Nest 0 Cart
Nest Account
Popular Exams
All Categories...
Nest
Nest 0
Contact
Log In / Sign Up
Copyright 2024 © store. All rights reserved.
Home Cisco® 650-472

Cisco® 650-472 Exam Practice Questions (P. 4)

  • Full Access (69 questions)
  • Six months of Premium Access
  • Access to one million comments
  • Seamless ChatGPT Integration
  • Ability to download PDF files
  • Anki Flashcard files for revision
  • No Captcha & No AdSense
  • Advanced Exam Configuration
Get Contributor Access
Question #16
Which two EAP methods require server-side digital certificates? (Choose two)
  1. A
    EAP-FAST
  2. B
    PEAP
  3. C
    LEAP
  4. D
    EAP-MD5
  5. E
    EAP-TLS

Correct Answer:
BE

Question #17
Which two statements are true regarding load balancing Cisco ISE Policy Services nodes with a Cisco Application Control Engine? (Choose two.)
  1. A
    Each Cisco ISE Policy Services node must be configured with an identical unicast IP address that is used to receive policy requests from the load balancer.
  2. B
    Each Cisco ISE Policy Services node must be configured with a unique (and non-reserved) multicast IP address that is used as a heartbeat channel.
  3. C
    Each Cisco ISE Policy Services node must be configured with an identical (and non-reserved) multicast IP address that is used as a heartbeat channel.
  4. D
    The virtual IP address of the ACE must be on the same IP subnet as the unicast subnet of the Cisco ISE Policy Services node.
  5. E
    The virtual IP address of the ACE must not be on the same IP subnet as the unicast subnet of the Cisco ISE Policy Services node.
  6. F
    Each Cisco ISE Policy Services node must be configured with a unique unicast IP address that is used to receive policy requests from the load balancer.

Correct Answer:
DF

Question #18
Which statement is true for certificate auto-enrollment on a Cisco IP phone?
  1. A
    Cisco Unified Communications Manager CA Proxy Function (CAPF) is capable of auto-enrolling certificates.
  2. B
    Cisco Unified Communications Manager Certificate Auto-Enroll Function (CAEF) is capable of auto-enrolling certificates.
  3. C
    Cisco IP phones are capable of using digital certificates, but manual enrollment is required.
  4. D
    Cisco IP phones are not capable of using digital certificates.
  5. E
    Microsoft Windows 2003 Certificate Server Telephony plug-in can be used for auto-enrolling certificates.
  6. F
    Microsoft Windows 2008 Enterprise Certificate Server Telephony plug-in can be used for auto- enrolling certificates.

Correct Answer:
A

Question #19
What is the purpose of the guest VLAN on a Cisco Catalyst switch?
  1. A
    It provides configurable guest access to devices that have a supplicant but lack local credentials.
  2. B
    It provides configurable guest access to non-supplicant devices that lack local credentials.
  3. C
    It provides configurable guest access to devices that have a supplicant when the authenticator is down or unreachable.
  4. D
    It provides configurable guest access to non-supplicant devices that have local credentials.
  5. E
    It provides configurable guest access to devices that have a supplicant when the authentication server is down or unreachable.

Correct Answer:
B

Question #20
Which two PEAP requirements must be met to authenticate the TLS session? (Choose two.)
  1. A
    The supplicant requires only an identity certificate.
  2. B
    Cisco ISE requires an identity certificate and a CA certificate.
  3. C
    The authenticator requires only an identity certificate.
  4. D
    The supplicant requires an identity certificate and a CA certificate.
  5. E
    The authenticator requires an identity certificate and a CA certificate.
  6. F
    The supplicant requires only a CA certificate.
  7. G
    Cisco ISE requires only an identity certificate.

Correct Answer:
BD

Previous Questions Next Questions

All Pages