Free Cisco 500-470 Practice Exam with Questions & Answers

The Cisco SD-WAN subscription cost is based on two factors: the features and the service bandwidth. The features are determined by the subscription tier, which can be Cisco DNA Essentials, Cisco DNA Advantage, or Cisco DNA Premier. Each tier offers different levels of functionality, security, and analytics for the SD-WAN solution. The service bandwidth is the aggregated WAN bandwidth across all the edge devices in the SD-WAN fabric. The subscription cost is calculated as the product of the feature price per Mbps and the service bandwidth. For example, if the feature price per Mbps for Cisco DNA Advantage is $2 and the service bandwidth is 100 Mbps, the subscription cost for one year is $2 x 100 x 12 = $240012

The other factors, such as the hypervisor platform, the security, and the routing protocol, are not used in calculating the Cisco SD-WAN subscription cost. The hypervisor platform is the virtualization environment where the SD-WAN edge software can run, such as VMware ESXi, KVM, or Microsoft Hyper-V. The security is the protection of the SD-WAN network from threats and attacks, which can be enhanced by integrating with complementary products and applications, such as Cisco Umbrella, Cisco SIG Essentials, or Cisco Secure Malware Analytics. The routing protocol is the method of exchanging routing information between the SD-WAN edge devices and the external networks, such as BGP, OSPF, or EIGRP. These factors are not directly related to the subscription cost, but rather to the deployment options, the security requirements, and the network design of the SD-WAN solution34

References :=

• Cisco DNA Software for SD-WAN and Routing Ordering Guide
• Cisco DNA Subscription Software for SD-WAN and Routing FAQ
• Cisco SD-WAN Solution Overview
• Cisco SD-WAN Configuration Guide

 Cisco ISE is a comprehensive solution that provides authentication, authorization, and accounting (AAA) services, as well as posture, profiling, and guest access features. These are some of the key features that differentiate Cisco ISE from other RADIUS and NAC products in the market.

• Ability to authenticate and authorize users and endpoints: Cisco ISE supports various authentication methods and protocols, such as 802.1X, MAB, WebAuth, EAP, PEAP, EAP-TLS, and TEAP. Cisco ISE also integrates with various identity sources, such as Active Directory, LDAP, RADIUS, SAML, and Azure AD. Cisco ISE can enforce granular and dynamic policies based on the identity and context of the users and endpoints, such as device type, location, posture, and time. Cisco ISE can also leverage TrustSec and SGTs to provide software-defined segmentation and micro-segmentation12.
• BYOD provides auto configuration of endpoints: Cisco ISE supports BYOD (Bring Your Own Device) scenarios, where users can register and onboard their personal devices to the network. Cisco ISE provides a self-service portal and a native supplicant provisioning tool that can automatically configure the endpoints with the required certificates, profiles, and settings. Cisco ISE can also apply different policies for corporate and personal devices, and integrate with MDM (Mobile Device Management) solutions to enforce compliance and security34.
• Guest access and guest lifecycle management functionality: Cisco ISE provides a comprehensive guest access solution that allows administrators and sponsors to create and manage guest accounts, and assign different access levels and privileges to guests. Cisco ISE also provides a customizable guest portal that can support various authentication methods, such as social media login, SMS, email, or self-registration. Cisco ISE can also monitor and audit the guest activities and sessions, and enforce expiration and revocation policies .

References:

• : Cisco ISE Features - Cisco
• : Cisco TrustSec Configuration Guide, Cisco IOS XE Gibraltar 16.12.x - TrustSec Overview [Cisco IOS XE 16] - Cisco
• : Cisco Identity Services Engine Administrator Guide, Release 2.7 - BYOD [Cisco Identity Services Engine] - Cisco
• : Cisco Identity Services Engine Administrator Guide, Release 2.7 - Mobile Device Management [Cisco Identity Services Engine] - Cisco
• : [Cisco Identity Services Engine Administrator Guide, Release 2.7 - Guest Access [Cisco Identity Services Engine] - Cisco]
• : [Cisco Identity Services Engine Administrator Guide, Release 2.7 - Guest Lifecycle Management [Cisco Identity Services Engine] - Cisco]

According to the Cisco DNA Center Compatibility Matrix1, the current DNA-C 1.1 release supports the following wireless product families:

• WLC 8540: This is a high-performance wireless controller that can support up to 6000 access points and 64,000 clients. It is designed for large-scale wireless deployments and offers advanced features such as application visibility and control, flexible radio assignment, and software-defined access2.
• AP 3800: This is a high-performance access point that can support up to 5.2 Gbps data rates and 4x4 MIMO with four spatial streams. It is designed for high-density environments and offers features such as flexible radio assignment, CleanAir, ClientLink, and Smart Antenna Connector3.
• WLC 3504: This is a compact wireless controller that can support up to 150 access points and 3000 clients. It is designed for small to medium-sized wireless deployments and offers features such as application visibility and control, software-defined access, and TrustSec4.

The other wireless product families, such as AP 1260 and WLC 5508, are not supported in the current DNA-C 1.1 release.

