Is this exam completely free?

ExamCademy offers a free preview for every exam, covering around 20% of the total questions. Full access to all questions is available for free by signing up for an account. Optional supporters unlock AstroTutor (AI tutor) and advanced study modes.

Can I practice IT certification exams from Microsoft, AWS, or CompTIA?

Yes! ExamCademy supports a wide range of IT certification exams including Microsoft Azure, AWS Cloud Practitioner, and CompTIA A+ and Security+.

How accurate are the mock exams?

Our practice questions are community-created and moderator-reviewed to align with realistic exam objectives, style, and difficulty.

650-472 by Cisco - Page 1 | ExamCademy

Mode Selection

Sort:

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

Question 12

Question 13

Question 14

That's the end of the Preview

Create a free account to unlock all questions for this exam.

Log In / Sign Up

Page 1 of 3 • Questions 1-25 of 66

1 2 3

→

Know a question that should be here? Contribute to this exam

Which two statements represent good use cases for Wake on LAN? (Choose two.)

A WoL can be used to power-up hosts for on-demand PXE booting.
B WoL can be used to power-up hosts for after-hours operating system updates and application patching.
C WoL can be used to power-up hosts to access the IPMI.
D WoL can be used to save electricity by powering down underused servers and desktops.

Which two EAP methods are examples of challenge-response methods? (Choose two.)

A EAP-TLS
B PEAP
C EAP-FAST
D LEAP
E EAP-MD5

On a Cisco Catalyst switch, which default ports will the radius-server host command use for RADIUS authentication and accounting messages?

A TCP - Authentication 1645/Accounting 1646
B TCP - Authentication 1535/Accounting 1536
C TCP - Authentication 1812/Accounting 1813
D UDP - Authentication 1535/Accounting 1536
E UDP - Authentication 1812/Accounting 1813
F UDP - Authentication 1645/Accounting 1646

Which three modules are valid components of Cisco AnyConnect Secure Mobility Client for Windows? (Choose three)

A Network Access Manager
B VPN Module
C Network Authentication Manager
D Telemetry and Profiling Module
E Profiling Module
F Posture Module

Which option is a good example of a non-supplicant host?

A Laptop running Microsoft Windows 7
B IP printer
C desktop PC running Ubuntu Linux
D IP camera
E Apple Macintosh running Mac OS X

Which three RADIUS attributes art required to dynamically assign a VIAN? (Choose three)

A Attribute 65 (Tunnel-Medium-Type)
B Attribute 26 (Vendor-Specific)
C Attribute 64 (Tunnel-Type)
D Attribute 8 (Framed-IP-Address)
E Attribute 5 (NASPort)
F Attribute 81 (Tunne1-Private-Group-ID)

Consider the example of an end user plugging an unmanaged third-party switch into a port in a conference room. If the wiring closet switch port requires 802.1X authentication (and the authentication host mode is set to the default), what would be the result of multiple 802.1X clients attempting to access the network from the unmanaged switch?

A After the first supplicant authenticates, other hosts connected to the unmanaged switch will be blocked from the network.
B After 802.1X times out three times, all hosts on the unmanaged switch will have access to the network.
C Up to eight hosts and one IP phone can be authenticated.
D After the first supplicant authenticates, all other hosts connected to the unmanaged switch have access to the network.

Which two Cisco Catalyst switch command fragments enable WebAuth support on an interface? (Choose two.)

A 3k-access(config-if)# authentication fallback
B 3k-access(config-if)# authentication dotlx webauth
C 3k-access(config-if)S authentication webauth
D 3k-access(config-if)# dotlx priority webauth
E 3k-access(config-if)- ip admission
F 3k-access(config-if)ff dotlx fallback

Which two statements are true with regard to the inner and outer phases of an EAP method? (Choose two.)

A PEAP can include an optional phase 0 for PAC provisioning.
B All EAP methods include an inner and outer phase.
C The outer phase is used for authentication.
D The inner phase is used for authentication.
E The outer phase is used for securing the communication channel.
F The inner phase is used for securing the communication channel.

Which Cisco ISE persona must run on dedicated hardware?

A Inline Posture
B Administrative
C Centralized
D Monitoring
E Distributed Policy
F Policy Services

Which statement accurately describes why it is a best practice to pre-populate the MAC addresses of non-802.1X-capable Cisco IP phones into an endpoint database?

A If the MAC address is not found in an endpoint database, any PC tethered to the Cisco IP phone will be allowed to access the network unauthenticated.
B If the MAC address is not found in an endpoint database, it will take 3 MAB timeouts (90 seconds) before the MAC address of the Cisco IP phone is automatically entered in the database. No calls can be made in the interim.
C If the MAC address is not found in an endpoint database, authentication will fail for the Cisco IP phone and the tethered PC port on the phone will be set to err- disable. The PC will not be able to communicate on the network.
D If the MAC address is not found in an endpoint database, authentication will fail for the Cisco IP phone and the Catalyst switch port will be set to err-disable.

Which two Cisco security products act as 802.1X authenticate servers? (Choose two)

A Cisco Security Agent
B CiscoWorks LAN Management System
C Cisco Information Security Engine
D Cisco Security Manager
E Cisco Secure Access Control System for Windows
F CiscoWorks LAN Management Solution

Which two EAP methods require server-side digital certificates? (Choose two)

A EAP-FAST
B PEAP
C LEAP
D EAP-MD5
E EAP-TLS

Which two statements are true regarding load balancing Cisco ISE Policy Services nodes with a Cisco Application Control Engine? (Choose two.)

A Each Cisco ISE Policy Services node must be configured with an identical unicast IP address that is used to receive policy requests from the load balancer.
B Each Cisco ISE Policy Services node must be configured with a unique (and non-reserved) multicast IP address that is used as a heartbeat channel.
C Each Cisco ISE Policy Services node must be configured with an identical (and non-reserved) multicast IP address that is used as a heartbeat channel.
D The virtual IP address of the ACE must be on the same IP subnet as the unicast subnet of the Cisco ISE Policy Services node.
E The virtual IP address of the ACE must not be on the same IP subnet as the unicast subnet of the Cisco ISE Policy Services node.
F Each Cisco ISE Policy Services node must be configured with a unique unicast IP address that is used to receive policy requests from the load balancer.