
    The inner phase is used for authentication.
  5. E
    The outer phase is used for securing the communication channel.
  6. F
    The inner phase is used for securing the communication channel.

Correct Answer:
DE

Question #13
Which Cisco ISE persona must run on dedicated hardware?
  1. A
    Inline Posture
  2. B
    Administrative
  3. C
    Centralized
  4. D
    Monitoring
  5. E
    Distributed Policy
  6. F
    Policy Services
  7. G
    Standalone

Correct Answer:
A

Question #14
Which statement accurately describes why it is a best practice to pre-populate the MAC addresses of non-802.1X-capable Cisco IP phones into an endpoint database?
  1. A
    If the MAC address is not found in an endpoint database, any PC tethered to the Cisco IP phone will be allowed to access the network unauthenticated.
  2. B
    If the MAC address is not found in an endpoint database, it will take 3 MAB timeouts (90 seconds) before the MAC address of the Cisco IP phone is automatically entered in the database. No calls can be made in the interim.
  3. C
    If the MAC address is not found in an endpoint database, authentication will fail for the Cisco IP phone and the tethered PC port on the phone will be set to err- disable. The PC will not be able to communicate on the network.
  4. D
    If the MAC address is not found in an endpoint database, authentication will fail for the Cisco IP phone and the Catalyst switch port will be set to err-disable.

Correct Answer:
B

Question #15
Which two Cisco security products act as 802.1X authenticate servers? (Choose two)
  1. A
    Cisco Security Agent
  2. B
    CiscoWorks LAN Management System
  3. C
    Cisco Information Security Engine
  4. D
    Cisco Security Manager
  5. E
    Cisco Secure Access Control System for Windows
  6. F
    CiscoWorks LAN Management Solution
  7. G
    CiscoWorks Open RADIUS Server
  8. H
    Cisco Identity Services Engine

Correct Answer:
EH

Previous Questions Next Questions

All Pages