• 4.9/5.0
  • 72 Questions
  • Updated on: 12-Oct-2026
  • Engineering Cisco Meraki Solutions v1.0
  • 2725 Prepared

Free Cisco 500-220 Practice Questions 2026 | Engineering Cisco Meraki Solutions v1.0


A customer wants to use Microsoft Azure to host corporate application servers.
Which feature does the customer get by using a vMX appliance rather than connecting directly to Azure by VPN?

A.

malware protection

B.

SD-WAN

C.

next-generation firewall

D.

intrusion prevention

C.   

next-generation firewall



Drag and drop the steps from the left into the sequence on the right to manage device control, according to Cisco Meraki best practice.


Refer to the exhibit.

Which IDS/IPS mode is the MX Security Appliance configured for?

A.

quarantine

B.

prevention

C.

detection

D.

blocking

B.   

prevention



Refer to the exhibit.

During a Meraki AP deployment, the default SSID that the exhibit shows is broadcast. What causes this behavior?

A.

An AP does not have a wired connection to the network.

B.

An AP cannot connect to the default gateway.

C.

An AP has never connected to the Meraki Cloud Controller.

D.

An AP has Site Survey mode enabled.

C.   

An AP has never connected to the Meraki Cloud Controller.



Reference: https://documentation.meraki.com/MR/Other_Topics/
Troubleshooting_local_connection_issues_using_default_SSID_on_MR_Access_Points

A customer requires a hub-and-spoke Auto VPN deployment with two NAT-mode hubs with dual uplink connections and 50 remote sites with a single uplink connection.How many tunnels does each hub need to support?

A.

52

B.

54

C.

100

D.

104

C.   

100



Refer to the exhibit.

Which outcome occurs when logging is set to Enabled?

A.

Outbound flows are sent to a configured syslog server if a syslog sender is configured for flows.

B.

The hits counter within this section is now enabled.

C.

This firewall rule is now enabled.

D.

Inbound flows are sent to a configured syslog server if a syslog server configured for flows.

D.   

Inbound flows are sent to a configured syslog server if a syslog server configured for flows.



Refer to the exhibit.

Which design recommendation should be considered?

A.

A 25-percent throughput loss occurs for every hop. Cisco Meraki best practice
recommends a 1-hop maximum.

B.

A 25-percent throughput loss occurs for every hop. Cisco Meraki best practice
recommends a 2-hop maximum.

C.

A 50-percent throughput loss occurs for every hop. Cisco Meraki best practice
recommends a 1-hop maximum.

D.

A 50-percent throughput loss occurs for every hop. Cisco Meraki best practice
recommends a 2-hop maximum.

A.   

A 25-percent throughput loss occurs for every hop. Cisco Meraki best practice
recommends a 1-hop maximum.



Company iPads are enrolled in Systems Manager without supervision, and profiles are pushed through Systems Manager. Which outcome occurs when a user attempts to remove the “Meraki Management” profile on an iPad?

A.

The “Meraki Management” profile cannot be removed.

B.

The “Meraki Management” profile is removed and then pushed automatically by
Systems Manager.

C.

The “Meraki Management” profile is removed. All the profiles that Systems Manager pushed are also removed.

D.

The “Meraki Management” profile is removed. All the profiles Systems Manager pushed remain.

C.   

The “Meraki Management” profile is removed. All the profiles that Systems Manager pushed are also removed.



Refer to the exhibit


What does the MX Security Appliance send to determine whether VPN traffic exceeds the configured latency threshold in the VoIP custom performance class?

A.

1000-byte TCP probes every second, through VPN tunnels that are established over the primary WAN link.

B.

100-byte UDP probes every second, through VPN tunnels that are established over every WAN link.

C.

100-byte UDP probes every second, through VPN tunnels that are established over the primary WAN link.

D.

1000-byte TCP probes every second, through VPN tunnels that are established over every WAN link.

D.   

1000-byte TCP probes every second, through VPN tunnels that are established over every WAN link.



Which two Systems Manager Live tools are available only for Apple Macs and Windows PCs and cannot be used on iOS or Android mobile devices? (Choose two.)

A.

OS updates

B.

Send notification

C.

Selective wipe

D.

Screenshot

E.

Remote Desktop

C.   

Selective wipe


E.   

Remote Desktop



Reference: https://documentation.meraki.com/SM/Other_Topics/Systems_Manager_FAQ

Page 2 out of 8 Pages