Currently, many users are expehecing problems using their AnyConnect NAM supplicant to login to the network. The rr desktop support staff have already examined and vehfed the AnyConnect NAM configuration is correct

Scenario:

Currently, many users are expehecing problems using their AnyConnect NAM supplicant to login to the network. The rr desktop support staff have already examined and vehfed the AnyConnect NAM configuration is correct.

In this simulation, you are tasked to examine the various ISE GUI screens to determine the ISE current configurations to help isolate the problems. Based on the current ISE configurations, you will need to answer three multiple choice questions.

To access the ISE GUI, click on the ISE icon in the topology diagram to access the ISE GUI.

Not all the ISE GUI screen are operational in this simulation and some of the ISE GUI operations have been reduced in this simulation.

Not all the links on each of the ISE GUI screen works, if some of the links are not working on a screen, click Home to go back to the Home page first. From the Home page, you can access all the required screens.

To view some larger GUI screens, use the simulation window scroll bars. Some of the larger GUI screens only shows partially but will include all information required to complete this simulation.

Determine which can be two reasons why many users like the Sales and fT users are not able to authenticate and access the network using their AnyConnect NAM client with EAP-FAST.(Choose two.)
A . The DotlX authentication policy is not allowing the EAP-FAST protocol.
B . The rr_Corp authorization profile has the wrong Access Type configured.
C . The authorization profile used for the Sales users is misconfigured.
D . The order for the MAB authentication policy and the DotlX authentication policy should be reversed.
E . Many of the fT Sales and fT user machines are not passing the ISE posture accessment.
F . he PERMrr_ALL_TRAFFIC DACL is missing the permit ip any any statement it the end.
G . The Employee_FullAccess_DACL DACL is missing the permit ip any any statement in the end.

View Answer

Answer: A,D