2.5 Design Enterprise Network Services 500-220 Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A university wants to ensure that only devices that are enrolled in their device management system can access the campus Wi-Fi network. Guests should be able to access the internet but not internal resources. Which NAC approach should the administrator implement?

   • ASet the SSID to WPA2-PSK with a shared password.
   • BConfigure a captive portal that requires a username and password.
   • CUse 802.1X with a RADIUS server that checks device compliance before granting access.
   • DEnable MAC filtering on the SSID to allow only known devices.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A coffee shop provides free Wi-Fi to customers. The owner wants to prevent customers from accessing peer-to-peer file-sharing services while ensuring that the shop's point-of-sale (POS) system, which uses a separate SSID, is never affected. What should the administrator configure on the Meraki MR?

   • AA firewall rule on the guest SSID that blocks peer-to-peer traffic.
   • BAn MX firewall rule that blocks peer-to-peer for all VLANs.
   • CA group policy that limits guest bandwidth to 1 Mbps.
   • DA traffic shaping rule on the POS SSID that prioritizes POS traffic.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A school district is deploying VoIP phones and wants to ensure that voice traffic is not delayed during peak usage. The phones are connected to Meraki MS switches, and the network also carries data traffic. Which QoS configuration should be applied on the switch ports connected to the phones?

   • AEnable port security to limit the number of devices.
   • BSet the port to untrusted and re-mark all traffic to best effort.
   • CConfigure a traffic shaping rule on the switch to limit voice bandwidth.
   • DTrust the DSCP markings from the phones.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Why is QoS necessary for voice and video traffic on a converged network?

   • ATo increase the bandwidth available for all applications
   • BTo replace the need for separate VLANs for voice and data
   • CTo ensure real-time traffic gets priority over less time-sensitive data
   • DTo encrypt voice and video streams to protect privacy
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   What is the purpose of an MX firewall rule?

   • ATo encrypt traffic between sites
   • BTo prioritize voice traffic over data traffic
   • CTo allow or deny traffic based on source, destination, and port
   • DTo assign IP addresses to devices on the LAN
   Reveal Solution Discussion Select an answer first