[Free] 2018(May) Dumps4cert Testinsides Cisco 650-472 Dumps with VCE and PDF Download 1-10

Dumps4cert.com : Latest Dumps with PDF and VCE Files
2018 May Cisco Official New Released 650-472
100% Free Download! 100% Pass Guaranteed!

Introduction to 802.1X Operations for Cisco Security Professionals Exam

Question No: 1

Which two statements represent good use cases for Wake on LAN? (Choose two.)

  1. WoL can be used to power-up hosts for on-demand PXE booting.

  2. WoL can be used to power-up hosts for after-hours operating system updates and application patching.

  3. WoL can be used to power-up hosts to access the IPMI.

  4. WoL can be used to save electricity by powering down underused servers and desktops.

Answer: A,B

Question No: 2

Which two choices are valid methods of authorizing a wired supplicant? (Choose two.)


  2. VLAN assignment

  3. dACL

  4. EAPOL


Answer: B,C

Question No: 3

Which two statements about MACsec security are true? (Choose two.)

  1. MACsec is an IEEE standard that is defined by 802.3AE.

  2. MACsec leverages an 802.1X EAP framework to negotiate the MACsec Key Agreement.

  3. MACsec is an IETF standard that is defined by RFC 4501.

  4. MACsec can negotiate a MACsec Key Agreement without 802.1X.

  5. MACsec is an IETF standard that is defined by RFC 4505.

  6. MACsec is an IEEE standard that is defined by 802.1AE.

Answer: B,F

Question No: 4

Which statement correctly defines a persona?

  1. A Cisco ISE node can be configured as a primary or backup persona.

  2. Persona refers to collections of services running on a Cisco ISE node.

  3. A Cisco ISE node can be configured as a wired or wireless persona.

  4. Persona relates to the collection of 802.1X services configured on a Cisco Catalyst switch.

  5. Persona refers to the collection of EAP methods available to a supplicant.

  6. A Cisco ISE node can be configured as a standalone or distributed persona.

Answer: B

Question No: 5

Which two EAP methods are examples of challenge-response methods? (Choose two.)

  1. EAP-TLS

  2. PEAP


  4. LEAP

  5. EAP-MD5

Answer: D,E

Question No: 6

On a Cisco Catalyst switch, which default ports will the radius-server host command use for RADIUS authentication and accounting messages?

  1. TCP – Authentication 1645/Accounting 1646

  2. TCP – Authentication 1535/Accounting 1536

  3. TCP – Authentication 1812/Accounting 1813

  4. UDP – Authentication 1535/Accounting 1536

  5. UDP – Authentication 1812/Accounting 1813

  6. UDP – Authentication 1645/Accounting 1646

Answer: E

Question No: 7

Which three modules are valid components of Cisco AnyConnect Secure Mobility Client for Windows? (Choose three)

  1. Network Access Manager

  2. VPN Module

  3. Network Authentication Manager

  4. Telemetry and Profiling Module

  5. Profiling Module

  6. Posture Module

  7. Profiling Module

Answer: A,E,F

Question No: 8

Which option is a good example of a non-supplicant host?

  1. Laptop running Microsoft Windows 7

  2. IP printer

  3. desktop PC running Ubuntu Linux

  4. IP camera

  5. Apple Macintosh running Mac OS X

Answer: B,D

Question No: 9

Which three RADIUS attributes art required to dynamically assign a VIAN? (Choose three)

  1. Attribute 65 (Tunnel-Medium-Type)

  2. Attribute 26 (Vendor-Specific)

  3. Attribute 64 (Tunnel-Type)

  4. Attribute 8 (Framed-IP-Address)

  5. Attribute 5 (NASPort)

  6. Attribute 81 (Tunne1-Private-Group-ID)

Answer: A,C,F

Question No: 10

Consider the example of an end user plugging an unmanaged third-party switch into a port in a conference room. If the wiring closet switch port requires 802.1X authentication (and theauthentication host mode is set to the default), what would be the result of multiple 802.1X clients attempting to access the network from the unmanaged switch?

  1. After the first supplicant authenticates, other hosts connected to the unmanaged switch will be blocked from the network.

  2. After 802.1X times out three times, all hosts on the unmanaged switch will have access to the network.

  3. Up to eight hosts and one IP phone can be authenticated.

  4. After the first supplicant authenticates, all other hosts connected to the unmanaged switch have access to the network.

Answer: A

100% Dumps4cert Free Download!
Download Free Demo:650-472 Demo PDF
100% Dumps4cert Pass Guaranteed!
650-472 Dumps

Dumps4cert ExamCollection Testking
Lowest Price Guarantee Yes No No
Up-to-Dated Yes No No
Real Questions Yes No No
Explanation Yes No No
Free VCE Simulator Yes No No
Instant Download Yes No No

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.