Actualtests.500-452.83 questions Number: 500-452 Passing Score: 800 Time Limit: 120 min File Version: 4.8 Cisco 500-452 Enterprise Networks Core and WAN Exam A questions are all in the dump file and there is the additional question I'm sure glad that I used it. Even though I knew the material, the exam questions were worded in a very tricky way. These tests got me over that last hump and I easily passed the written exam. It is a great resource for studying for the exam. It showed me where I was weak and what I needed to study on my own. The best site that provides all types of notes and preparation material online
The practice test includes online and offline study material, and labs, and the practice exercises were all time available without any time bounding. Which helps me to continue my job while preparing my exam and I succeeded and got promotion after clearing my test. Sections 1. Enterprise IP WAN Technologies Network 2. Intelligent WAN Overview 3. IWAN Deployment 4. Cisco WAN Optimization Solution 5. Intelligent WAN Secure Connectivity 6. Cisco UCS E, Cloud Connectors, and Cisco UBE
Exam A QUESTION 1 What are the three architectural building blocks of the enterprise WAN? (Choose three.) A. regional WAN B. MAN C. LAN D. WAN core E. data center interconnect F. virtual overlay BD Section: Enterprise IP WAN Technologies Network /Reference: : QUESTION 2 What is NBAR2, which is a component of Cisco AVC? A. a classification engine that recognizes and classifies a variety of application protocols B. a mechanism for WFQ C. another name for Cisco IOS Flexible NetFlow D. a mechanism for balancing traffic flow over multiple links Section: Intelligent WAN Overview /Reference: : Real 8 QUESTION 3 Why has visibility into network applications become a problem for IT?
A. IT has no tools that can look inside an Ethernet packet. B. New protocols are being used. C. HTTP has become the primary transport protocol for most applications. D. Visibility into applications is not an issue. Correct Answer: C Section: Intelligent WAN Overview /Reference: : QUESTION 4 Which product can be used with Cisco IWAN to provide advanced caching and content pre- positioning? A. Riverbed Technology B. Akamai Technologies C. Citrix Systems D. Rovio Technology Limited Section: Intelligent WAN Overview /Reference: : QUESTION 5 Which two methods provide security with the Cisco IWAN solution? (Choose two.)
A. intrusion prevention device B. Cisco CWS C. Cisco PIX firewall D. zone-based firewall E. Cisco AVC D Section: Intelligent WAN Overview /Reference: : Real 9 QUESTION 6 Which versatile, high-performance product provides up to three times better performance for IPsec on the ISR than without the product? A. Cisco VPN ISM B. Cisco NCE C. Cisco NSE D. Cisco ASA Section: Intelligent WAN Overview /Reference: real answer. QUESTION 7 Which cloud-based SaaS solution simplifies management and orchestration of a WAN infrastructure? A. Cisco Prime Infrastructure B. LiveAction C. Compuware Vantage D. Glue Networks
Correct Answer: D Section: Intelligent WAN Overview /Reference: : QUESTION 8 Which management platform is the Cisco IWAN solution of choice for providing visualization of performance routing? A. Cisco Prime Infrastructure B. LiveAction C. Compuware Vantage D. Glue Networks Section: Intelligent WAN Overview /Reference: : Real 10 QUESTION 9 Which option is a primary management tool for Cisco IWAN? A. Cisco Prime Infrastructure B. CiscoWorks C. Microsoft System Center D. NetScout ngeniusone Section: Intelligent WAN Overview /Reference:
Suitable answer. QUESTION 10 Which type of Cisco Prime dashboard provides a broad overview of the health of the network and sites? A. Network Interface B. Application View C. Service Health D. Router Detail Correct Answer: C /Reference: reliable answer. QUESTION 11 DMVPN spokes have which type of permanent tunnel to the hub? A. L2TP B. GRE/IPsec C. MPLS D. Cisco AnyConnect VPN /Reference: Real 11 : QUESTION 12 What should you do to increase availability and provide a separate failure domain? A. Use the same MTU on all WAN paths.
