cisco 500-470 practice test
Cisco Enterprise Networks SDA, SDWAN and ISE Exam for System Engineers (ENSDENG)
Last exam update: Nov 27 ,2025
Page 1 out of 3. Viewing questions 1-15 out of 35
Question 1
What two best describe self-healing functionality on vEdges? (Choose two.)
-
A.
Software reconfiguration capability allowing for dynamic reconfiguration of existing channels
-
B.
In software upgrade process, rolling back to the previously running software image when connectivity to vManage fails
-
C.
vManage detect routing outage detection to detect reachability outages and understand their scope and likely root cause
-
D.
With configuration change, rolling back the configuration change when loss of connectivity to vManage
Question 2
Which three statements best describe Cisco ISE configuration capabilities? (Choose three.)
-
A.
ISE Deployment Assistant (IDA) is a built in application designed to accelerate the deployment of Cisco Identity Service Engine (ISE)
-
B.
Cisco ISE includes wireless setup wizard and visibility wizard.
-
C.
ISE requires an understanding of the command line for set-up and configuration.
-
D.
ISE wizards and pre-canned configurations ease ISE roll-out significantly.
-
E.
Cisco Active Advisor provides additional guidance for ISE deployments
Question 3
Which three wireless product families are supported in the current DNA-C 1.1 release? (Choose
three.)
-
A.
AP 1260
-
B.
WLC 8540
-
C.
WLC 5508
-
D.
AP 3800
-
E.
WLC 3504
Question 4
Which two options are used as part of an ISE POV? (Choose two.)
-
A.
Youtube
-
B.
CiscoTV
-
C.
dCloud
-
D.
POV Kit
-
E.
Implementation on Production Network
Answer:
CD
Reference:
https://community.cisco.com/t5/security-documents/selling-ise-demos-and-povs/ta-p/3629542
Question 5
Which are three key features within the Cisco ISE that mainly compete with the other RADIUS and
NAC
products? (Choose three.)
-
A.
BYOD provides auto configuration of endpoints.
-
B.
Deep packet inspection upon authorization of endpoints.
-
C.
Guest access and guest lifecycle management functionality.
-
D.
Software based firewall capabilities for selected devices and endpoints.
-
E.
Ability to authenticate and authorize users and endpoints.
Question 6
Which three services must be enabled under the ISE Admin settings to successfully integrate ISE,
when
integrating ISE with DNA-C? (Choose three.)
-
A.
SXP services
-
B.
ServiceNow
-
C.
Threat- Centric NAC
-
D.
Infoblox
-
E.
PxGrid
-
F.
Passive Identity Service
Answer:
AEF
Reference:
https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-
andmanagement/
dna-center/1-1/install/b_dnac_install_1_1_0P2/b_dnac_install_1_1_0P2_chapter_010.pdf page
Question 7
Which workflow is necessary for setting up a network hierarchy?
-
A.
Provision
-
B.
Design
-
C.
Policy
-
D.
Assurance
Question 8
Which are three functions used by ISE automation BYOD flow? (Choose three.)
-
A.
Supplicant Provisioning
-
B.
Device Registration
-
C.
Certificate Enrollment
-
D.
BioMetrics
-
E.
LDAP Multi Tenant Provisioning
-
F.
Active Directory Group Membership
Question 9
Which are three Cisco ISE use cases? (Choose three.)
-
A.
BYOD
-
B.
Assurance
-
C.
Monitoring
-
D.
Security Incident and Event Management
-
E.
Access Control
-
F.
Segmentation
Question 10
Which three statements are true regarding Cisco SDWAN license tiers? (Choose three.)
-
A.
With Pro license, control and data policies are supported
-
B.
With Plus license, split-tunnel is supported
-
C.
With Pro license, unlimited segmentations are supported
-
D.
With Plus license, Hub and spoke, partial mesh are supported
-
E.
With Enterprise license, vAnalytics is included
-
F.
With Enterprise license, TCP optimization is not supported
Question 11
Which are three Cisco recommendations on “How to Win”? (Choose three.)
-
A.
Talk about Cisco’s focus on Security and integration with StealthWatch, Sourcefire, WSA, vulnerability scanner to make smarter policy decisions.
-
B.
Explain support for 3rd party network devices.
-
C.
Explain architectural advantage of holistic Cisco solution.
-
D.
Demonstrate complex policy flows, rather show case Wizards and enhanced context visibility.
-
E.
Show case Cisco portfolio or ISE feature set during PoC
Question 12
What is the role of DNA Center in SD-Access?
-
A.
Identifying and Authenticating Endpoints
-
B.
The point of exchange of reachability and policy for two domains
-
C.
Maintain a database of Endpoint IDs to Fabric Edge Nodes
-
D.
provide GUI management abstraction & Analytics via Multiple Service Apps
Question 13
Which Cisco SD WAN component provides a secure data plane with remote vEdge routers?
A. vManage
B. vSmart
C. vBond
D. vEdge
Answer:
B
//sdwan-docs.cisco.com/Product_Documentation/Software_Features/
Release_18.1/05Security/01Security_Overview/Data_Plane_Security_Overview
Question 14
Which two platforms can host a vEdge Cloud Router? (Choose two.)
-
A.
Microsoft Azure
-
B.
Dreamhost
-
C.
AWS
-
D.
DigitalCloud
-
E.
Google
Question 15
Which is a key function of a Digital Network?
-
A.
Centralized provisioning
-
B.
Software upgrades
-
C.
Provides secure data plane with remote vEdge routers
-
D.
Nat traversal