Cisco 500-451 Online Practice Questions and Exam Preparation

Cisco 500-451 Online Questions & Answers

• Question 1:

  Which option describes the benefits of a secure BYOD architecture using SGT?

  A. complex network design and lower operational costs
  B. eliminates ACL explosion and offloads filtering to ASA for rich and scalable policy rule automation
  C. complex network design and topology dependent segmentation using Security Group
  D. Segmentation using Security Group is topology dependent and offloads filtering to ASA for rich and scalable policy rule automation.
  B. eliminates ACL explosion and offloads filtering to ASA for rich and scalable policy rule automation

• Question 2:

  What is ISE profiling?

  A. a feature used to identify the endpoints based on network data obtained from a number of enabled probes
  B. an ISE function used for applying security templates to endpoints when ISE is integrated with Cisco Prime Infrastructure
  C. a dynamic policy feature that uses a number of enabled probes to apply the correct ACL to roaming wireless endpoints
  D. a form used for self-onboarding of wireless devices
  A. a feature used to identify the endpoints based on network data obtained from a number of enabled probes

• Question 3:

  Which dashboard under Overview in Prime Infrastructure 2.0 do you use to identify authentication failures and client status?

  A. AVC dashboard
  B. Client dashboard
  C. General dashboard
  D. Context Aware dashboard
  B. Client dashboard

• Question 4:

  Which step is one of the typical configuration steps when configuring Flow Exporter for Prime Infrastructure 2.0 or higher?

  A. Set the IP address to export the Flexible NetFlow cache entry to a destination system.
  B. Configure the source IP address interface for each interface part of Flexible NetFlow exporter.
  C. Configure the TCP transport protocol and a TCP port number 1991 for a Flexible NetFlow flow exporter.
  D. Configure the TCP transport protocol and a TCP port number 9991 for a Flexible NetFlow flow exporter.
  A. Set the IP address to export the Flexible NetFlow cache entry to a destination system.

• Question 5:

  Which action is required when configuring Flexible NetFlow on a Cisco Catalyst switch?

  A. Configure the flow descriptor.
  B. Configure the flow exporter.
  C. Configure the flow importer.
  D. Configure the flow reset target.
  B. Configure the flow exporter.

• Question 6:

  Which feature is used on the Catalyst 6500 Series Switch for real-time traffic capture and decoding?

  A. Lancope Lite
  B. Packet Monitor
  C. Mini Protocol Analyzer
  D. Inline Wireshark module
  C. Mini Protocol Analyzer

• Question 7:

  A network administrator is using the Embedded Event Manager, which is supporting multiple actions initiated from the script. Which two policy actions can be used within the EEM? (Choose two)

  A. Execute a Tcl script.
  B. Send an email.
  C. Run another policy.
  D. Hot swap the supervisor.
  E. Manually send an SNMP trap.
  B. Send an email.
  C. Run another policy.

• Question 8:

  A customer is configuring the IP SLA Embedded Event Manager applet. What is the meaning of this configuration line within the applet: "event track 100 state down"?

  A. Track 100 down state events and create a syslog message when the 100th down state is detected.
  B. The tracking event "100" configured separately is used to detect the down state.
  C. If there is a down state for 100 seconds, trigger the applet actions.
  D. Stop tracking the interface if it flaps more than 100 times.
  B. The tracking event "100" configured separately is used to detect the down state.

• Question 9:

  A customer wants to dynamically monitor the status of a critical route. Which feature should you recommend that the customer use?

  A. Wireshark
  B. Embedded Event Manager
  C. IP Service Level Agreement
  D. Generic Online Diagnostics
  C. IP Service Level Agreement

• Question 10:

  When building the Security Group Egress Policy Matrix, what is the default policy regarding empty intersecting cells?

  A. enabled, SGACLs : permit IP
  B. enabled, SGACLs : deny IP
  C. disabled, SGACLs : permit IP
  D. disabled, SGACLs : deny IP
  A. enabled, SGACLs : permit IP