Online Access Free 650-472 Exam Questions

On a Cisco Catalyst switch, which default ports will the radius-server host command use for RADIUS authentication and accounting messages?

• A.TCP - Authentication 1812/Accounting 1813
• B.TCP - Authentication 1535/Accounting 1536
• C.UDP - Authentication 1812/Accounting 1813
• D.UDP - Authentication 1535/Accounting 1536
• E.TCP - Authentication 1645/Accounting 1646
• F.UDP - Authentication 1645/Accounting 1646

Which Cisco TrustSec device performs user authenticated?

• A.RADIUS
• B.EAP
• C.authentication server
• D.authenticator
• E.supplicant

Which two statements are true regarding load balancing Cisco ISE Policy Services nodes with a Cisco Application Control Engine? (Choose two.)

• A.Each Cisco ISE Policy Services node must be configured with a unique unicast IP address that is used to receive policy requests from the load balancer.
• B.Each Cisco ISE Policy Services node must be configured with an identical (and non-reserved) multicast IP address that is used as a heartbeat channel.
• C.Each Cisco ISE Policy Services node must be configured with an identical unicast IP address that is used to receive policy requests from the load balancer.
• D.Each Cisco ISE Policy Services node must be configured with a unique (and non-reserved) multicast IP address that is used as a heartbeat channel.
• E.The virtual IP address of the ACE must not be on the same IP subnet as the unicast subnet of the Cisco ISE Policy Services node.
• F.The virtual IP address of the ACE must be on the same IP subnet as the unicast subnet of the Cisco ISE Policy Services node.

What is the purpose of the guest VLAN on a Cisco Catalyst switch?

• A.It provides configurable guest access to devices that have a supplicant but lack local credentials.
• B.It provides configurable guest access to devices that have a supplicant when the authenticator is down or unreachable.
• C.It provides configurable guest access to non-supplicant devices that have local credentials.
• D.It provides configurable guest access to non-supplicant devices that lack local credentials.
• E.It provides configurable guest access to devices that have a supplicant when the authentication server is down or unreachable.

Which EAP method requires a digital certificate on the client?

• A.EAP-TLS
• B.EAP-GTC
• C.PEAP
• D.LEAP
• E.EAP-MOS
• F.P1AP-MD5
• G.EAP-FAST