B. Request a no-failure connection from your service provider. C. Use a separate provider for each DMVPN network. D. Use RIP as the routing protocol for all WAN paths. Correct Answer: C /Reference: : QUESTION 13 What does a spoke use to determine the address of a target spoke with which it wants to establish a dynamic VPN connection? A. NHRP B. FHRP C. HSRP D. RIPv4 /Reference: : QUESTION 14 To provide the best scalability for DMVPN, which two routing protocols should you use? (Choose two.) A. BGP B. EIGRP C. IS-IS D. OSPF E. ODR F. RIP Real 12
B /Reference: perfect answer. QUESTION 15 What can you use to create a dynamic spoke-to-spoke tunnel in Cisco IWAN? A. DMVPN B. L2TP C. GETVPN D. FlexVPN /Reference: : QUESTION 16 Which WAN topology can support more than two endpoints? A. FHRP B. NBMA C. VRRP D. B.A.T.M.A.N. /Reference: : QUESTION 17 Flexible NetFlow has the ability to view both key and nonkey fields. What is one example of a key field?
A. packet data B. destination IP C. routing source D. timestamp sys-uptime last /Reference: Real 13 : QUESTION 18 Which type of application recognition and performance monitoring does the AVC feature enable? A. third-party B. software C. hardware D. virtual appliance /Reference: : QUESTION 19 Unified monitoring is configured by using which two options? (Choose two.) A. web-based GUI B. no option C. Cisco Prime Infrastructure D. EZPM
E. MACE Correct Answer: CD /Reference: : QUESTION 20 Multiple types of cache can be configured for use with NetFlow. Which cache type is exported on a regular basis and used by ART? A. synchronized B. normal C. permanent D. exportable E. ART Real 14 /Reference: genuine asnwer. QUESTION 21 Which two are components of Cisco PfR? (Choose two.) A. master controller B. master browser C. border router D. edge router E. area of service C
/Reference: : QUESTION 22 Cisco PfRv2 simplifies the approximate number of lines of configuration that are needed for 200 sites from about 11,000 to which number? A. 90 B. 1000 C. 7000 D. 20,000 /Reference: : QUESTION 23 Cisco WAAS Central Manager can provide application information even without the use of which option? A. data B. agents C. feeds D. connectors Section: Cisco WAN Optimization Solution /Reference: : QUESTION 24 Which platform is available with Cisco WAAS? A. software B. virtual appliance
C. virtual module D. cloud connector Section: Cisco WAN Optimization Solution /Reference: : QUESTION 25 What is the primary characteristic of Cisco WAAS Express? A. application-centric B. link optimizer C. not supported in Cisco IWAN Real 19 D. protocol-agnostic Section: Cisco WAN Optimization Solution /Reference: well exhibited answer. QUESTION 26 Which technology enables customers to virtualize WAN optimization resources by pooling them into one elastic resource? A. Cisco Prime B. Akamai C. Cisco AppNav
D. virtualization Correct Answer: C Section: Cisco WAN Optimization Solution /Reference: : QUESTION 27 Which Cisco WAAS connectivity model can organizations use when they do not want to disrupt their network-connectivity model? A. off-path B. inline C. online D. offline Section: Cisco WAN Optimization Solution /Reference: : QUESTION 28 Which type of traffic does Akamai deliver? A. web B. Internet C. branch Real 20
D. WAN Section: Cisco WAN Optimization Solution /Reference: : QUESTION 29 What is the Akamai technology solution? A. a separate hardware purchase from Akamai B. a solution that is integrated with Cisco WAAS on a Cisco ISR-AX C. a replacement for a Cisco WAAS solution D. a multiservice blade for the Cisco ISR G2 Section: Cisco WAN Optimization Solution /Reference: answer is valid. QUESTION 30 What are the two simplest methods to give guest users access to the Internet? (Choose two.) A. public DNS service B. Cisco CWS tower C. private DNS service D. private CWS tower E. FVRF for guest UIs E Section: Intelligent WAN Secure Connectivity /Reference:
Real 24 : QUESTION 31 Which unique feature of TrustSec is used for end-to-end security policy control? A. zoning B. mapping C. masking D. tagging Correct Answer: D Section: Intelligent WAN Secure Connectivity /Reference: : QUESTION 32 How is a TrustSec tag used with a site-to-site VPN? A. by being passed separately along with packet B. by being preserved in the GRE/IPsec VPN header C. by being marked as a TrustSec packet D. by being added to the data packet Section: Intelligent WAN Secure Connectivity /Reference: : QUESTION 33 What alternative exists for propagating SGTs when network devices do not have hardware support for TrustSec? A. SXP
