Cisco.Actualtests.500-452.v2015-03-31.by.Mary · 3/31/2015 · A. intrusion prevention device B. Cisco CWS C. Cisco PIX firewall D. zone-based firewall E. Cisco AVC Correct Answer:

http://www.gratisexam.com/

Actualtests.500-452.83 questions

Number: 500-452Passing Score: 800Time Limit: 120 minFile Version: 4.8


Cisco 500-452

Enterprise Networks Core and WAN Exam

A questions are all in the dump file and there is the additional question

I'm sure glad that I used it. Even though I knew the material, the exam questions were worded in a very tricky way. These tests gotme over that last hump and I easily passed the written exam.

It is a great resource for studying for the exam. It showed me where I was weak and what I needed to study on my own.

The best site that provides all types of notes and preparation material online


The practice test includes online and offline study material, and labs, and the practice exercises were all time available without anytime bounding. Which helps me to continue my job while preparing my exam and I succeeded and got promotion after clearing my test.

Sections1. Enterprise IP WAN Technologies Network2. Intelligent WAN Overview3. IWAN Deployment4. Cisco WAN Optimization Solution5. Intelligent WAN Secure Connectivity6. Cisco UCS E, Cloud Connectors, and Cisco UBE


Exam A

QUESTION 1What are the three architectural building blocks of the enterprise WAN? (Choose three.)

A. regional WANB. MANC. LAND. WAN coreE. data center interconnectF. virtual overlay

Correct Answer: ABDSection: Enterprise IP WAN Technologies NetworkExplanation

Explanation/Reference:Explanation:

QUESTION 2What is NBAR2, which is a component of Cisco AVC?

A. a classification engine that recognizes and classifies a variety of application protocolsB. a mechanism for WFQC. another name for Cisco IOS Flexible NetFlowD. a mechanism for balancing traffic flow over multiple links

Correct Answer: ASection: Intelligent WAN OverviewExplanation


Real 8Cisco 500-452 Exam

QUESTION 3Why has visibility into network applications become a problem for IT?


A. IT has no tools that can look inside an Ethernet packet.B. New protocols are being used.C. HTTP has become the primary transport protocol for most applications.D. Visibility into applications is not an issue.

Correct Answer: CSection: Intelligent WAN OverviewExplanation


QUESTION 4Which product can be used with Cisco IWAN to provide advanced caching and content pre- positioning?

A. Riverbed TechnologyB. Akamai TechnologiesC. Citrix SystemsD. Rovio Technology Limited

Correct Answer: BSection: Intelligent WAN OverviewExplanation


QUESTION 5Which two methods provide security with the Cisco IWAN solution? (Choose two.)



A. intrusion prevention deviceB. Cisco CWSC. Cisco PIX firewallD. zone-based firewallE. Cisco AVC

Correct Answer: BDSection: Intelligent WAN OverviewExplanation



QUESTION 6Which versatile, high-performance product provides up to three times better performance for IPsec on the ISR than without the product?

A. Cisco VPN ISMB. Cisco NCEC. Cisco NSED. Cisco ASA


Explanation/Reference:real answer.

QUESTION 7Which cloud-based SaaS solution simplifies management and orchestration of a WAN infrastructure?

A. Cisco Prime InfrastructureB. LiveActionC. Compuware VantageD. Glue Networks


Correct Answer: DSection: Intelligent WAN OverviewExplanation


QUESTION 8Which management platform is the Cisco IWAN solution of choice for providing visualization of performance routing?

A. Cisco Prime InfrastructureB. LiveActionC. Compuware VantageD. Glue Networks




QUESTION 9Which option is a primary management tool for Cisco IWAN?

A. Cisco Prime InfrastructureB. CiscoWorksC. Microsoft System CenterD. NetScout nGeniusONE


Explanation/Reference:


Suitable answer.

QUESTION 10Which type of Cisco Prime dashboard provides a broad overview of the health of the network and sites?

A. Network InterfaceB. Application ViewC. Service HealthD. Router Detail

Correct Answer: CSection: IWAN DeploymentExplanation

Explanation/Reference:reliable answer.

QUESTION 11DMVPN spokes have which type of permanent tunnel to the hub?

A. L2TPB. GRE/IPsecC. MPLSD. Cisco AnyConnect VPN

Correct Answer: BSection: IWAN DeploymentExplanation

Explanation/Reference:Real 11Cisco 500-452 Exam

Explanation:

QUESTION 12What should you do to increase availability and provide a separate failure domain?

