Latest Cisco 500-220 Practice Test Questions, Engineering Cisco Meraki Solutions Exam Dumps
May-2024 Pass Cisco 500-220 Exam in First Attempt Easily
NEW QUESTION # 29
Refer to the exhibit.
What are two outcomes reflected in the Web App Health application? (Choose two.)
- A. Network #1 could not load Google because of a remote server issue.
- B. Neither network recorded any server-side performance issues.
- C. Network #2 had better application performance than Network #1.
- D. Network #2 could not load Google because of a local client misconfiguration.
- E. Users on both networks may be experiencing issues when attempting to reach Google.
Answer: B,E
NEW QUESTION # 30
One thousand concurrent users stream video to their laptops. A 30/70 split between 2.4 GHz and 5 GHz is used.
Based on client count, how many APs (rounded to the nearest whole number) are needed?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: D
NEW QUESTION # 31
Refer to the exhibit.
The VPN concentrator is experiencing issues. Which action should be taken to ensure a stable environment?
- A. Add a deny any/any firewall rule to the end of the firewall rules.
- B. Physically disconnect all LAN ports.
- C. Remove the connection from Internet 1.
- D. Configure the MX appliance to Routed mode on the Addressing & VLANS page.
Answer: B
Explanation:
Explanation
Before deploying MXs as one-arm VPN concentrators, place them into Passthrough or VPN Concentrator mode on the Addressing and VLANs page. In one-armed VPN concentrator mode, the units in the pair are connected to the network "only" via their respective 'Internet' ports. Make sure they are NOT connected directly via their LAN ports. Each MX must be within the same IP subnet and able to communicate with each other, as well as with the Meraki dashboard. Only VPN traffic is routed to the MX, and both ingress and egress packets are sent through the same interface.
https://documentation.meraki.com/Architectures_and_Best_Practices/Cisco_Meraki_Best_Practice_Design/Best
NEW QUESTION # 32
A Cisco Meraki MV camera is monitoring an office and its field of vision currently captures work desks and employee computer screens. However, recording employee computer screens is prohibited by local regulation.
Which feature in Dashboard can be used to preserve the current position of the camera while also meeting regulation requirements?
- A. zone exclusion
- B. sensor crop
- C. area or interest
- D. privacy window
- E. restricted mode
Answer: D
Explanation:
Explanation
https://documentation.meraki.com/MV/Initial_Configuration/Privacy_Windows
NEW QUESTION # 33
When an SSID is configured with Sign-On Splash page enabled, which two settings must be configured for unauthenticated clients to have full network access and not be allow listed? (Choose two.)
- A. Simultaneous logins
- B. Captive Portal strength
- C. Firewall & traffic shaping
- D. Controller disconnection behavior
- E. RADIUS for splash page settings
Answer: B,D
Explanation:
Explanation
To clarify, when an SSID is configured with Sign-On Splash page enabled, the two settings that must be configured for unauthenticated clients to have full network access and not be allow listed are:
Controller disconnection behavior: This setting determines how the clients are treated when the Meraki cloud controller is unreachable. The options are Restricted or Unrestricted. The former option blocks all traffic from unauthenticated clients until the controller is reachable again. The latter option allows unauthenticated clients to access the network without signing on until the controller is reachable again1.
Captive Portal strength: This setting determines how often the clients are redirected to the splash page for authentication. The options are Block all access until sign-on is complete or Allow non-HTTP traffic prior to sign-on. The latter option allows unauthenticated clients to access other protocols such as DNS, DHCP, ICMP, etc., but blocks HTTP and HTTPS traffic until they sign on. This option is recommended for compatibility with devices that do not support web-based authentication1.
NEW QUESTION # 34
Which API endpoint clones a new Organization?
- A. POST /organizations/clone/{organizationId}
- B. POST /organizations/{organizationId}/new
- C. POST /organizations/{organizationId}/clone
- D. PUT /organizations/{organizationId}/clone
Answer: B
NEW QUESTION # 35
Drag and drop the settings from the left into the boxes on the right to indicate if the setting will be cloned or not cloned using the Cisco Meraki MS switch cloning feature.
Answer:
Explanation:
Explanation
The settings that will be cloned using the Cisco Meraki MS switch cloning feature are:
port name
interface type
STP bridge property
The settings that will not be cloned using the Cisco Meraki MS switch cloning feature are:
switch management IP
switch name
NEW QUESTION # 36
Refer to the exhibit.
Why does the end user complain of poor wireless performance?
- A. Non-802.11 traffic of 18 percent indicates poor AP placement.
- B. The client is connected to the secondary radio of the AP instead of the primary radio
- C. Channel 48 utilization is at 84 percent.