B. SGACL C. Cisco Discovery Protocol D. TrustSec Exchange Protocol Section: Intelligent WAN Secure Connectivity /Reference: : Real 25 QUESTION 34 Cisco Threat Defense is based on which product? A. Adaptive Security Appliance B. Lancope StealthWatch C. Plixer Scrutinizer D. SoftPerfect Network Scanner Section: Intelligent WAN Secure Connectivity /Reference: : QUESTION 35 Which type of data and analyses does Cisco Threat Defense collect to establish behavior baselines? A. raw B. NetFlow C. NBAR2 D. LAN Manager Section: Intelligent WAN Secure Connectivity
/Reference: : QUESTION 36 What should you do to all three planes of the Cisco IOS router? A. leave them at the default settings, to provide best functionality B. protect them with an antivirus solution C. harden them, using Cisco Guide to Harden Cisco IOS Devices D. verify them, using the Cisco IOS verification tool Correct Answer: C Section: Intelligent WAN Secure Connectivity /Reference: : Real 26 QUESTION 37 Which type of product is Cisco UCS E140S? A. a rack-mount server B. a double-wide blade server for Cisco ISR G2 C. a new module of a Cisco tablet D. a single-width blade server for Cisco ISR G2 Correct Answer: D Section: Cisco UCS E, Cloud Connectors, and Cisco UBE /Reference: : QUESTION 38
What is Cisco Cloud Connector? A. a specialized hardware appliance, to enable cloud adoption B. software on or integrated with Cisco Enterprise routers, to enable or enhance a cloud service C. third-party software that is installed on an operating system, to make cloud services work D. a virtual appliance Section: Cisco UCS E, Cloud Connectors, and Cisco UBE /Reference: : QUESTION 39 What is Cisco CWS? A. a cloud-based web-filtering service B. an appliance C. a Layer 7 firewall D. an IPS solution Section: Cisco UCS E, Cloud Connectors, and Cisco UBE /Reference: : Real 27 QUESTION 40 Which separate service performs SBC for voice on Cisco ISR and ASR routers? A. Cisco ISR G2 B. Cloud Connector C. Cisco UCS Manager D. Cisco Unified Border Element
Correct Answer: D Section: Cisco UCS E, Cloud Connectors, and Cisco UBE /Reference: : QUESTION 41 What can replace traditional fixed PSTN lines? A. SIP trunks B. Internet C. modems D. VPN trunks Section: Cisco UCS E, Cloud Connectors, and Cisco UBE /Reference: : QUESTION 42 What are the four pillars of the Cisco IWAN solution? (Choose four.) A. transport independence B. hybrid WAN design C. transport dependence D. intelligent path control E. static routing paths F. application optimization G. RIPv1 H. secure connectivity DFH Section: Cisco UCS E, Cloud Connectors, and Cisco UBE
/Reference: Real 28 QUESTION 43 The primary customer value proposition for Cisco IWAN includes which five options? (Choose five.) A. improved application responsiveness over the WAN B. efficient utilization of all WAN bandwidth C. ability to leverage installed Cisco ISR G2 D. increased investment protection E. improved user experience of public cloud services F. consistent IPsec security over any provider transport G. automatic configuration and provisioning H. increased application performance monitoring BEFH Section: Cisco UCS E, Cloud Connectors, and Cisco UBE /Reference: : QUESTION 44 Which Cisco product must be purchased to use the Cisco IWAN solution? A. Cisco ISR G1 B. Nexus 5000 C. AX bundle D. Cisco ASA Correct Answer: C Section: Cisco UCS E, Cloud Connectors, and Cisco UBE /Reference: Real 29
QUESTION 45 What is one example of a typical enterprise WAN deployment model? A. single or dual MPLS VPN B. Frame Relay C. VPN D. hub and spoke Section: Enterprise IP WAN Technologies Network /Reference: reliable answer. QUESTION 46 DMVPN builds tunnels in which two ways? (Choose two.) A. statically B. randomly C. by requiring IKEv2 D. by using dynamic spoke to spoke E. by using multipoint hub to spoke F. by using full mesh Correct Answer: DE Section: Enterprise IP WAN Technologies Network /Reference: : Real 2 QUESTION 47 Which option is suited only for private IP network infrastructures?
