When the Cisco Catalyst 3850 is configured as a wireless mobility agent, what must be true?

ACisco ISE must be joined to Microsoft AD

BAccess points must be connected directly to the Catalyst 3850.

CAccess points may be connected anywhere in the network.

DThe mobility controller must be CT5760.

Answer : B

Which action is required when configuring Flexible NetFlow on a Cisco Catalyst switch?

AConfigure the flow descriptor.

BConfigure the flow exporter.

CConfigure the flow importer.

DConfigure the flow reset target.

Answer : B

Which step is one of the typical configuration steps when configuring Flow Exporter for Prime Infrastructure 2.0 or higher?

ASet the IP address to export the Flexible NetFlow cache entry to a destination system.

BConfigure the source IP address interface for each interface part of Flexible NetFlow exporter.

CConfigure the TCP transport protocol and a TCP port number 1991 for a Flexible NetFlow flow exporter.

DConfigure the TCP transport protocol and a TCP port number 9991 for a Flexible NetFlow flow exporter.

Answer : A

Which dashboard under Overview in Prime Infrastructure 2.0 do you use to identify authentication failures and client status?

AAVC dashboard

BClient dashboard

CGeneral dashboard

DContext Aware dashboard

Answer : B

What is ISE profiling?

Aa feature used to identify the endpoints based on network data obtained from a number of enabled probes

Ban ISE function used for applying security templates to endpoints when ISE is integrated with Cisco Prime Infrastructure

Ca dynamic policy feature that uses a number of enabled probes to apply the correct ACL to roaming wireless endpoints

Da form used for self-onboarding of wireless devices

Answer : A

Which option describes the benefits of a secure BYOD architecture using SGT?

Acomplex network design and lower operational costs

Beliminates ACL explosion and offloads filtering to ASA for rich and scalable policy rule automation

Ccomplex network design and topology dependent segmentation using Security Group

DSegmentation using Security Group is topology dependent and offloads filtering to ASA for rich and scalable policy rule automation.

Answer : B

Free 500-451 Questions for Cisco 500-451 Exam as PDF & Practice Test Software