A. Use the same MTU on all WAN paths.


B. Request a no-failure connection from your service provider.C. Use a separate provider for each DMVPN network.D. Use RIP as the routing protocol for all WAN paths.



QUESTION 13What does a spoke use to determine the address of a target spoke with which it wants to establish a dynamic VPN connection?

A. NHRPB. FHRPC. HSRPD. RIPv4

Correct Answer: ASection: IWAN DeploymentExplanation


QUESTION 14To provide the best scalability for DMVPN, which two routing protocols should you use? (Choose two.)

A. BGPB. EIGRPC. IS-ISD. OSPFE. ODRF. RIP



Correct Answer: ABSection: IWAN DeploymentExplanation

Explanation/Reference:perfect answer.

QUESTION 15What can you use to create a dynamic spoke-to-spoke tunnel in Cisco IWAN?

A. DMVPNB. L2TPC. GETVPND. FlexVPN



QUESTION 16Which WAN topology can support more than two endpoints?

A. FHRPB. NBMAC. VRRPD. B.A.T.M.A.N.



QUESTION 17Flexible NetFlow has the ability to view both key and nonkey fields. What is one example of a key field?


A. packet dataB. destination IPC. routing sourceD. timestamp sys-uptime last



Explanation:

QUESTION 18Which type of application recognition and performance monitoring does the AVC feature enable?

A. third-partyB. softwareC. hardwareD. virtual appliance



QUESTION 19Unified monitoring is configured by using which two options? (Choose two.)

A. web-based GUIB. no optionC. Cisco Prime InfrastructureD. EZPM


E. MACE

Correct Answer: CDSection: IWAN DeploymentExplanation


QUESTION 20Multiple types of cache can be configured for use with NetFlow. Which cache type is exported on a regular basis and used by ART?

A. synchronizedB. normalC. permanentD. exportableE. ART



Explanation/Reference:genuine asnwer.

QUESTION 21Which two are components of Cisco PfR? (Choose two.)

A. master controllerB. master browserC. border routerD. edge routerE. area of service

Correct Answer: ACSection: IWAN DeploymentExplanation



QUESTION 22Cisco PfRv2 simplifies the approximate number of lines of configuration that are needed for 200 sites from about 11,000 to which number?

A. 90B. 1000C. 7000D. 20,000



QUESTION 23Cisco WAAS Central Manager can provide application information even without the use of which option?

A. dataB. agentsC. feedsD. connectors

Correct Answer: BSection: Cisco WAN Optimization SolutionExplanation


QUESTION 24Which platform is available with Cisco WAAS?

A. softwareB. virtual appliance


C. virtual moduleD. cloud connector



QUESTION 25What is the primary characteristic of Cisco WAAS Express?

A. application-centricB. link optimizerC. not supported in Cisco IWAN


D. protocol-agnostic


Explanation/Reference:well exhibited answer.

QUESTION 26Which technology enables customers to virtualize WAN optimization resources by pooling them into one elastic resource?

A. Cisco PrimeB. AkamaiC. Cisco AppNav



D. virtualization

Correct Answer: CSection: Cisco WAN Optimization SolutionExplanation


QUESTION 27Which Cisco WAAS connectivity model can organizations use when they do not want to disrupt their network-connectivity model?

A. off-pathB. inlineC. onlineD. offline

Correct Answer: ASection: Cisco WAN Optimization SolutionExplanation


QUESTION 28Which type of traffic does Akamai deliver?

A. webB. InternetC. branch

Real 20


Cisco 500-452 ExamD. WAN

Correct Answer: ASection: Cisco WAN Optimization SolutionExplanation


QUESTION 29What is the Akamai technology solution?

A. a separate hardware purchase from AkamaiB. a solution that is integrated with Cisco WAAS on a Cisco ISR-AXC. a replacement for a Cisco WAAS solutionD. a multiservice blade for the Cisco ISR G2


Explanation/Reference:answer is valid.

QUESTION 30What are the two simplest methods to give guest users access to the Internet? (Choose two.)

A. public DNS serviceB. Cisco CWS towerC. private DNS serviceD. private CWS towerE. FVRF for guest UIs

Correct Answer: AESection: Intelligent WAN Secure ConnectivityExplanation




Explanation:

QUESTION 31Which unique feature of TrustSec is used for end-to-end security policy control?

A. zoningB. mappingC. maskingD. tagging

Correct Answer: DSection: Intelligent WAN Secure ConnectivityExplanation


QUESTION 32How is a TrustSec tag used with a site-to-site VPN?