- D. The client is using a 20 MHz channel width to connect.
Answer: C
NEW QUESTION # 37
A new application needs to be pushed to all iOS devices. Some devices report "NotNow" in the event log and do not install the application.
What does the "NotNow" event indicate?
- A. The device cannot connect to Apple servers.
- B. The device is locked with a passcode.
- C. The application requires the most recent iOS version.
- D. The device cannot connect to Cisco Meraki servers.
Answer: B
Explanation:
Explanation
The error message "NotNow" is seen in the Event Log on an iOS device's details page when an action cannot be performed because the device is locked with a passcode. These actions include pushing managed apps, installing profiles, and other actions. When this occurs the device will attempt to re-connect with the MDM server as soon as the device is unlocked in order to retry the action.
https://documentation.meraki.com/SM/Monitoring_and_Reporting/Status_of_%22NotNow%22_in_Systems_Ma
NEW QUESTION # 38
What is the role of the Meraki Dashboard as the service provider when using SAML for single sign-on to the Dashboard?
- A. The Dashboard generates the SAML request.
- B. The Dashboard parses the SAML request and authenticates users.
- C. The Dashboard provides user access credentials.
- D. The Dashboard generates the SAML response.
Answer: A
NEW QUESTION # 39
Which type of authentication protocol is used when using OSPF on an MX appliance?
- A. plaintext
- B. MD5
- C. SHA-1
- D. certificate
Answer: B
NEW QUESTION # 40
Drag and drop the settings from the left onto the OS system or systems that support it on the right Settings can be used more than once.
Answer:
Explanation:
Explanation
IOS:
Kiosk mode
Single App mode
Wallpaper
Cisco Security Connector
Active Sync
Android:
Kiosk mode
Backpack
Wallpaper
Active Sync
This question is related to the topic of in the Cisco Meraki documentation.
You can find more information about this topic in the [System Manager: Getting Started] article or the
[System Manager Overview] page.
https://documentation.meraki.com/SM/Profiles_and_Settings/Configuration_Settings_Payloads
NEW QUESTION # 41 
Refer to the exhibit. What Is the ratio of internet-bound flows that route via WAN 1 compared with WAN 2?
- A. All flows alternate in a 2:1 ratio.
- B. All flows egress via WAN1.
- C. All flows agrees via WAN 1:1 ratio.
- D. All flows alternate in a 5:1 ratio.
Answer: C
Explanation:
Explanation
https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/MX_Load_Balancing_and_Flow_Prefere
NEW QUESTION # 42
Refer to the exhibit.
What is the minimal Cisco Meraki Insight licensing requirement?
- A. Two Meraki Insight licenses must be configured on network A and a single license must be configured on network B, to gain Web App Health visibility on network B.
- B. A single Meraki Insight license must be configured on network A, and a single license must be configured on network B, to gain Web App Health visibility on network B.
- C. Two Meraki Insight licenses must be configured on network A to gain Web App Health visibility on network B.
- D. A single Meraki Insight license must be configured on network B to gain Web App Health visibility on network B.
- E. A single Meraki Insight license must be configured on network A to gain Web App Health visibility on network B.
Answer: A
NEW QUESTION # 43
Refer to the exhibit.
Which IDS/IPS mode is the MX Security Appliance configured for?
- A. prevention
- B. blocking
- C. quarantine
- D. detection
Answer: A
Explanation:
Explanation
You can enable intrusion prevention by setting the Mode drop-down to Prevention under Security & SD-WAN
> Configure > Threat protection > Intrusion detection and prevention. Traffic will be automatically blocked by best effort if it is detected as malicious based on the detection ruleset specified above.
https://documentation.meraki.com/MX/Content_Filtering_and_Threat_Protection/Threat_Protection
NEW QUESTION # 44
In an organization that uses the Co-Termination licensing model, which two operations enable licenses to be applied? (Choose two.)
- A. Call Meraki support.
- B. License more devices.
- C. Wait for the devices to auto-renew.
- D. License a network.
- E. Renew the Dashboard license.
Answer: B,E
Explanation:
Explanation
There are two operations in which a license can be applied, License more devices or Renew my dashboard license. This article will compare both operations and describe their behaviors.
https://documentation.meraki.com/General_Administration/Licensing/Meraki_Licensing_-_License_More_Devi These are the two operations that enable licenses to be applied in an organization that uses the Co-Termination licensing model. According to the Meraki Co-Termination Licensing Overview, there are two ways to add licenses to an organization:
Renewing the Dashboard license: This option allows you to extend the co-termination date of your organization by purchasing new licenses for the same or longer term as your existing licenses. You can renew your Dashboard license from the Organization > Configure > License Info page or from the Meraki Dashboard homepage.
