500-470 Exam Dumps - Cisco Enterprise Networks SDA, SDWAN and ISE Exam for System Engineers

According to the Cisco DNA Center Compatibility Matrix1, the current DNA-C 1.1 release supports the following wireless product families:

• WLC 8540: This is a high-performance wireless controller that can support up to 6000 access points and 64,000 clients. It is designed for large-scale wireless deployments and offers advanced features such as application visibility and control, flexible radio assignment, and software-defined access2.
• AP 3800: This is a high-performance access point that can support up to 5.2 Gbps data rates and 4x4 MIMO with four spatial streams. It is designed for high-density environments and offers features such as flexible radio assignment, CleanAir, ClientLink, and Smart Antenna Connector3.
• WLC 3504: This is a compact wireless controller that can support up to 150 access points and 3000 clients. It is designed for small to medium-sized wireless deployments and offers features such as application visibility and control, software-defined access, and TrustSec4.

The other wireless product families, such as AP 1260 and WLC 5508, are not supported in the current DNA-C 1.1 release.

References:

• : Cisco DNA Center Compatibility Matrix
• : Cisco 8540 Wireless Controller Data Sheet - Cisco
• : Cisco Aironet 3800 Series Access Points Data Sheet - Cisco
• : Cisco 3504 Wireless Controller Data Sheet - Cisco

According to the Cisco Enterprise Networks SDA, SDWAN and ISE Exam for System Engineers document1, the three Cisco recommendations on “How to Win” are:

• Explain support for 3rd party network devices: Cisco ISE can integrate with more than 60 third-party solutions that span across security and network portfolios. This enablesCisco ISE to leverage the information and capabilities of these solutions to enhance the identity and access management, network visibility and segmentation, threat detection and response, and policy enforcement of the network. By explaining this support, the customer can see the value and flexibility of Cisco ISE in their existing or heterogeneous network environment2.
• Explain architectural advantage of holistic Cisco solution: Cisco ISE is part of the Cisco Digital Network Architecture (DNA), which is a comprehensive and open platform that provides end-to-end network automation, assurance, security, and analytics. By explaining the architectural advantage of the holistic Cisco solution, the customer can see how Cisco ISE works seamlessly with other Cisco DNA components, such as Cisco DNA Center, Cisco SD-Access, Cisco SD-WAN, Cisco TrustSec, and Cisco Stealthwatch, to deliver a unified and consistent network experience across wired, wireless, and cloud domains3.
• Talk about Cisco’s focus on Security and integration with StealthWatch, Sourcefire, WSA, vulnerability scanner to make smarter policy decisions: Cisco ISE is a core component of the Cisco security portfolio, which provides comprehensive and integrated security solutions for the network. By talking about Cisco’s focus on security and integration with other security products, such as StealthWatch, Sourcefire, WSA, and vulnerability scanner, the customer can see how Cisco ISE can provide enhanced visibility, threat detection, and policy enforcement for the network. For example, Cisco ISE can use the data from StealthWatch to identify anomalous or malicious behavior of the endpoints and apply appropriate network access policies based on the threat level4.

The other options, show case Cisco portfolio or ISE feature set during PoC and demonstrate complex policy flows, rather show case Wizards and enhanced context visibility, are not Cisco recommendations on “How to Win”. Showing case Cisco portfolio or ISE feature set during PoC is a general best practice, but not a specific recommendation for winning the customer. Demonstrating complex policy flows, rather than showing case Wizards and enhanced context visibility, is a counterproductive approach, as it can confuse or overwhelm the customer with technical details, rather than highlighting the benefits and simplicity of Cisco ISE. References := : 2: Cisco Identity Services Engine Administrator Guide, Release 2.7 - ISE Security Ecosystem Integration Guides [Cisco Identity Services Engine] - Cisco2, 1: Cisco Enterprise Networks SDA, SDWAN and ISE Exam for System Engineers1, 3: Cisco Identity Services Engine - Cisco3, 4: Cisco Identity Services Engine Administrator Guide, Release 2.7 - Stealthwatch Integration [Cisco Identity Services Engine] - Cisco4

https://www.arista.com/assets/data/pdf/Whitepapers/Arista_Networks_VXLAN_White_Paper.pdf

A VxLAN header adds 50 bytes to an original Ethernet frame. This is because a VxLAN header consists of the following components:

• 8-byte outer UDP header for VxLAN: The default VxLAN destination UDP port number is 47891
• 20-byte outer IP header: Valid addresses of VTEPs or VxLAN multicast groups on the transport network. Devices in the transport network forward VxLAN packets based on the outer IP header1
• 8-byte VxLAN header: VxLAN information for the frame. It includes a 24-bit VxLAN Network Identifier (VNI) that identifies the VxLAN of the frame, and an 8-bit flags field that indicates the validity of the VNI1
• 14-byte inner Ethernet header: The original Ethernet header of the encapsulated frame. It includes the source and destination MAC addresses, the EtherType, and optionally a 4-byte VLAN tag2

The total size of these components is 8 + 20 + 8 + 14 = 50 bytes. Therefore, a VxLAN header adds 50 bytes to an original Ethernet frame.