A. by being passed separately along with packetB. by being preserved in the GRE/IPsec VPN headerC. by being marked as a TrustSec packetD. by being added to the data packet

Correct Answer: BSection: Intelligent WAN Secure ConnectivityExplanation


QUESTION 33What alternative exists for propagating SGTs when network devices do not have hardware support for TrustSec?

A. SXP


B. SGACLC. Cisco Discovery ProtocolD. TrustSec Exchange Protocol

Correct Answer: ASection: Intelligent WAN Secure ConnectivityExplanation



QUESTION 34Cisco Threat Defense is based on which product?

A. Adaptive Security ApplianceB. Lancope StealthWatchC. Plixer ScrutinizerD. SoftPerfect Network Scanner

Correct Answer: BSection: Intelligent WAN Secure ConnectivityExplanation


QUESTION 35Which type of data and analyses does Cisco Threat Defense collect to establish behavior baselines?

A. rawB. NetFlowC. NBAR2D. LAN Manager

Correct Answer: BSection: Intelligent WAN Secure Connectivity


Explanation


QUESTION 36What should you do to all three planes of the Cisco IOS router?

A. leave them at the default settings, to provide best functionalityB. protect them with an antivirus solutionC. harden them, using Cisco Guide to Harden Cisco IOS DevicesD. verify them, using the Cisco IOS verification tool

Correct Answer: CSection: Intelligent WAN Secure ConnectivityExplanation



QUESTION 37Which type of product is Cisco UCS E140S?

A. a rack-mount serverB. a double-wide blade server for Cisco ISR G2C. a new module of a Cisco tabletD. a single-width blade server for Cisco ISR G2

Correct Answer: DSection: Cisco UCS E, Cloud Connectors, and Cisco UBEExplanation


QUESTION 38


What is Cisco Cloud Connector?

A. a specialized hardware appliance, to enable cloud adoptionB. software on or integrated with Cisco Enterprise routers, to enable or enhance a cloud serviceC. third-party software that is installed on an operating system, to make cloud services workD. a virtual appliance

Correct Answer: BSection: Cisco UCS E, Cloud Connectors, and Cisco UBEExplanation


QUESTION 39What is Cisco CWS?

A. a cloud-based web-filtering serviceB. an applianceC. a Layer 7 firewallD. an IPS solution

Correct Answer: ASection: Cisco UCS E, Cloud Connectors, and Cisco UBEExplanation



QUESTION 40Which separate service performs SBC for voice on Cisco ISR and ASR routers?

A. Cisco ISR G2B. Cloud ConnectorC. Cisco UCS ManagerD. Cisco Unified Border Element


Correct Answer: DSection: Cisco UCS E, Cloud Connectors, and Cisco UBEExplanation


QUESTION 41What can replace traditional fixed PSTN lines?

A. SIP trunksB. InternetC. modemsD. VPN trunks

Correct Answer: ASection: Cisco UCS E, Cloud Connectors, and Cisco UBEExplanation


QUESTION 42What are the four pillars of the Cisco IWAN solution? (Choose four.)

A. transport independenceB. hybrid WAN designC. transport dependenceD. intelligent path controlE. static routing pathsF. application optimizationG. RIPv1H. secure connectivity

Correct Answer: ADFHSection: Cisco UCS E, Cloud Connectors, and Cisco UBEExplanation



QUESTION 43The primary customer value proposition for Cisco IWAN includes which five options? (Choose five.)

A. improved application responsiveness over the WANB. efficient utilization of all WAN bandwidthC. ability to leverage installed Cisco ISR G2D. increased investment protectionE. improved user experience of public cloud servicesF. consistent IPsec security over any provider transportG. automatic configuration and provisioningH. increased application performance monitoring

Correct Answer: ABEFHSection: Cisco UCS E, Cloud Connectors, and Cisco UBEExplanation


QUESTION 44Which Cisco product must be purchased to use the Cisco IWAN solution?

A. Cisco ISR G1B. Nexus 5000C. AX bundleD. Cisco ASA

Correct Answer: CSection: Cisco UCS E, Cloud Connectors, and Cisco UBEExplanation

Explanation/Reference:Real 29


QUESTION 45What is one example of a typical enterprise WAN deployment model?

A. single or dual MPLS VPNB. Frame RelayC. VPND. hub and spoke

Correct Answer: ASection: Enterprise IP WAN Technologies NetworkExplanation

Explanation/Reference:reliable answer.

QUESTION 46DMVPN builds tunnels in which two ways? (Choose two.)

