Cisco 650-472 Exam Questions

Question 6 of 66

Which three RADIUS attributes art required to dynamically assign a VIAN? (Choose three)

Attribute 65 (Tunnel-Medium-Type)

Attribute 26 (Vendor-Specific)

Attribute 64 (Tunnel-Type)

Attribute 8 (Framed-IP-Address)

Attribute 5 (NASPort)

Attribute 81 (Tunne1-Private-Group-ID)

Correct Answer: A, C, F

Question 7 of 66

Consider the example of an end user plugging an unmanaged third-party switch into a port in a conference room. If the wiring closet switch port requires 802.1X authentication (and the authentication host mode is set to the default), what would be the result of multiple 802.1X clients attempting to access the network from the unmanaged switch?

After the first supplicant authenticates, other hosts connected to the unmanaged switch will be blocked from the network.

After 802.1X times out three times, all hosts on the unmanaged switch will have access to the network.

Up to eight hosts and one IP phone can be authenticated.

After the first supplicant authenticates, all other hosts connected to the unmanaged switch have access to the network.

Correct Answer: A

Question 8 of 66

Which two Cisco Catalyst switch command fragments enable WebAuth support on an interface? (Choose two.)

3k-access(config-if)# authentication fallback

3k-access(config-if)# authentication dotlx webauth

3k-access(config-if)S authentication webauth

3k-access(config-if)# dotlx priority webauth

3k-access(config-if)- ip admission

3k-access(config-if)ff dotlx fallback

3k-access(config-if)# authentication order dotlx webauth

Correct Answer: A, E

Question 9 of 66

Which two statements are true with regard to the inner and outer phases of an EAP method? (Choose two.)

PEAP can include an optional phase 0 for PAC provisioning.

All EAP methods include an inner and outer phase.

The outer phase is used for authentication.

The inner phase is used for authentication.

The outer phase is used for securing the communication channel.

The inner phase is used for securing the communication channel.

Correct Answer: D, E

Question 10 of 66

Which Cisco ISE persona must run on dedicated hardware?

Inline Posture

Administrative

Centralized

Monitoring

Distributed Policy

Policy Services

Standalone

Correct Answer: A