References:

• : Cisco DNA Center Compatibility Matrix
• : Cisco 8540 Wireless Controller Data Sheet - Cisco
• : Cisco Aironet 3800 Series Access Points Data Sheet - Cisco
• : Cisco 3504 Wireless Controller Data Sheet - Cisco

https://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise-networks/sd-wan/nb-07-clo ud-router-data-sheet-cte-en.pdf

A vEdge Cloud Router is a virtualized version of the vEdge router that can be deployed in various cloud environments. According to the Cisco vEdge Cloud Data Sheet1, the vEdge Cloud Router can be instantiated as a virtual machine (VM) on a KVM hypervisor or as a VM on a VMware ESXi hypervisor, as well as in public cloud environments, such as Amazon AWS or Google Cloud Platform. Therefore, the two platforms that can host a vEdge Cloud Router are AWS and Microsoft Azure.

References:

 1: [Solutions - Cisco vEdge Cloud Data Sheet - Cisco]

https://www.cisco.com/en/US/technologies/tk648/tk365/tk207/technologies_white_paper0900 aecd80243fe7.html

 The default interval for BFD packets is 1 second. BFD uses Hello packets to detect the liveness and faults on a connection. BFD Hello Interval packet is sent at the default interval of 1000 milliseconds on all connections1. This command can be used to change the hello interval for a transport color. The interval for transmitting and receiving BFD packets can also be configured on the interface level or the BFD session level, depending on the device and the protocol234. The BFD detection time is calculated as the product of the local detection multiplier and the agreed remote transmission interval. The lower the BFD detection time, the faster the BFD session can detect a fault. However, a lower BFD detection time also consumes more system resources and bandwidth. Therefore, the BFD detection time should be configured according to the network situation and performance requirements. References:

• : Bidirectional Forwarding Detection - Cisco
• : Configuring the BFD Detection Time - CloudEngine 16800 … - Huawei
• : Cisco IOS XE Catalyst SD-WAN Qualified Command Reference
• : bfd min-echo-receive-interval - Aruba

Device Sensor is a feature that enables Cisco devices to collect and report information about the endpoints connected to them. This information can be used by ISE to identify and classify the endpoints, and apply appropriate policies based on their attributes. Device Sensor can collect information from various sources, such as DHCP, CDP, LLDP, and HTTP User-Agent. Among the options given, only DHCP and CDP are valid sources of information for Device Sensor. References := : Cisco Identity Services Engine Administrator Guide, Release 2.7 - Device Sensor [Cisco Identity Services Engine]- Cisco (https://learningnetworkstore.cisco.com/c/en/us/td/docs/security/ise/2-7/admin_guide/b_ise_admin_guide_27/b_ise_admin_guide_27_chapter_010100.html)

2of30

https://www.cisco.com/c/dam/en/us/td/docs/solutions/CVD/Campus/CVD-Software-Defined-Access-Design-Guide-2019SEP.pdf

References :=

Some possible references are:

• Cisco Enterprise Networks SDA, SDWAN and ISE Exam for System Engineers (ENSDENG) Study Guide
• Cisco Identity Services Engine Administrator Guide, Release 2.7 - Configure Network Access Devices [Cisco Identity Services Engine]

https://www.arista.com/assets/data/pdf/Whitepapers/Arista_Networks_VXLAN_White_Paper.pdf

A VxLAN header adds 50 bytes to an original Ethernet frame. This is because a VxLAN header consists of the following components:

• 8-byte outer UDP header for VxLAN: The default VxLAN destination UDP port number is 47891
• 20-byte outer IP header: Valid addresses of VTEPs or VxLAN multicast groups on the transport network. Devices in the transport network forward VxLAN packets based on the outer IP header1
• 8-byte VxLAN header: VxLAN information for the frame. It includes a 24-bit VxLAN Network Identifier (VNI) that identifies the VxLAN of the frame, and an 8-bit flags field that indicates the validity of the VNI1
• 14-byte inner Ethernet header: The original Ethernet header of the encapsulated frame. It includes the source and destination MAC addresses, the EtherType, and optionally a 4-byte VLAN tag2

The total size of these components is 8 + 20 + 8 + 14 = 50 bytes. Therefore, a VxLAN header adds 50 bytes to an original Ethernet frame.

References :=

• VXLAN packet format - Aruba
• MTU Considerations for VXLAN | Matt Oswalt

The current DNA-C 1.1 release supports the following wireless product families:

• WLC 3504: This is a wireless LAN controller that provides centralized control, management, and troubleshooting for small to medium-sized enterprises and branch offices. It supports up to 150 access points and 3,000 clients, and offers high availability, scalability, and security features. It is compatible with Cisco DNA Center 1.1 and later releases1.
• WLC 8540: This is a wireless LAN controller that provides centralized control, management, and troubleshooting for large enterprises and service providers. It supports up to 6,000 access points and 64,000 clients, and offers high performance, reliability, and flexibility. It is compatible with Cisco DNA Center 1.1 and later releases2.
• AP 3800: This is an access point that delivers high-performance wireless connectivity for indoor and outdoor environments. It supports 802.11ac Wave 2 technology, multiuser multiple-input multiple-output (MU-MIMO), flexible radio assignment, and modular design. It is compatible with Cisco DNA Center 1.1 and later releases3.

References:

 1: [Cisco Wireless LAN Controller 3504 Data Sheet - Cisco] : 2: [Cisco 8540 Wireless Controller Data Sheet - Cisco] : 3: [Cisco Aironet 3800 Series Access Points Data Sheet - Cisco]

https://sdwan-docs.cisco.com/Product_Documentation/Software_Features/Release_18.1/04Segmentation/02Configuring_Segmentation_(VPNs)