A. staticallyB. randomlyC. by requiring IKEv2D. by using dynamic spoke to spokeE. by using multipoint hub to spokeF. by using full mesh

Correct Answer: DESection: Enterprise IP WAN Technologies NetworkExplanation



QUESTION 47Which option is suited only for private IP network infrastructures?


A. GETVPNB. IPsecC. L2TPD. FlexVPNE. DMVPN



QUESTION 48Which option does FlexVPN leverage?

A. IKEv1B. IKEv2C. IKEv3D. IKEv1 and IKEv2

Correct Answer: BSection: Enterprise IP WAN Technologies NetworkExplanation


QUESTION 49What is the logical encapsulation of an IP packet when attempting to hide its contents?

A. packageB. tunnelC. protocolD. message

Correct Answer: BSection: Enterprise IP WAN Technologies Network


Explanation



QUESTION 50Which tunneling technology is used in the Cisco IWAN solution?

A. DMVPNB. IP-only LAN-like serviceC. VPLSD. GREE. NHRPF. L2TP



QUESTION 51Which routing protocol is typically used to peer with an MPLS provider?

A. RIPB. EIGRPC. IGPD. eBGP

Correct Answer: DSection: Enterprise IP WAN Technologies NetworkExplanation

Explanation/Reference:best answer.


QUESTION 52Which set of actions is an element of QoS?

A. sorting and packingB. classification and queuingC. queuing and trackingD. dropping and classification




QUESTION 53Which process sorts traffic and can expedite or drop traffic according to a defined policy?

A. behavioral modelingB. provisioning, monitoring, and managementC. queuing and WREDD. NBAR

Correct Answer: CSection: Enterprise IP WAN Technologies NetworkExplanation


QUESTION 54Cisco NCE is a component of Cisco ISR G2. Which other product is an example of an NCE?

A. Cisco multiservice bladeB. Cisco UCS C-Series server


C. Cisco Services Ready EngineD. Cisco UCS E-Series server



QUESTION 55What optimizes application traffic flow on the WAN side of the network?

A. AkamaiB. Cisco AppNAVC. Cisco WAAS for IWAND. Cisco Unified Border Element

Correct Answer: CSection: Cisco WAN Optimization SolutionExplanation


QUESTION 56How do Flexible NetFlow and unified monitoring differentiate between compressed and uncompressed network traffic when Cisco WAAS is introduced into theenvironment?

A. no abilityB. by using segment IDsC. by using pass-throughD. by changing the packet type




Explanation/Reference:Answer is updated.

QUESTION 57On what is the Cisco security approach based?

A. attack lifecycle


B. first-hop securityC. the inability of cyber criminals to exploit zero-day vulnerabilitiesD. deployment of traditional security architecture that eliminates cyber threats within a campus or branch



QUESTION 58Along with IPsec, strict access lists, and CWS, what should you include when using a direct Internet connection as part of your Cisco IWAN security solution?

A. zone-based firewallsB. nothingC. white listsD. third-party firewalls




QUESTION 59Which cloud-based SAAS solution provides industry-leading security and control for the distributed enterprise?

A. Cisco CWSB. LiveAction


C. Glue NetworksD. Microsoft Forefront


Explanation/Reference:no doubt at answer.

QUESTION 60What is one way to implement security consistently across hub-and-spoke routers?

A. FVRFB. VRFC. ACLD. RIPv4



QUESTION 61What is integrated into Cisco ISR G2 router platforms?

A. Cisco CWS license


B. ScanCenter portalC. Cisco CWS connectorD. Cisco CWS tower



QUESTION 62Which URL is used to verify that Cisco CWS is working as configured?

A. http://whoami.scansafe.net/B. http://whoami.cws.net/C. http://verify.scansafe.net/D. http://verify.cws.net/




QUESTION 63What can be used to replace static ACLs on Internet-facing interfaces?

A. dynamic ACLsB. service provider firewallsC. VPNsD. zone-based firewalls

Correct Answer: DSection: Intelligent WAN Secure ConnectivityExplanation



QUESTION 64Which route is needed in the global table for internal users to access the Internet?

A. route to the service providerB. route to the internal DNS serverC. default routeD. static route to Internet web sites


Explanation/Reference:fine

QUESTION 65What is the purpose of a Cisco PfRv3 smart probe?

A. to add traffic to a networkB. to monitor application traffic on an over-utilized networkC. to monitor application performance on a network path without actual trafficD. to make intelligent decisions about network traffic Real 15

Cisco 500-452 Exam



QUESTION 66In Cisco PfRv2, what are two ways to monitor the utilization and quality of a network link? (Choose two.)