A. GETVPN B. IPsec C. L2TP D. FlexVPN E. DMVPN Section: Enterprise IP WAN Technologies Network /Reference: : QUESTION 48 Which option does FlexVPN leverage? A. IKEv1 B. IKEv2 C. IKEv3 D. IKEv1 and IKEv2 Section: Enterprise IP WAN Technologies Network /Reference: : QUESTION 49 What is the logical encapsulation of an IP packet when attempting to hide its contents? A. package B. tunnel C. protocol D. message Section: Enterprise IP WAN Technologies Network
/Reference: : Real 3 QUESTION 50 Which tunneling technology is used in the Cisco IWAN solution? A. DMVPN B. IP-only LAN-like service C. VPLS D. GRE E. NHRP F. L2TP Section: Enterprise IP WAN Technologies Network /Reference: : QUESTION 51 Which routing protocol is typically used to peer with an MPLS provider? A. RIP B. EIGRP C. IGP D. ebgp Correct Answer: D Section: Enterprise IP WAN Technologies Network /Reference: best answer.
QUESTION 52 Which set of actions is an element of QoS? A. sorting and packing B. classification and queuing C. queuing and tracking D. dropping and classification Section: Enterprise IP WAN Technologies Network /Reference: : Real 4 QUESTION 53 Which process sorts traffic and can expedite or drop traffic according to a defined policy? A. behavioral modeling B. provisioning, monitoring, and management C. queuing and WRED D. NBAR Correct Answer: C Section: Enterprise IP WAN Technologies Network /Reference: : QUESTION 54 Cisco NCE is a component of Cisco ISR G2. Which other product is an example of an NCE? A. Cisco multiservice blade B. Cisco UCS C-Series server
C. Cisco Services Ready Engine D. Cisco UCS E-Series server Correct Answer: D Section: Enterprise IP WAN Technologies Network /Reference: : QUESTION 55 What optimizes application traffic flow on the WAN side of the network? A. Akamai B. Cisco AppNAV C. Cisco WAAS for IWAN D. Cisco Unified Border Element Correct Answer: C Section: Cisco WAN Optimization Solution /Reference: : QUESTION 56 How do Flexible NetFlow and unified monitoring differentiate between compressed and uncompressed network traffic when Cisco WAAS is introduced into the environment? A. no ability B. by using segment IDs C. by using pass-through D. by changing the packet type Real 21 Section: Cisco WAN Optimization Solution
/Reference: Answer is updated. QUESTION 57 On what is the Cisco security approach based? A. attack lifecycle B. first-hop security C. the inability of cyber criminals to exploit zero-day vulnerabilities D. deployment of traditional security architecture that eliminates cyber threats within a campus or branch Section: Intelligent WAN Secure Connectivity /Reference: : QUESTION 58 Along with IPsec, strict access lists, and CWS, what should you include when using a direct Internet connection as part of your Cisco IWAN security solution? A. zone-based firewalls B. nothing C. white lists D. third-party firewalls Section: Intelligent WAN Secure Connectivity
/Reference: : QUESTION 59 Which cloud-based SAAS solution provides industry-leading security and control for the distributed enterprise? A. Cisco CWS B. LiveAction Real 22 C. Glue Networks D. Microsoft Forefront Section: Intelligent WAN Secure Connectivity /Reference: no doubt at answer. QUESTION 60 What is one way to implement security consistently across hub-and-spoke routers? A. FVRF B. VRF C. ACL D. RIPv4 Section: Intelligent WAN Secure Connectivity /Reference: : QUESTION 61 What is integrated into Cisco ISR G2 router platforms? A. Cisco CWS license
B. ScanCenter portal C. Cisco CWS connector D. Cisco CWS tower Correct Answer: C Section: Intelligent WAN Secure Connectivity /Reference: : QUESTION 62 Which URL is used to verify that Cisco CWS is working as configured? A. http://whoami.scansafe.net/ B. http://whoami.cws.net/ C. http://verify.scansafe.net/ D. http://verify.cws.net/ Real 23 Section: Intelligent WAN Secure Connectivity /Reference: : QUESTION 63 What can be used to replace static ACLs on Internet-facing interfaces? A. dynamic ACLs B. service provider firewalls C. VPNs D. zone-based firewalls Correct Answer: D Section: Intelligent WAN Secure Connectivity
/Reference: : QUESTION 64 Which route is needed in the global table for internal users to access the Internet? A. route to the service provider B. route to the internal DNS server C. default route D. static route to Internet web sites Correct Answer: C Section: Intelligent WAN Secure Connectivity /Reference: fine QUESTION 65 What is the purpose of a Cisco PfRv3 smart probe? A. to add traffic to a network B. to monitor application traffic on an over-utilized network C. to monitor application performance on a network path without actual traffic D. to make intelligent decisions about network traffic Real 15 Correct Answer: C /Reference: : QUESTION 66 In Cisco PfRv2, what are two ways to monitor the utilization and quality of a network link? (Choose two.) A. active
