Question 1

Refer to the exhibit.

What is the minimal Cisco Meraki Insight licensing requirement?

AA single Meraki Insight license must be configured on network A to gain Web App Health visibility on network B.

BA single Meraki Insight license must be configured on network B to gain Web App Health visibility on network B.

CA single Meraki Insight license must be configured on network A, and a single license must be configured on network B, to gain Web App Health visibility on network B.

DTwo Meraki Insight licenses must be configured on network A to gain Web App Health visibility on network B.

ETwo Meraki Insight licenses must be configured on network A and a single license must be configured on network B, to gain Web App Health visibility on network B.

Answer : B

If you only need traffic statistics from your spoke site clients then you only need to enable insight on the spoke network as the hub site will not gather data for remote sites. https://community.meraki.com/t5/Wireless-LAN/Meraki-Insight-Licensing/m-p/152684

A license is only required for those networks where Meraki Insight functionality is desired. One license is required per network, regardless of whether that network has a single MX or HA pair. Licenses can be moved between networks, but historical data for the old network will be lost. https://meraki.cisco.com/lib/pdf/meraki_datasheet_mi.pdf

Question 2

Air Marshal has contained a malicious SSID.

What are two effects on connectivity? (Choose two.)

ACurrently associated clients stay connected.

BNew clients can connect.

CCurrently associated clients are affected by restrictive traffic shaping rules.

DNew clients cannot connect.

ECurrently associated clients are disconnected.

Answer : D, E

When a rogue access point is contained, clients will be unable to connect to the rogue AP. Additionally, any currently associated clients will lose their connection to the rogue AP. https://documentation.meraki.com/MR/Monitoring_and_Reporting/Air_Marshal

Question 3

What is the best practice Systems Manager enrollment method when deploying corporate-owned iOS devices?

Amanual

BApple Configurator

CSentry enrollment

DDEP

Answer : D

iOS devices that are using Apple's Device Enrollment Program (DEP) can be supervised and enrolled over-the-air anytime they are factory reset. DEP is the best way to permanently force your devices to be owned and managed by your organization, and it is important to assign your DEP settings properly before deployment. https://documentation.meraki.com/SM/Device_Enrollment/Enrolling_and_Supervising_iOS_Devices_using_Apple_Configurator_2.5_or_Later#:~:text=DEP%20is%20the%20best%20way,DEP%20settings%20properly%20before%20deployment.

Question 4

A customer requires a hub-and-spoke Auto VPN deployment with two NAT-mode hubs with dual uplink connections and 50 remote sites with a single uplink connection.

How many tunnels does each hub need to support?

A52

B54

C100

D104

Answer : D

https://documentation.meraki.com/Architectures_and_Best_Practices/Auto_VPN_Hub_Deployment_Recommendations

This is the number of tunnels that each hub needs to support in a hub-and-spoke Auto VPN deployment with two NAT-mode hubs with dual uplink connections and 50 remote sites with a single uplink connection.This can be calculated by using the formula for the hub tunnel count in a hub-and-spoke topology1:

Hub Tunnel Count = (H x (H - 1) / 2 x L1) + (H x S x L1 x L2)

Where H is the number of hubs, S is the number of spokes, L1 is the number of uplinks for the hubs, and L2 is the number of uplinks for the spokes. In this case, H = 2, S = 50, L1 = 2, and L2 = 1. Therefore,

Hub Tunnel Count = (2 x (2 - 1) / 2 x 2) + (2 x 50 x 2 x 1) Hub Tunnel Count = (2 x 1 / 2 x 2) + (200 x 2) Hub Tunnel Count = (2 / 2 x 2) + (400) Hub Tunnel Count = (1 x 2) + (400) Hub Tunnel Count = 2 + 400 Hub Tunnel Count =402

This question is related to the topic ofAuto VPN Hub Deployment Recommendationsin the Cisco Meraki documentation. You can find more information about this topic in theAuto VPN Hub Deployment Recommendationsarticle or theMeraki Auto VPN General Best Practicespage.

Question 5

Which order is accurate for a firmware upgrade on MX appliances in a high-availability configuration?

Astarts on the secondary MX appliance and then occurs on the primary MX appliance

Bstarts on both MX appliances at the same time and then reboots both appliances after traffic on the primary MX appliance ceases

Cstarts on both MX appliances at the same time and then immediately reboots both appliances

Dstarts on the primary MX appliance and then occurs on the secondary MX appliance

Answer : D

Free Practice Questions for Cisco 500-220 Exam

Question 1

Question 2

Question 3

Question 4

Question 5