Cisco Introduction to 802.1X Operations for Cisco Security Professionals Exam (S802DT1X) - 650-472 Free Exam Questions

A. authentication server

B. Cisco 4200 Series IPS

C. external Authentication server

D. Cisco AnyConnect Secure Mobility Client

E. authenticator

A. Persona refers to collections of services running on a Cisco ISE node.

B. A Cisco ISE node can be configured as a primary or backup persona.

C. A Cisco ISE node can be configured as a wired or wireless persona.

D. Persona refers to the collection of EAP methods available to a supplicant.

E. Persona relates to the collection of 802.1X services configured on a Cisco Catalyst switch.

F. A Cisco ISE node can be configured as a standalone or distributed persona.

A. Each Cisco ISE Policy Services node must be configured with an identical (and non-reserved) multicast IP address that is used as a heartbeat channel.

B. Each Cisco ISE Policy Services node must be configured with a unique (and non-reserved) multicast IP address that is used as a heartbeat channel.

C. Each Cisco ISE Policy Services node must be configured with an identical unicast IP address that is used to receive policy requests from the load balancer.

D. The virtual IP address of the ACE must be on the same IP subnet as the unicast subnet of the Cisco ISE Policy Services node.

E. The virtual IP address of the ACE must not be on the same IP subnet as the unicast subnet of the Cisco ISE Policy Services node.

F. Each Cisco ISE Policy Services node must be configured with a unique unicast IP address that is used to receive policy requests from the load balancer.

A. EAP messages are sent to the RADIUS server over UDP port 1812.

B. EAP messages are sent encapsulated in RADIUS protocol over UDP port 1646.

C. EAP messages are sent encapsulated in RADIUS protocol over UDP port 1812.

D. EAP messages are sent encapsulated in RADIUS protocol over UDP port 1645.

E. EAP messages are sent to the RADIUS server over UDP port 1645.

F. EAP messages are sent to the RADIUS server over UDP port 1646.

A. The 3k-access(config-if)# authentication violation replace command can be used to allow a new host to authenticate to an IP phone that is not manufactured by Cisco.

B. The 3k-access(config)# authentication mac-move permit command can be used to allow a host to disconnect from an IP phone that is not manufactured by Cisco and authenticate on a different port on the same switch.

C. Cisco IP phones send a RADIUS packet with Cisco-av-pair UCPort= Disco to signal to the Cisco Catalyst switch that the tethered PC has disconnected.

D. The 3k-access(config-if)# authentication violation replace command can be used to allow a host to disconnect from an IP phone that is not manufactured by Cisco and authenticate on a different port on the same switch.

E. The 3k-access(config)# authentication mac-move permit command can be used to allow a new host to authenticate to an IP phone that is not manufactured by Cisco Cisco IP phones use Cisco Discovery Protocol to signal to the Cisco Catalyst switch that the tethered PC has disconnected.

A. IP camera

B. desktop PC running Ubuntu Linux

C. Apple Macintosh running Mac OS X

D. Laptop running Microsoft Windows 7

E. IP printer

A. UDP 3799

B. UDP 1812

C. UDP 1700

D. UDP 1645