B. intrusive C. passive D. scripted E. dynamic C /Reference: : QUESTION 67 In which way does Cisco PfRv3 passive monitoring work to ensure link quality? A. by generating synthetic data of each application type and monitoring for any link issues B. by generating generic synthetic data and monitoring for any link issues C. by listening to all traffic on the link for any issues D. by listening to application-specific traffic on the link and monitoring for any application link issues Correct Answer: D /Reference: sophisticated answer. QUESTION 68 In which way does Cisco PfRv2 active monitoring work to ensure link quality? A. by generating synthetic data of each application type and monitoring for any link issues B. by generating generic synthetic data and monitoring for any link issues C. by listening to all traffic on the link for any issues D. by listening to application-specific traffic on the link and monitoring for any link issues Real 16
/Reference: : QUESTION 69 What is the typical DSCP code for voice? A. AF11 B. C64 C. CS2 D. EF Correct Answer: D /Reference: : QUESTION 70 With HQF, which minimum percentage must be assigned to class-default? A. 0.01 B. 0.10 C. 0.25 D. 1.00 Correct Answer: D /Reference: : QUESTION 71 What is the preferred method for an IPv6 transition? A. tunneling
B. triple stack C. partial overlay D. dual stack Correct Answer: D /Reference: : Real 17 QUESTION 72 In which three ways are IPv6 addresses allocated? (Choose three.) A. DHCP B. static C. PA D. ARP E. PI F. APIPA G. ULA Correct Answer: CEG /Reference: : QUESTION 73 With which type of integrated services routers can you perform zero-touch deployment of remote equipment? A. Cisco Prime Plug and Play B. CiscoWorks C. Cisco ISR G2
D. ActionPack /Reference: accurate answer. QUESTION 74 Why are application acceleration and bandwidth re-education key functions in the Cisco IWAN design? A. to sell more Cisco WAAS appliances B. to provide a higher level of application performance for mission-critical applications Real 18 C. to enable independence of the transport overlay D. to ensure that voice calls are of the highest quality Section: Cisco WAN Optimization Solution /Reference: : QUESTION 75 The lean branch office relies on the WAN to provide a majority of its application services. However, essential infrastructure services can be hosted locally. What is one example of an infrastructure service for a hospital or medical office? A. YouTube B. record archiving system C. remote administration D. electronic medical records Correct Answer: D Section: Enterprise IP WAN Technologies Network /Reference:
: Real 5 QUESTION 76 What is one example of a supported hypervisor on the network compute engine? A. Red Hat KVM B. VMware vsphere Hypervisor 5.1 C. CentOS qemu D. VMware Workstation 10.0 Section: Enterprise IP WAN Technologies Network /Reference: appropriate answer. QUESTION 77 Which percentage of companies plan to migrate their WAN to the Internet? A. 0.25 B. 0.46 C. 0.75 D. 1.00 Section: Intelligent WAN Overview /Reference: properly answered. QUESTION 78 Which two characteristics comprise a hybrid WAN design? (Choose two.) A. L2TP VPN
B. premium transport (MPLS) C. dial-up modem D. best-effort transport (Internet) E. static routing protocol D Section: Intelligent WAN Overview /Reference: : Real 6 QUESTION 79 Which component can a Cisco IWAN design include? A. 3G/4G connection B. dial-up connection C. X.400 D. T-1000 Section: Intelligent WAN Overview /Reference: : QUESTION 80 The use of which option is a major difference between DMVPN and Group Encrypted Transport VPN? A. switching B. MPBGP C. tunnels D. RIPv3 Correct Answer: C
Section: Intelligent WAN Overview /Reference: : QUESTION 81 Which technology is used to separate internal routing and the external default routing for spoke-to- spoke tunnel setup? A. FVRF B. EIGRP C. IS-IS D. BGP Section: Intelligent WAN Overview /Reference: : Real 7 QUESTION 82 What is the purpose of intelligent path control? A. to efficiently distribute traffic across multiple types of links, based on policy B. to distribute traffic by using an active/passive mechanism C. to pick the best single link from a group of links to distribute all traffic D. to use a round-robin methodology to distribute traffic across an active/active set of links Section: Intelligent WAN Overview /Reference: right answer.
QUESTION 83 Which option can enhance traditional IP routing so that you can improve application performance on the WAN while increasing bandwidth efficiency? A. Cisco PfR B. Cisco NCE C. NBAR D. OLSR Section: Intelligent WAN Overview /Reference: :