Ace 500-220 Certification with 74 Actual Questions
PASS Cisco 500-220 EXAM WITH UPDATED DUMPS
NEW QUESTION # 41
How is high-availability supported for Cisco Meraki devices?
- A. The MX Security Appliances and MS Series Switches that use VRRP support an active/passive high- availability pair.
- B. Only the MX Security Appliances that use VRRP support high availability.
- C. An active/active high-availability pair is recommended for MX Security Appliances.
- D. The MX Security Appliances and MS Series Switches that use HSRP support an active/passive high- availability pair.
Answer: B
Explanation:
Reference:
_High_Availability_Pair
NEW QUESTION # 42
What is out of scope when considering the Best practices for high-density wireless designs?
- A. minimum bitrate
- B. band selection
- C. maximum beamforming
- D. number of SSIDs
Answer: C
Explanation:
Explanation
https://documentation.meraki.com/Architectures_and_Best_Practices/Cisco_Meraki_Best_Practice_Design/Best
NEW QUESTION # 43
Which information is used to calculate whether a WAN link has high usage?
- A. total historical throughput of an uplink
- B. value under Security & SD WAN > SD WAN & Traffic Shaping > Uplink Configuration
- C. total number of devices that are actively passing traffic
- D. data under Security & SD WAN > Appliance Status > Uplink > Live Data
Answer: B
Explanation:
Explanation
Which information is used to calculate whether a WAN link has high usage not how to view (To accurately identify high utilization, users must set the ISP-provided bandwidth limits under Security and SD-WAN > SD-WAN and Traffic Shaping > Uplink Configuration for each uplink. If the bandwidth usage is higher than
80% of the defined limit, it will mark that uplink as High Usage.)
https://documentation.meraki.com/MI/MI_WAN_Health#:~:text=To%20accurately%20identify%20high%20util
NEW QUESTION # 44
A Cisco Meraki MV camera is monitoring an office and its field of vision currently captures work desks and employee computer screens. However, recording employee computer screens is prohibited by local regulation.
Which feature in Dashboard can be used to preserve the current position of the camera while also meeting regulation requirements?
- A. zone exclusion
- B. sensor crop
- C. restricted mode
- D. privacy window
- E. area or interest
Answer: C
NEW QUESTION # 45
Refer to the exhibit.
What is the minimal Cisco Meraki Insight licensing requirement?
- A. A single Meraki Insight license must be configured on network A, and a single license must be configured on network B, to gain Web App Health visibility on network B.
- B. Two Meraki Insight licenses must be configured on network A and a single license must be configured on network B, to gain Web App Health visibility on network B.
- C. Two Meraki Insight licenses must be configured on network A to gain Web App Health visibility on network B.
- D. A single Meraki Insight license must be configured on network A to gain Web App Health visibility on network B.
- E. A single Meraki Insight license must be configured on network B to gain Web App Health visibility on network B.
Answer: E
Explanation:
Explanation
If you only need traffic statistics from your spoke site clients then you only need to enable insight on the spoke network as the hub site will not gather data for remote sites.
https://community.meraki.com/t5/Wireless-LAN/Meraki-Insight-Licensing/m-p/152684 A license is only required for those networks where Meraki Insight functionality is desired. One license is required per network, regardless of whether that network has a single MX or HA pair. Licenses can be moved between networks, but historical data for the old network will be lost.
https://meraki.cisco.com/lib/pdf/meraki_datasheet_mi.pdf
NEW QUESTION # 46
Refer to the exhibit.
What does the MX Security Appliance send to determine whether VPN traffic exceeds the configured latency threshold in the VoIP custom performance class?
- A. 1000-byte TCP probes every second, through VPN tunnels that are established over every WAN link.
- B. 100-byte UDP probes every second, through VPN tunnels that are established over the primary WAN link.
- C. 100-byte UDP probes every second, through VPN tunnels that are established over every WAN link.
- D. 1000-byte TCP probes every second, through VPN tunnels that are established over the primary WAN link.
Answer: A
NEW QUESTION # 47
Which order is accurate for a firmware upgrade on MX appliances in a high-availability configuration?
- A. starts on both MX appliances at the same time and then immediately reboots both appliances
- B. starts on both MX appliances at the same time and then reboots both appliances after traffic on the primary MX appliance ceases
- C. starts on the primary MX appliance and then occurs on the secondary MX appliance
- D. starts on the secondary MX appliance and then occurs on the primary MX appliance
Answer: C
NEW QUESTION # 48
Refer to the exhibit.
A packet arrives on the VPN concentrator with source IP 10.168.70.3 and destined for IP 10.116.32.4.
What is the next hop for the packet, based on this concentrator routing table?
- A. The Auto VPN peer "Store 1532 - appliance" is the next hop.
- B. The concentrator gateway (10.128.124.62) is the next hop.
- C. Not enough detail is available to determine the next hop.
- D. The packet is stopped.
Answer: A
Explanation:
Explanation
This can be determined by looking at the concentrator routing table and finding the entry for the destination IP
10.116.32.4. The next hop for this entry is the Auto VPN peer "Store 1532 - appliance".
This question is related to the topic of Implementing Dynamic Routing Protocols in the Engineering Cisco Meraki Solutions (ECMS) official training documentation. You can find more information about this topic in the ECMS v2.2 Course Overview or the ECMS1 v2.1 Course Overview.
NEW QUESTION # 49
Refer to the exhibit.
Which condition or conditions will cause the "All Databases & cloud services" SD-WAN traffic to be routed via a VPN2 tunnel on WAN2?
- A. WAN1 tunnel latency is 20 ms or less, irrespective of WAN2 tunnel performance.
- B. WAN1 tunnel latency is 20 ms or less, and WAN2 tunnel meets the configured performance criteria.
- C. WAN1 tunnel latency is 20 ms or more, irrespective of WAN2 tunnel performance.
- D. WAN1 tunnel latency is 20 ms or more, and WAN2 tunnel meets the configured performance criteria.
Answer: D
Explanation:
Explanation
This is because the SD-WAN policy for "All Databases & cloud services" has the following settings:
Uplink selection policy: Prefer WAN1, Fail over if down
Traffic filters: Custom performance classes
Custom performance classes: Database
Database performance criteria: Maximum latency 200 ms, Maximum jitter 20 ms, Maximum loss 1% This means that the SD-WAN traffic will be routed via WAN1 by default, unless WAN1 is down or fails to meet the database performance criteria. In that case, the traffic will be routed via WAN2, if WAN2 meets the database performance criteria. Therefore, the condition that will cause the traffic to be routed via WAN2 is when WAN1 tunnel latency is 20 ms or more (which exceeds the maximum jitter of 20 ms), and WAN2 tunnel meets the configured performance criteria (maximum latency 200 ms, maximum jitter 20 ms, maximum loss
1%).
NEW QUESTION # 50
A customer wants to use Microsoft Azure to host corporate application servers.
Which feature does the customer get by using a vMX appliance rather than connecting directly to Azure by VPN?
- A. next-generation firewall
- B. malware protection
- C. SD-WAN
- D. intrusion prevention
Answer: C
Explanation:
Explanation
https://documentation.meraki.com/MX/MX_Installation_Guides/vMX_Setup_Guide_for_Microsoft_Azure
NEW QUESTION # 51
Which two actions can extend the video retention of a Cisco Meraki MV Smart Camera? (Choose two.)
- A. enabling audio compression
- B. configuring a recording schedule
- C. enabling maximum retention limit
- D. installing an SSD memory extension
- E. enabling motion-based retention
Answer: B,E
Explanation:
Explanation
https://documentation.meraki.com/MV/Advanced_Configuration/Scheduled_Recording By default, the Meraki security camera's will record continuously 24/7. In some situations, certain times of day are not allowed to be recorded. Scheduled recording covers this requirement as well as improve the video retention capabilities of the camera.
NEW QUESTION # 52
Refer to the exhibit.
What are two outcomes reflected in the Web App Health application? (Choose two.)
- A. Neither network recorded any server-side performance issues.
- B. Users on both networks may be experiencing issues when attempting to reach Google.
- C. Network #2 had better application performance than Network #1.
- D. Network #2 could not load Google because of a local client misconfiguration.
- E. Network #1 could not load Google because of a remote server issue.
Answer: A,E
NEW QUESTION # 53
Which API endpoint clones a new Organization?
- A. POST /organizations/{organizationId}/new
- B. POST /organizations/clone/{organizationId}
- C. POST /organizations/{organizationId}/clone
- D. PUT /organizations/{organizationId}/clone
Answer: C
Explanation:
Explanation
https://developer.cisco.com/meraki/api-v1/#!clone-organization
NEW QUESTION # 54
Refer to the exhibit.
What are the Loss and Average Latency statistics based on?
- A. responses that the MX appliance receives on the connectivity-testing IP addresses on the Help > Firewall info page
- B. responses that the MX appliance receives on the connectivity-testing hostnames on the Insight > Web App Health page
- C. responses that the MX appliance receives on the connectivity-testing IP address that is configured on the Security & SD-WAN > SD-WAN & Traffic Shaping page
- D. responses that the MX appliance receives on the connectivity-testing IP addresses on the Security & SD- WAN > Firewall page
Answer: C
Explanation:
Explanation
Quote from referred documentation-Link: Loss and latency will be determined over the configured IP address under Security and SD-WAN > SD-WAN and Traffic Shaping > Uplink Statistics. If no IP is configured, these values will be measured against 8.8.8.8 by default. On the WAN Health page, all the configured IP address statistics can be reviewed by changing the destination under the "Ping Destination" column.
https://documentation.meraki.com/MI/MI_WAN_Health#:~:text=Current%20loss%20and%20latency%20statist
NEW QUESTION # 55
A customer requires a hub-and-spoke Auto VPN deployment with two NAT-mode hubs with dual uplink connections and 50 remote sites with a single uplink connection.
How many tunnels does each hub need to support?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: B
Explanation:
Explanation
https://documentation.meraki.com/Architectures_and_Best_Practices/Auto_VPN_Hub_Deployment_Recommen This is the number of tunnels that each hub needs to support in a hub-and-spoke Auto VPN deployment with two NAT-mode hubs with dual uplink connections and 50 remote sites with a single uplink connection. This can be calculated by using the formula for the hub tunnel count in a hub-and-spoke topology1:
Hub Tunnel Count = (H x (H - 1) / 2 x L1) + (H x S x L1 x L2)
Where H is the number of hubs, S is the number of spokes, L1 is the number of uplinks for the hubs, and L2 is the number of uplinks for the spokes. In this case, H = 2, S = 50, L1 = 2, and L2 = 1. Therefore, Hub Tunnel Count = (2 x (2 - 1) / 2 x 2) + (2 x 50 x 2 x 1) Hub Tunnel Count = (2 x 1 / 2 x 2) + (200 x 2) Hub Tunnel Count = (2 / 2 x 2) + (400) Hub Tunnel Count = (1 x 2) + (400) Hub Tunnel Count = 2 + 400 Hub Tunnel Count = 402 This question is related to the topic of Auto VPN Hub Deployment Recommendations in the Cisco Meraki documentation. You can find more information about this topic in the Auto VPN Hub Deployment Recommendations article or the Meraki Auto VPN General Best Practices page.
NEW QUESTION # 56
What is the role of the Meraki Dashboard as the service provider when using SAML for single sign-on to the Dashboard?
- A. The Dashboard provides user access credentials.
- B. The Dashboard generates the SAML response.
- C. The Dashboard parses the SAML request and authenticates users.
- D. The Dashboard generates the SAML request.
Answer: D
Explanation:
Explanation
https://documentation.meraki.com/General_Administration/Managing_Dashboard_Access/Configuring_SAML_
NEW QUESTION # 57
Drag and drop the settings from the left onto the OS system or systems that support it on the right Settings can be used more than once.
Answer:
Explanation:
Explanation
IOS:
Kiosk mode
Single App mode
Wallpaper
Cisco Security Connector
Active Sync
Android:
Kiosk mode
Backpack
Wallpaper
Active Sync
This question is related to the topic of in the Cisco Meraki documentation.
You can find more information about this topic in the [System Manager: Getting Started] article or the
[System Manager Overview] page.
https://documentation.meraki.com/SM/Profiles_and_Settings/Configuration_Settings_Payloads
NEW QUESTION # 58
What are two ways peers interact with ports that Auto VPN uses? (Choose two.)
- A. Peers contact the VPN registry at UDP port 9350.
- B. For IPsec tunneling, peers use high UDP ports within the 32768 to 61000 range.
- C. For IPsec tunneling, peers use high TCP ports within the 32768 to 61000 range.
- D. For IPsec tunneling, peers use UDP ports 500 and 4500.
- E. Peers contact the VPN registry at TCP port 9350.
Answer: A,B
Explanation:
Explanation
Ports used to contact the VPN registry:
- Source UDP port range 32768-61000
- Destination UDP port 9350 or UDP port 9351
Ports used for IPsec tunneling:
- Source UDP port range 32768-61000
- Destination UDP port range 32768-61000
https://documentation.meraki.com/MX/Site-to-site_VPN/Meraki_Auto_VPN_-_Configuration_and_Troubleshoo
NEW QUESTION # 59
......
To prepare for the Cisco 500-220 exam, candidates can take the Cisco Meraki Solutions Specialist training course. 500-220 course covers all the topics included in the exam and provides hands-on experience in deploying and managing Cisco Meraki solutions. Candidates can also use study guides and practice exams to prepare for the exam.
500-220 Questions PDF [2023] Use Valid New dump to Clear Exam: https://www.itexamsimulator.com/500-220-brain-dumps.html
Passing Cisco 500-220 Exam Using 2023 Practice Tests: https://drive.google.com/open?id=1qtZ7aZdY0v1z5cPCYl76EDmyWsrG8cFS