References :=

• VXLAN packet format - Aruba
• MTU Considerations for VXLAN | Matt Oswalt

The 4D Training is a methodology that helps Systems Engineers and Field Engineers to understand and sell Cisco Enterprise Networks solutions, such as SD-Access, SD-WAN, and ISE. The 4D stands for Discovery, Design, Demonstrate, and Defend12. These are the four phases of the sales cycle that the training covers, with each phase having specific objectives, activities, and outcomes.

• Discovery: This phase involves identifying the customer’s needs, challenges, goals, and opportunities, as well as the current state of their network. The objective is to establish a trusted relationship with the customer and uncover their pain points and requirements. The activities include conducting interviews, surveys, assessments, and audits. The outcome is a clear understanding of the customer’s business and technical drivers, as well as their readiness and willingness to adopt Cisco solutions.
• Design: This phase involves creating a high-level solution architecture that meets the customer’s needs and aligns with their vision. The objective is to demonstrate the value proposition and benefits of Cisco solutions, as well as the differentiation from the competition. The activities include developing use cases, scenarios, diagrams, and presentations. The outcome is a compelling and customized solution design that addresses the customer’s challenges and opportunities.
• Demonstrate: This phase involves showing the capabilities and features of Cisco solutions in action, using live or simulated environments. The objective is to validate the solution design and showcase the advantages and benefits of Cisco solutions, as well as the ease of deployment and operation. The activities include conducting demos, proofs of concept, pilots, and trials. The outcome is a positive customer experience and feedback, as well as a confirmation of the solution fit and feasibility.
• Defend: This phase involves addressing the customer’s objections, concerns, and questions, as well as overcoming any barriers or risks that may prevent the deal closure. The objective is to reinforce the value proposition and benefits of Cisco solutions, as well as the trust and credibility of Cisco as a partner. The activities include providing references, testimonials, case studies, and best practices. The outcome is a successful deal closure and customer satisfaction.

Therefore, the definition that is not part of the 4D Training is Deploy, which is not one of the four phases of the sales cycle that the training covers.

References:

 1: [500-470 ENSDENG - Cisco] : 2: [500-490 ENDESIGN - Cisco]

https://www.ciscolive.com/c/dam/r/ciscolive/latam/docs/2017/pdf/BRKEWN-2032.pdf

https://www.cisco.com/en/US/technologies/tk648/tk365/tk207/technologies_white_paper0900 aecd80243fe7.html

 The default interval for BFD packets is 1 second. BFD uses Hello packets to detect the liveness and faults on a connection. BFD Hello Interval packet is sent at the default interval of 1000 milliseconds on all connections1. This command can be used to change the hello interval for a transport color. The interval for transmitting and receiving BFD packets can also be configured on the interface level or the BFD session level, depending on the device and the protocol234. The BFD detection time is calculated as the product of the local detection multiplier and the agreed remote transmission interval. The lower the BFD detection time, the faster the BFD session can detect a fault. However, a lower BFD detection time also consumes more system resources and bandwidth. Therefore, the BFD detection time should be configured according to the network situation and performance requirements. References:

• : Bidirectional Forwarding Detection - Cisco
• : Configuring the BFD Detection Time - CloudEngine 16800 … - Huawei
• : Cisco IOS XE Catalyst SD-WAN Qualified Command Reference
• : bfd min-echo-receive-interval - Aruba

The current DNA-C 1.1 release supports the following wireless product families:

• WLC 3504: This is a wireless LAN controller that provides centralized control, management, and troubleshooting for small to medium-sized enterprises and branch offices. It supports up to 150 access points and 3,000 clients, and offers high availability, scalability, and security features. It is compatible with Cisco DNA Center 1.1 and later releases1.
• WLC 8540: This is a wireless LAN controller that provides centralized control, management, and troubleshooting for large enterprises and service providers. It supports up to 6,000 access points and 64,000 clients, and offers high performance, reliability, and flexibility. It is compatible with Cisco DNA Center 1.1 and later releases2.
• AP 3800: This is an access point that delivers high-performance wireless connectivity for indoor and outdoor environments. It supports 802.11ac Wave 2 technology, multiuser multiple-input multiple-output (MU-MIMO), flexible radio assignment, and modular design. It is compatible with Cisco DNA Center 1.1 and later releases3.

References:

 1: [Cisco Wireless LAN Controller 3504 Data Sheet - Cisco] : 2: [Cisco 8540 Wireless Controller Data Sheet - Cisco] : 3: [Cisco Aironet 3800 Series Access Points Data Sheet - Cisco]