Licensing more devices: This option allows you to add new devices to your organization by purchasing new licenses for them. You can license more devices from the Organization > Inventory page or from the Meraki Dashboard homepage.
NEW QUESTION # 45
Drag and drop the descriptions from the left onto the corresponding MX operation mode on the right.
Answer:
Explanation:
NEW QUESTION # 46
Refer to the exhibit.
What are the Loss and Average Latency statistics based on?
- A. responses that the MX appliance receives on the connectivity-testing IP address that is configured on the Security & SD-WAN > SD-WAN & Traffic Shaping page
- B. responses that the MX appliance receives on the connectivity-testing hostnames on the Insight > Web App Health page
- C. responses that the MX appliance receives on the connectivity-testing IP addresses on the Security & SD- WAN > Firewall page
- D. responses that the MX appliance receives on the connectivity-testing IP addresses on the Help > Firewall info page
Answer: A
Explanation:
Explanation
Quote from referred documentation-Link: Loss and latency will be determined over the configured IP address under Security and SD-WAN > SD-WAN and Traffic Shaping > Uplink Statistics. If no IP is configured, these values will be measured against 8.8.8.8 by default. On the WAN Health page, all the configured IP address statistics can be reviewed by changing the destination under the "Ping Destination" column.
https://documentation.meraki.com/MI/MI_WAN_Health#:~:text=Current%20loss%20and%20latency%20statist
NEW QUESTION # 47
Which information do the MXs in a High Availability pair share?
- A. DHCP association database
- B. stateful firewall database
- C. spanning-tree state
- D. time synchronization state
Answer: C
NEW QUESTION # 48
Refer to the exhibit.
During a Meraki AP deployment, the default SSID that the exhibit shows is broadcast. What causes this behavior?
- A. An AP has never connected to the Meraki Cloud Controller.
- B. An AP has Site Survey mode enabled.
- C. An AP does not have a wired connection to the network.
- D. An AP cannot connect to the default gateway.
Answer: A
Explanation:
Explanation
If a Meraki Access Point does not have a configuration from the Meraki Cloud Controller it will instead broadcast a default SSID of "Meraki-Scanning." vs <SSID_name>-scanning Cause: Similar to 'bad-gateway', an AP is unable to connect to its default gateway.
https://documentation.meraki.com/MR/Other_Topics/Troubleshooting_local_connection_issues_using_default_S This is because the AP is broadcasting the default SSID "meraki-scanning" which is only broadcast when the AP has never connected to the Meraki Cloud Controller1.
This question is related to the topic of Wireless Access Points Quick Start in the Cisco Meraki documentation.
You can find more information about this topic in the Wireless Access Points Quick Start article or the Using the Cisco Meraki Device Local Status Page page.
NEW QUESTION # 49
Which Cisco Meraki product must be deployed in addition to Systems Manager so that Systems Manager Sentry enrollment can be used?
- A. MR Access Point
- B. Meraki Insight
- C. MS Switch
- D. MV Smart Camera
Answer: A
NEW QUESTION # 50
What are two ways peers interact with ports that Auto VPN uses? (Choose two.)
- A. Peers contact the VPN registry at UDP port 9350.
- B. For IPsec tunneling, peers use high TCP ports within the 32768 to 61000 range.
- C. For IPsec tunneling, peers use high UDP ports within the 32768 to 61000 range.
- D. For IPsec tunneling, peers use UDP ports 500 and 4500.
- E. Peers contact the VPN registry at TCP port 9350.
Answer: A,B
Explanation:
Reference:
_Configuration_and_Troubleshooting
NEW QUESTION # 51
Refer to the exhibit.
During a Meraki AP deployment, the default SSID that the exhibit shows is broadcast. What causes this behavior?
- A. An AP has never connected to the Meraki Cloud Controller.
- B. An AP has Site Survey mode enabled.
- C. An AP does not have a wired connection to the network.
- D. An AP cannot connect to the default gateway.
Answer: A
Explanation:
Reference:
Troubleshooting_local_connection_issues_using_default_SSID_on_MR_Access_Points
NEW QUESTION # 52
Which Meraki Dashboard menu section is accessed to enable Sentry enrollment on an SSID?
- A. Wireless > Configure > SSIDs
- B. Wireless > Configure > Splash page
- C. Wireless > Configure > Access Control
- D. Wireless > Configure > Firewall & Traffic Shaping
Answer: C
NEW QUESTION # 53
......
Free 500-220 Exam Files Downloaded Instantly 100% Dumps & Practice Exam: https://passking.actualtorrent.com/500-220-exam-guide-torrent.html