Cisco 500-220 ECMS Exam Questions Instant Access

Question 1

One thousand concurrent users stream video to their laptops. A 30/70 split between 2.4 GHz and 5 GHz is used.

Based on client count, how many APs (rounded to the nearest whole number) are needed?

A26

B28

C30

D32

Answer : B

https://documentation.meraki.com/Architectures_and_Best_Practices/Cisco_Meraki_Best_Practice_Design/Best_Practice_Design_-_MR_Wireless/High_Density_Wi-Fi_Deployments

Question 2

Refer to the exhibit.

The VPN concentrator is experiencing issues. Which action should be taken to ensure a stable environment?

AAdd a deny any/any firewall rule to the end of the firewall rules.

BRemove the connection from Internet 1.

CPhysically disconnect all LAN ports.

DConfigure the MX appliance to Routed mode on the Addressing & VLANS page.

Answer : C

Before deploying MXs as one-arm VPN concentrators, place them into Passthrough or VPN Concentrator mode on the Addressing and VLANs page. In one-armed VPN concentrator mode, the units in the pair are connected to the network 'only' via their respective 'Internet' ports. Make sure they are NOT connected directly via their LAN ports. Each MX must be within the same IP subnet and able to communicate with each other, as well as with the Meraki dashboard. Only VPN traffic is routed to the MX, and both ingress and egress packets are sent through the same interface.

https://documentation.meraki.com/Architectures_and_Best_Practices/Cisco_Meraki_Best_Practice_Design/Best_Practice_Design_-_MX_Security_and_SD-WAN/Meraki_Auto_VPN_General_Best_Practices

Question 3

Refer to the exhibit.

Which two actions are required to optimize load balancing asymmetrically with a 4:1 ratio between links? (Choose two.)

AChange the primary uplink to 'none'.

BAdd an internet traffic preference that defines the load-balancing ratio as 4:1.

CEnable load balancing.

DSet the speed of the cellular uplink to zero.

EChange the assigned speeds of WAN 1 and WAN 2 so that the ratio is 4:1.

Answer : C, E

To clarify, to optimize load balancing asymmetrically with a 4:1 ratio between links, two actions that are required are:

Enable load balancing: This option allows the MX to use both of its uplinks for load balancing.When load balancing is enabled under Security & SD-WAN > Configure > SD-WAN & Traffic shaping, traffic flows will be distributed between the two uplinks proportional to the WAN 1 and WAN 2 bandwidths specified under Uplink configuration1.

Change the assigned speeds of WAN 1 and WAN 2 so that the ratio is 4:1: The assigned speed of a WAN link is a value that indicates the bandwidth available on that link.By changing the assigned speeds of WAN 1 and WAN 2 so that they reflect the desired load-balancing ratio, the administrator can ensure that the MX uses both links efficiently and proportionally1. For example, if WAN 1 has a bandwidth of 100 Mbps and WAN 2 has a bandwidth of 25 Mbps, then setting their assigned speeds to 100 Mbps and 25 Mbps respectively will achieve a 4:1 load-balancing ratio.

Question 4

When an SSID is configured with Sign-On Splash page enabled, which two settings must be configured for unauthenticated clients to have full network access and not be allow listed? (Choose two.)

AController disconnection behavior

BCaptive Portal strength

CSimultaneous logins

DFirewall & traffic shaping

ERADIUS for splash page settings

Answer : A, B

To clarify, when an SSID is configured with Sign-On Splash page enabled, the two settings that must be configured for unauthenticated clients to have full network access and not be allow listed are:

Controller disconnection behavior: This setting determines how the clients are treated when the Meraki cloud controller is unreachable. The options areRestrictedorUnrestricted. The former option blocks all traffic from unauthenticated clients until the controller is reachable again.The latter option allows unauthenticated clients to access the network without signing on until the controller is reachable again1.

Captive Portal strength: This setting determines how often the clients are redirected to the splash page for authentication. The options areBlock all access until sign-on is completeorAllow non-HTTP traffic prior to sign-on. The latter option allows unauthenticated clients to access other protocols such as DNS, DHCP, ICMP, etc., but blocks HTTP and HTTPS traffic until they sign on.This option is recommended for compatibility with devices that do not support web-based authentication1.

Question 5

Refer to the exhibit.

Which outcome occurs when logging is set to Enabled?

AOutbound flows are sent to a configured syslog server if a syslog sender is configured for flows.

BThe hits counter within this section is now enabled.

CThis firewall rule is now enabled.

DInbound flows are sent to a configured syslog server if a syslog server configured for flows.

Answer : A

'Inbound and outbound flows will generate a syslog message showing the source and destination along with port numbers and the firewall rule that they matched. For inbound rules, 1=deny and 0=allow.' https://documentation.meraki.com/General_Administration/Monitoring_and_Reporting/Syslog_Server_Overview_and_Configuration

Question 6

Which information is used to calculate whether a WAN link has high usage?

Adata under Security & SD WAN > Appliance Status > Uplink > Live Data

Btotal historical throughput of an uplink

Ctotal number of devices that are actively passing traffic

Dvalue under Security & SD WAN > SD WAN & Traffic Shaping > Uplink Configuration

Answer : D

Which information is used to calculate whether a WAN link has high usage not how to view (To accurately identify high utilization, users must set the ISP-provided bandwidth limits under Security and SD-WAN > SD-WAN and Traffic Shaping > Uplink Configuration for each uplink. If the bandwidth usage is higher than 80% of the defined limit, it will mark that uplink as High Usage.) https://documentation.meraki.com/MI/MI_WAN_Health#:~:text=To%20accurately%20identify%20high%20utilization,that%20uplink%20as%20High%20Usage.

Question 7

Refer to the exhibit.

What are the Loss and Average Latency statistics based on?

Aresponses that the MX appliance receives on the connectivity-testing hostnames on the Insight > Web App Health page

Bresponses that the MX appliance receives on the connectivity-testing IP addresses on the Security & SD- WAN > Firewall page

Cresponses that the MX appliance receives on the connectivity-testing IP address that is configured on the Security & SD-WAN > SD-WAN & Traffic Shaping page

Dresponses that the MX appliance receives on the connectivity-testing IP addresses on the Help > Firewall info page

Answer : C

Quote from referred documentation-Link: Loss and latency will be determined over the configured IP address under Security and SD-WAN > SD-WAN and Traffic Shaping > Uplink Statistics. If no IP is configured, these values will be measured against 8.8.8.8 by default. On the WAN Health page, all the configured IP address statistics can be reviewed by changing the destination under the 'Ping Destination' column.

https://documentation.meraki.com/MI/MI_WAN_Health#:~:text=Current%20loss%20and%20latency%20statistics,address%20is%20set%20to%208.8.

Cisco Engineering Cisco Meraki Solutions 500-220 ECMS Exam Questions