A school has two Meraki MS switches stacked in the wiring closet. The stack connects to the rest of the network via two 10 GbE uplinks, one from each member switch, to the same upstream switch. The network admin notices that only one uplink is actively forwarding traffic. What is the most likely reason for this behavior?

The upstream switch is not configured for DHCP snooping, so it drops the second uplink.

The two uplinks are not configured as a port channel, so spanning tree blocks one to prevent a loop.

The second uplink is in a failed state because the SFP+ module is unsupported.

The stack is not using VRRP, so only the primary member's uplink is active.

In a NAC solution, what does 'posture assessment' typically check?

The device's compliance with security policies, such as antivirus updates and OS patches

A financial firm has a Meraki network and is concerned about a rogue DHCP server being connected to an access port. The firm also wants to prevent ARP spoofing attacks. The administrator has enabled DHCP snooping on all VLANs. What additional configuration is required to fully mitigate ARP spoofing?

Enable dynamic ARP inspection (DAI) on all VLANs where DHCP snooping is enabled.

Enable spanning tree protocol (STP) on all ports.

Enable port security with a maximum MAC address limit.

Configure an MX firewall rule to block ARP traffic.

A company's IT team suspects that a user on the LAN is intercepting traffic between other devices by sending forged ARP replies. Which Layer 2 security feature should be enabled on the Meraki switches to detect and prevent this behavior?

Port security with MAC limiting

What is the role of intrusion prevention settings on an MX appliance?

To encrypt traffic between the MX and the internet

To block known malicious traffic patterns and vulnerabilities

To prioritize traffic for real-time applications

To provide a backup internet connection

CiscoMeraki Solutions Specialist (ECMS)

Domain 2Objective 5

2.5 Design Enterprise Network Services 500-220 Practice Questions (Page 7)

Part of the Design domain, which accounts for 30% of the 500-220 exam. Cisco does not publish an official question count, but from its 90-minute exam (~35–60 total, ~11–18 in this domain), expect 2–3 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

10concepts

30%of the exam

Questions 31–35

31application · medium
A school has two Meraki MS switches stacked in the wiring closet. The stack connects to the rest of the network via two 10 GbE uplinks, one from each member switch, to the same upstream switch. The network admin notices that only one uplink is actively forwarding traffic. What is the most likely reason for this behavior?
Select an answer first
32foundation · easy
In a NAC solution, what does 'posture assessment' typically check?
Select an answer first
33expert · medium
A financial firm has a Meraki network and is concerned about a rogue DHCP server being connected to an access port. The firm also wants to prevent ARP spoofing attacks. The administrator has enabled DHCP snooping on all VLANs. What additional configuration is required to fully mitigate ARP spoofing?
Select an answer first
34application · medium
A company's IT team suspects that a user on the LAN is intercepting traffic between other devices by sending forged ARP replies. Which Layer 2 security feature should be enabled on the Meraki switches to detect and prevent this behavior?
Select an answer first
35foundation · easy
What is the role of intrusion prevention settings on an MX appliance?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 500-220

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “500-220” is a trademark of its owner, used for identification only.

2.5 Design Enterprise Network Services 500-220 Practice Questions (Page 7)

Questions 31–35

In a NAC solution, what does 'posture assessment' typically check?

A company's IT team suspects that a user on the LAN is intercepting traffic between other devices by sending forged ARP replies. Which Layer 2 security feature should be enabled on the Meraki switches to detect and prevent this behavior?

What is the role of intrusion prevention settings on an MX appliance?

Keep studying — Design