Free Cisco 650-472 Exam Dumps Questions & Answers

What is the purpose of the restricted VLAN (authentication failed VLAN) on a Cisco Catalyst switch?

• A.It provides configurable guest access to devices that have a supplicant when the authenticator is down or unreachable.
• B.It provides configurable guest access to nonsupplicant devices that have local credentials.
• C.It provides configurable guest access to devices that have a supplicant when the authentication server is down or unreachable.
• D.It provides configurable guest access to nonsupplicant devices that lack local credentials.
• E.It provides configurable guest access to devices that have a supplicant but lack local credentials.

What is the purpose of the guest VLAN on a Cisco Catalyst switch?

• A.It provides configurable guest access to non-supplicant devices that lack local credentials.
• B.It provides configurable guest access to devices that have a supplicant when the authenticator is down or unreachable.
• C.It provides configurable guest access to devices that have a supplicant when the authentication server is down or unreachable.
• D.It provides configurable guest access to non-supplicant devices that have local credentials.
• E.It provides configurable guest access to devices that have a supplicant but lack local credentials.

What is the purpose of the fallback profile command?

• A.This command configures a WebAuth profile to use in the event that MAB authentication fails.
• B.This command configures the Restricted VLAN policy on an interface.
• C.This command configures the Critical VLAN policy on an interface.
• D.This command configures the Guest VLAN policy on an interface.
• E.This command configures a WebAuth profile to use in the event that 802.1X authentication fails.
• F.This command globally enables WebAuth authentication.

Which two PEAP requirements must be met to authenticate the TLS session? (Choose two.)

• A.The supplicant requires only a CA certificate.
• B.The authenticator requires only an identity certificate.
• C.Cisco ISE requires an identity certificate and a CA certificate.
• D.Cisco ISE requires only an identity certificate.
• E.The supplicant requires only an identity certificate.
• F.The authenticator requires an identity certificate and a CA certificate.
• G.The supplicant requires an identity certificate and a CA certificate.

Which two of these Cisco products can act as 802.1X authenticates? (Choose two.)

• A.Cisco Wireless LAN Control
• B.Cisco 5510 Adaptive Security Appliance
• C.Cisco Catalyst 37SO Series Switch
• D.Cisco 4255 Intrusion Prevention System
• E.Cisco 4255 Intrusion Prevention Sensor
• F.Cisco 3640 Rooter
• G.Cisco Secure Access Control Solution for Windows
• H.Cisco Secure Access Control Server for Widows