A. active


B. intrusiveC. passiveD. scriptedE. dynamic

Correct Answer: ACSection: IWAN DeploymentExplanation


QUESTION 67In which way does Cisco PfRv3 passive monitoring work to ensure link quality?

A. by generating synthetic data of each application type and monitoring for any link issuesB. by generating generic synthetic data and monitoring for any link issuesC. by listening to all traffic on the link for any issuesD. by listening to application-specific traffic on the link and monitoring for any application link issues

Correct Answer: DSection: IWAN DeploymentExplanation

Explanation/Reference:sophisticated answer.

QUESTION 68In which way does Cisco PfRv2 active monitoring work to ensure link quality?

A. by generating synthetic data of each application type and monitoring for any link issuesB. by generating generic synthetic data and monitoring for any link issuesC. by listening to all traffic on the link for any issuesD. by listening to application-specific traffic on the link and monitoring for any link issues Real 16

Cisco 500-452 Exam

Correct Answer: ASection: IWAN Deployment


Explanation


QUESTION 69What is the typical DSCP code for voice?

A. AF11B. C64C. CS2D. EF



QUESTION 70With HQF, which minimum percentage must be assigned to class-default?

A. 0.01B. 0.10C. 0.25D. 1.00



QUESTION 71What is the preferred method for an IPv6 transition?

A. tunneling


B. triple stackC. partial overlayD. dual stack




QUESTION 72In which three ways are IPv6 addresses allocated? (Choose three.)

A. DHCPB. staticC. PAD. ARPE. PIF. APIPAG. ULA

Correct Answer: CEGSection: IWAN DeploymentExplanation


QUESTION 73With which type of integrated services routers can you perform zero-touch deployment of remote equipment?

A. Cisco Prime Plug and PlayB. CiscoWorksC. Cisco ISR G2


D. ActionPack


Explanation/Reference:accurate answer.

QUESTION 74Why are application acceleration and bandwidth re-education key functions in the Cisco IWAN design?

A. to sell more Cisco WAAS appliancesB. to provide a higher level of application performance for mission-critical applications Real 18

Cisco 500-452 ExamC. to enable independence of the transport overlayD. to ensure that voice calls are of the highest quality



QUESTION 75The lean branch office relies on the WAN to provide a majority of its application services. However, essential infrastructure services can be hosted locally. What isone example of an infrastructure service for a hospital or medical office?

A. YouTubeB. record archiving systemC. remote administrationD. electronic medical records




Explanation:


QUESTION 76What is one example of a supported hypervisor on the network compute engine?

A. Red Hat KVMB. VMware vSphere Hypervisor 5.1C. CentOS qemuD. VMware Workstation 10.0


Explanation/Reference:appropriate answer.

QUESTION 77Which percentage of companies plan to migrate their WAN to the Internet?

A. 0.25B. 0.46C. 0.75D. 1.00


Explanation/Reference:properly answered.

QUESTION 78Which two characteristics comprise a hybrid WAN design? (Choose two.)

A. L2TP VPN


B. premium transport (MPLS)C. dial-up modemD. best-effort transport (Internet)E. static routing protocol

Correct Answer: BDSection: Intelligent WAN OverviewExplanation



QUESTION 79Which component can a Cisco IWAN design include?

A. 3G/4G connectionB. dial-up connectionC. X.400D. T-1000



QUESTION 80The use of which option is a major difference between DMVPN and Group Encrypted Transport VPN?

A. switchingB. MPBGPC. tunnelsD. RIPv3

Correct Answer: C


Section: Intelligent WAN OverviewExplanation


QUESTION 81Which technology is used to separate internal routing and the external default routing for spoke-to- spoke tunnel setup?

A. FVRFB. EIGRPC. IS-ISD. BGP




QUESTION 82What is the purpose of intelligent path control?

A. to efficiently distribute traffic across multiple types of links, based on policyB. to distribute traffic by using an active/passive mechanismC. to pick the best single link from a group of links to distribute all trafficD. to use a round-robin methodology to distribute traffic across an active/active set of links


Explanation/Reference:right answer.


QUESTION 83Which option can enhance traditional IP routing so that you can improve application performance on the WAN while increasing bandwidth efficiency?

A. Cisco PfRB. Cisco NCEC. NBARD. OLSR




Documents

Cisco.Actualtests.500-452.v2015-03-31.by.Mary · 3/31/2015 · A. intrusion prevention device B. Cisco CWS C. Cisco PIX firewall D. zone-based firewall E. Cisco AVC Correct Answer: