500-490: Designing Cisco Enterprise Networks for Field EngineersDemo

By Cisco · Browse Mode
About the Exam

This 60-minute Cisco exam covers the skills a field engineer needs to understand the 4D sales methodology: Discovery, Design, Demonstrate, and Defend. Cisco lists it as a current channel, partner, and other exam and offers it in English. Passing demonstrates the candidate has the Cisco field-engineering knowledge associated with enterprise network design engagements.

Exam Topics

  • Discovery0%
  • Design0%
  • Demonstrate0%
  • Defend0%

How to Use This Practice Exam

  1. Browse — Read each question, select your answer, and reveal the explanation.
  2. Exam Mode — Simulate real exam conditions with a timed session and score report.
  3. Learn Mode — Spaced repetition schedules questions you struggle with for long-term retention.

Download the Full Exam PDF

Get every question and answer in a clean, printable PDF built for offline study. Purchase once, keep permanent access, and re-download the latest version anytime.

Get PDF
Learn More

Last updated December 2, 2025 at 11:19 PM

Topic filter
Retired questions
Question sort

QuestionQ1

Discovery

In which three ways are SD-Access and ACI Fabric alike?

Choose three
  • A use of overlays
  • B use of Virtual Network IDs
  • C focus on user endpoints
  • D use of group policy
  • E use of Endpoint Groups
  • F use of Scalable Group Tags
Explanation

Both architectures use VXLAN overlays and VXLAN network identifiers to create logical network segments over an underlay. Both also enforce group-based policy: SD-Access uses TrustSec group-based policy and SGTs, while ACI applies policy between endpoint groups through contracts.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ2

Discovery

Which Cisco product supports SD-Access and is specifically designed to address the new challenges enterprises face?

  • A Nexus 7700 w/ Sup2E and M3 line cards
  • B ISR 4221
  • C Catalyst 9500
  • D ASR 1000-HX
  • E CSRv virtual router
  • F Catalyst 6807-XL w/Sup6T and C6800 10G line cards
Explanation

Cisco Catalyst 9500 Series switches are purpose-built enterprise core and aggregation platforms for emerging security, IoT, mobility, and cloud requirements. They form a foundational building block for Cisco SD-Access.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ3

Design

What is the simplest way to enable SD-Access at all remote sites after the campus SD-Access fabric is already operational?

  • A Treat all sites as one fabric domain and use the traditional physical network as the underlay.
  • B Use a separate fabric domain for each site and use SD-WAN as the underlay.
  • C Use a separate fabric domain for each site and use the traditional physical network as the underlay.
  • D Treat all the sites as one fabric domain and use SD-WAN as the underlay.
Explanation

Cisco SD-Access and SD-WAN integrated-domain deployment extends secure onboarding, end-to-end segmentation, and consistent group-based policy between campus and branch locations. Using SD-WAN as the WAN transport while keeping the sites in one fabric domain avoids the additional management and policy boundaries created by separate fabric domains.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ4

Design

What should you do when pursuing a strategic customer win and the customer wants to evaluate Cisco ISE for more than a few weeks?

  • A Give them some of our flash files that can be played on any browser.
  • B Set them up with an account on a Cisco UCS server that hosts ISE.
  • C Set them up with a dCloud account.
  • D Give them our ISE YouTube videos.
  • E Provide them with a downloadable POV lit.
  • F Point them to our dCloud demo library.
Explanation

Cisco dCloud is a customizable cloud environment intended to support customer demonstrations, labs, pilots, and proof-of-concept activities. Providing a dCloud account enables the customer to access and explore a live Cisco ISE lab environment over an extended evaluation period.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ5

Discovery

Which capability is supported on the Cisco vEdge platform?

  • A single sign-on
  • B IPv6 transport (WAN)
  • C 2-factor authentication
  • D license enforcement
  • E reporting
  • F non-Ethernet interfaces
Explanation

Cisco vEdge supports IPv6 transport on WAN tunnel interfaces in VPN 0. IPv4 and IPv6 addresses can be configured together for dual-stack WAN transport.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!

That's the end of the preview

It's free

100% of the questions are free for all users.
No strings attached.

Sign up freeLog in
Topics covered
DiscoveryDesignDemonstrateDefend
Know a question that should be here? Contribute to this exam
Back home