Cisco 500-220 ECMS Exam Questions Instant Access

Question 1

Which Meraki Dashboard menu section is accessed to enable Sentry enrollment on an SSID?

AWireless > Configure > Access Control

BWireless > Configure > Splash page

CWireless > Configure > Firewall & Traffic Shaping

DWireless > Configure > SSIDs

Answer : A

SM Sentry enrollment can be enabled on any MR network via the Splash page section of the Wireless > Configure > Access control page. https://documentation.meraki.com/MR/MR_Splash_Page/Systems_Manager_Sentry_Enrollment

Question 2

One thousand concurrent users stream video to their laptops. A 30/70 split between 2.4 GHz and 5 GHz is used.

Based on client count, how many APs (rounded to the nearest whole number) are needed?

A26

B28

C30

D32

Answer : B

https://documentation.meraki.com/Architectures_and_Best_Practices/Cisco_Meraki_Best_Practice_Design/Best_Practice_Design_-_MR_Wireless/High_Density_Wi-Fi_Deployments

Question 3

Refer to the exhibit.

Refer to the exhibit. What Is the ratio of internet-bound flows that route via WAN 1 compared with WAN 2?

AAll flows alternate in a 5:1 ratio.

BAll flows alternate in a 2:1 ratio.

CAll flows agrees via WAN 1:1 ratio.

DAll flows egress via WAN1.

Answer : C

https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/MX_Load_Balancing_and_Flow_Preferences#Load_Balancing

Question 4

When an SSID is configured with Sign-On Splash page enabled, which two settings must be configured for unauthenticated clients to have full network access and not be allow listed? (Choose two.)

AController disconnection behavior

BCaptive Portal strength

CSimultaneous logins

DFirewall & traffic shaping

ERADIUS for splash page settings

Answer : A, B

To clarify, when an SSID is configured with Sign-On Splash page enabled, the two settings that must be configured for unauthenticated clients to have full network access and not be allow listed are:

Controller disconnection behavior: This setting determines how the clients are treated when the Meraki cloud controller is unreachable. The options areRestrictedorUnrestricted. The former option blocks all traffic from unauthenticated clients until the controller is reachable again.The latter option allows unauthenticated clients to access the network without signing on until the controller is reachable again1.

Captive Portal strength: This setting determines how often the clients are redirected to the splash page for authentication. The options areBlock all access until sign-on is completeorAllow non-HTTP traffic prior to sign-on. The latter option allows unauthenticated clients to access other protocols such as DNS, DHCP, ICMP, etc., but blocks HTTP and HTTPS traffic until they sign on.This option is recommended for compatibility with devices that do not support web-based authentication1.

Question 5

Refer to the exhibit.

The VPN concentrator is experiencing issues. Which action should be taken to ensure a stable environment?

AAdd a deny any/any firewall rule to the end of the firewall rules.

BRemove the connection from Internet 1.

CPhysically disconnect all LAN ports.

DConfigure the MX appliance to Routed mode on the Addressing & VLANS page.

Answer : C

Before deploying MXs as one-arm VPN concentrators, place them into Passthrough or VPN Concentrator mode on the Addressing and VLANs page. In one-armed VPN concentrator mode, the units in the pair are connected to the network 'only' via their respective 'Internet' ports. Make sure they are NOT connected directly via their LAN ports. Each MX must be within the same IP subnet and able to communicate with each other, as well as with the Meraki dashboard. Only VPN traffic is routed to the MX, and both ingress and egress packets are sent through the same interface.

https://documentation.meraki.com/Architectures_and_Best_Practices/Cisco_Meraki_Best_Practice_Design/Best_Practice_Design_-_MX_Security_and_SD-WAN/Meraki_Auto_VPN_General_Best_Practices

Question 6

Refer to the exhibit.

Which two actions are required to optimize load balancing asymmetrically with a 4:1 ratio between links? (Choose two.)

AChange the primary uplink to 'none'.

BAdd an internet traffic preference that defines the load-balancing ratio as 4:1.

CEnable load balancing.

DSet the speed of the cellular uplink to zero.

EChange the assigned speeds of WAN 1 and WAN 2 so that the ratio is 4:1.

Answer : C, E

To clarify, to optimize load balancing asymmetrically with a 4:1 ratio between links, two actions that are required are:

Enable load balancing: This option allows the MX to use both of its uplinks for load balancing.When load balancing is enabled under Security & SD-WAN > Configure > SD-WAN & Traffic shaping, traffic flows will be distributed between the two uplinks proportional to the WAN 1 and WAN 2 bandwidths specified under Uplink configuration1.

Change the assigned speeds of WAN 1 and WAN 2 so that the ratio is 4:1: The assigned speed of a WAN link is a value that indicates the bandwidth available on that link.By changing the assigned speeds of WAN 1 and WAN 2 so that they reflect the desired load-balancing ratio, the administrator can ensure that the MX uses both links efficiently and proportionally1. For example, if WAN 1 has a bandwidth of 100 Mbps and WAN 2 has a bandwidth of 25 Mbps, then setting their assigned speeds to 100 Mbps and 25 Mbps respectively will achieve a 4:1 load-balancing ratio.

Question 7

Which three verbs of request are available in the Cisco Meraki API? (Choose three.)

ASET

BPUT

CPATCH

DADD

EPOST

FGET

Answer : B, E, F

Verbs in the API follow the usual REST conventions:

GET returns the value of a resource or a list of resources, depending on whether an identifier is specified.

POST adds a new resource

PUT updates a resource

DELETE removes a resource

https://documentation.meraki.com/General_Administration/Other_Topics/Cisco_Meraki_Dashboard_API

Cisco Engineering Cisco Meraki Solutions 500-220 ECMS Exam Questions