FC Flashcards

1
Q

Which information is used to calculate whether a WAN link has high usage?
A. value under Security & SD WAN > SD WAN & Traffic Shaping > Uplink Configuration
B. total number of devices that are actively passing traffic
C. total historical throughput of an uplink
D. data under Security & SD WAN > Appliance Status > Uplink > Live Data

A

Answer: A

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

A customer wants to use Microsoft Azure to host corporate application servers.
Which feature does the customer get by using a vMX appliance rather than connecting directly to
Azure by VPN?

A. SD-WAN
B. next-generation firewall
C. malware protection
D. intrusion prevention

A

Correct Answer: B

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

For which two reasons can an organization become “Out of License”? (Choose two.)

A. MR licenses that do not match the MR models in the organization

B. expired device license

C. more hardware devices than device licenses

D. licenses that do not match the serial numbers in the organization

E. licenses that are in the wrong network

A

Correct Answer: B,C

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Refer to the exhibit.

Which outcome occurs when logging is set to Enabled?

A. This firewall rule is now enabled.

B. The hits counter within this section is now enabled.

C. Outbound flows are sent to a configured syslog server if a syslog sender is configured for flows.

D. Inbound flows are sent to a configured syslog server if a syslog server configured for flows.

A

Correct Answer: D

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Which API endpoint clones a new Organization?

A. POST /organizations/{organizationId}/clone

B. PUT /organizations/{organizationId}/clone

C. POST /organizations/{organizationId}/new

D. POST /organizations/clone/{organizationId}

A

Correct Answer: C

Or is it A?

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

When an SSID is configured with Sign-On Splash page enabled, which two settings must be configured for unauthenticated clients to have full network access and not be allow listed? (Choose two.)

A. RADIUS for splash page settings

B. Firewall & traffic shaping

C. Simultaneous logins

D. Captive Portal strength

E. Controller disconnection behavior

A

Correct Answer: D,E

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Which design recommendation should be considered?

A. A 25-percent throughput loss occurs for every hop. Cisco Meraki best practice recommends a 1-hop maximum.

B. A 50-percent throughput loss occurs for every hop. Cisco Meraki best practice recommends a 2-hop maximum.

C. A 50-percent throughput loss occurs for every hop. Cisco Meraki best practice recommends a 1-hop maximum.

D. A 25-percent throughput loss occurs for every hop. Cisco Meraki best practice recommends a 2-hop maximum.

A

Correct Answer: A

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

For an AP that displays this alert, which network access control method must be in use?

A. preshared key

B. MAC-based access control with RADIUS server

C. WPA2-enterprise with my RADIUS server

D. splash page with my RADIUS server

A

Correct Answer: A?

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Which two features and functions are supported when using an MX appliance in Passthrough mode? (Choose two.)

A. intrusion prevention

B. site-to-site VPN

C. secondary uplinks

D. DHCP

E. high availability

A

Correct Answer: A,B

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is the minimal Cisco Meraki Insight licensing requirement?

A. A single Meraki Insight license must be configured on network A, and a single license must be configured on network B, to gain Web App Health visibility on network B.

B. A single Meraki Insight license must be configured on network A to gain Web App Health visibility on network B.

C. Two Meraki Insight licenses must be configured on network A to gain Web App Health visibility on network B.

D. A single Meraki Insight license must be configured on network B to gain Web App Health visibility on network B.

E. Two Meraki Insight licenses must be configured on network A and a single license must be configured on network B, to gain Web App Health visibility on network B.

A

Correct Answer: E

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is the best practice Systems Manager enrollment method when deploying corporate-owned iOS devices?

A. manual

B. Apple Configurator

C. DEP

D. Sentry enrollment

A

Correct Answer: B

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Which requirement is needed to implement Fast Lane on Cisco Meraki APs?

A. wireless profile installed on an Apple iOS device

B. wireless profile installed on a Cisco iOS access point

C. adaptive 802.11r disabled

D. traffic shaping rule tagging traffic with a DSCP value of 46 to Apple.com

A

Correct Answer: A

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Which IDS/IPS mode is the MX Security Appliance configured for?

A. quarantine

B. blocking

C. detection

D. prevention

A

Correct Answer: D

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Assuming this MX has established a full tunnel with its VPN peer, how will the MX route the WebEx traffic?

A. WebEx traffic will prefer WAN 2 as long as it meets the thresholds in the “Conf” performance class.

B. WebEx traffic will be load-balanced between both active WAN links.

C. WebEx traffic will prefer WAN 1 as it is the primary uplink.

D. WebEx traffic will prefer WAN 2 as long as it is up.

A

Correct Answer: C

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What are the Loss and Average Latency statistics based on?

A. responses that the MX appliance receives on the connectivity-testing IP addresses on the Help > Firewall info page

B. responses that the MX appliance receives on the connectivity-testing hostnames on the Insight > Web App Health page

C. responses that the MX appliance receives on the connectivity-testing IP addresses on the Security & SD- WAN > Firewall page

D. responses that the MX appliance receives on the connectivity-testing IP address that is configured on the Security & SD-WAN > SD-WAN & Traffic Shaping page

A

Correct Answer: C

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

During a Meraki AP deployment, the default SSID that the exhibit shows is broadcast. What causes this behavior?

A. An AP does not have a wired connection to the network.

B. An AP cannot connect to the default gateway.

C. An AP has never connected to the Meraki Cloud Controller.

D. An AP has Site Survey mode enabled.

A

Correct Answer: C

17
Q

What is a feature of distributed Layer 3 roaming?

A. An MX Security Appliance is not required as a concentrator.

B. An MX Security Appliance is required as a concentrator.

C. All wireless client traffic can be split-tunneled.

D. All wireless client traffic is tunneled.

A

Correct Answer: A

18
Q

Which type of authentication protocol is used when using OSPF on an MX appliance?

A. MD5

B. certificate

C. plaintext

D. SHA-1

A

Correct Answer: A

19
Q

Which order is accurate for a firmware upgrade on MX appliances in a high-availability configuration?

A. starts on both MX appliances at the same time and then reboots both appliances after traffic on the primary MX appliance ceases

B. starts on the primary MX appliance and then occurs on the secondary MX appliance

C. starts on the secondary MX appliance and then occurs on the primary MX appliance

D. starts on both MX appliances at the same time and then immediately reboots both appliances

A

Correct Answer: B

20
Q

What are two organization permission types? (Choose two.)

A. Full

B. Read-only

C. Monitor-only

D. Write

E. Write-only

A

Correct Answer: A,B