2026 Actual Cisco 500-220 Dumps, Updated Exam Questions for Guaranteed Pass

500-220 free sample questions and answers

Cisco 500-220 practice quiz with correct answers for search indexing.

1. Question 1

   When an SSID is configured with Sign-On Splash page enabled, which two settings must be configured for unauthenticated clients to have full network access and not be allow listed? (Choose two.)

   AController disconnection behavior
   

   BCaptive Portal strength
   

   CSimultaneous logins
   

   DFirewall & traffic shaping
   

   ERADIUS for splash page settings
   

   Correct answer: A, B

   To clarify, when an SSID is configured with Sign-On Splash page enabled, the two settings that must be configured for unauthenticated clients to have full network access and not be allow listed are:

   Controller disconnection behavior: This setting determines how the clients are treated when the Meraki cloud controller is unreachable. The options areRestrictedorUnrestricted. The former option blocks all traffic from unauthenticated clients until the controller is reachable again.The latter option allows unauthenticated clients to access the network without signing on until the controller is reachable again1.

   Captive Portal strength: This setting determines how often the clients are redirected to the splash page for authentication. The options areBlock all access until sign-on is completeorAllow non-HTTP traffic prior to sign-on. The latter option allows unauthenticated clients to access other protocols such as DNS, DHCP, ICMP, etc., but blocks HTTP and HTTPS traffic until they sign on.This option is recommended for compatibility with devices that do not support web-based authentication1.

   
   

2. Question 2

   Which information do the MXs in a High Availability pair share?

   Aspanning-tree state
   

   Btime synchronization state
   

   CDHCP association database
   

   Dstateful firewall database
   

   Correct answer: C

   DHCP Synchronization To prevent a scenario in which an IP address is assigned by the primary via DHCP and then that same address is assigned to another client by the secondary after a failover, the DHCP lease table is synchronized regularly between the primary and secondary over UDP port 3483. https://documentation.meraki.com/MX/Deployment_Guides/MX_Warm_Spare_-_High_Availability_Pair

   
   

3. Question 3

   Which Meraki Dashboard menu section is accessed to enable Sentry enrollment on an SSID?

   AWireless > Configure > Access Control
   

   BWireless > Configure > Splash page
   

   CWireless > Configure > Firewall & Traffic Shaping
   

   DWireless > Configure > SSIDs
   

   Correct answer: A

   SM Sentry enrollment can be enabled on any MR network via the Splash page section of the Wireless > Configure > Access control page. https://documentation.meraki.com/MR/MR_Splash_Page/Systems_Manager_Sentry_Enrollment

   
   

4. Question 4

   Refer to the exhibit.

   

   Assuming this MX has established a full tunnel with its VPN peer, how will the MX route the WebEx traffic?

   AWebEx traffic will prefer WAN 2 as long as it meets the thresholds in the ''Conf'' performance class.
   

   BWebEx traffic will prefer WAN 1 as it is the primary uplink.
   

   CWebEx traffic will prefer WAN 2 as long as it is up.
   

   DWebEx traffic will be load-balanced between both active WAN links.
   

   Correct answer: A

   Assuming this MX has established a full tunnel with its VPN peer, the MX will route the WebEx traffic based on the SD-WAN policy configured in the exhibit. The SD-WAN policy has two performance classes:ConfandDefault.TheConfperformance class matches the traffic with destination port 9000, which is used by WebEx for VoIP and video RTP3. TheConfperformance class has a preferred uplink of WAN 2 and a failover uplink of WAN 1. It also has thresholds for latency, jitter, and loss that determine when to switch from the preferred uplink to the failover uplink. Therefore, the WebEx traffic will prefer WAN 2 as long as it meets the thresholds in theConfperformance class. If WAN 2 exceeds the thresholds or goes down, the WebEx traffic will switch to WAN 1 as the failover uplink.

   
   

5. Question 5

   In an organization that uses the Co-Termination licensing model, which two operations enable licenses to be applied? (Choose two.)

   ARenew the Dashboard license.
   

   BLicense a network.
   

   CLicense more devices.
   

   DCall Meraki support.
   

   EWait for the devices to auto-renew.
   

   Correct answer: A, C

   There are two operations in which a license can be applied, License more devices or Renew my dashboard license. This article will compare both operations and describe their behaviors. https://documentation.meraki.com/General_Administration/Licensing/Meraki_Licensing_-_License_More_Devices_vs_Renewal

   These are the two operations that enable licenses to be applied in an organization that uses the Co-Termination licensing model. According to theMeraki Co-Termination Licensing Overview, there are two ways to add licenses to an organization:

   Renewing the Dashboard license: This option allows you to extend the co-termination date of your organization by purchasing new licenses for the same or longer term as your existing licenses. You can renew your Dashboard license from the Organization > Configure > License Info page or from the Meraki Dashboard homepage.

   Licensing more devices: This option allows you to add new devices to your organization by purchasing new licenses for them. You can license more devices from the Organization > Inventory page or from the Meraki Dashboard homepage.