- All Exams Instant Download
What is the purpose of configuring Native Supplicant Profile on the Cisco ISE?
What is the purpose of configuring Native Supplicant Profile on the Cisco ISE?A . It provides posture assessments and remediation for devices that are attempting to gain access to the corporate network.B . It is used to register personal devices on the network.C . It enforces the use of MSCHAPv2...
How is the layer 2 security of the provisioning SSID configured?
A company has implemented a dual SSID BYOD design. A provisioning SSID is used for user registration, and an employee SSID is used for company network access. How is the layer 2 security of the provisioning SSID configured?A . 802.1XB . OpenC . WPA2D . MAC filtering disabledView AnswerAnswer: B
Which two values are compared by the binary comparison function in authentication that is based on Active Directory?
Which two values are compared by the binary comparison function in authentication that is based on Active Directory?A . subject alternative name and the common nameB . user-presented password hash and a hash stored in Active DirectoryC . user-presented certificate and a certificate stored in Active DirectoryD . MS-CHAPv2 provided...
Which characteristic of an SGT enforcement policy is true?
Which characteristic of an SGT enforcement policy is true?A . An SGFW has an implicit permit at the beginning.B . An SGFW has an implicit deny at the end.C . An SGACL has an implicit deny at the end.D . An SGACL has an explicit deny at the beginning.View AnswerAnswer:...
Which agent continues to be operational even when the host is not on the Cisco ISE network?
A customer is concerned with the use of the issued laptops even when devices are not on the corporate network. Which agent continues to be operational even when the host is not on the Cisco ISE network?A . Cisco ISE AgentB . Cisco NAC AgentC . Cisco Custom AgentD ....
Which command allows the engineer to complete this task?
An engineer must limit the configuration parameters that can be executed on the Cisco ASAs deployed throughout the network. Which command allows the engineer to complete this task?A . AAA-server tacacs1(inside) host 10.5.109.18 $3cr37 timeout2 ! aaa authorization command tacacs1B . AAA-server tacacs1(inside) host 10.5.109.18 $3cr37 timeout2 ! aaa authentication...
Which type of probe is required when using a Cisco IOS Sensor-enabled network switch?
Which type of probe is required when using a Cisco IOS Sensor-enabled network switch?A . network scan probeB . HTTP probeC . RADIUS probeD . NetFlow probeView AnswerAnswer: C
Which two options are advantages of using the Cisco IOS Device Sensor as compared to other profiling probes'? (Choose two.)
Which two options are advantages of using the Cisco IOS Device Sensor as compared to other profiling probes'? (Choose two.)A . uses RADIUS authentication messages to send gathered data to a Cisco ISE serverB . provides DHCP information to a Cisco ISE server without using an IP helper addressC ....
Which action do you take to restrict network access for endpoints that are not posture compliant?
Which action do you take to restrict network access for endpoints that are not posture compliant?A . Configure a dACL on the NAC . Configure client provisioning services on the Cisco ISE Server.D . Assian a dynamjc VLAN oq the, NAF . Define the policy by configuring a standard profile.View...
Which functionality does the Cisco ISE BYOD flow provide?
Which functionality does the Cisco ISE BYOD flow provide?A . It provides support for native supplicants, allowing users to connect devices directly to the network.B . It provides the My Devices portal, allowing users to add devices to the network.C . It provides support for users to install the Cisco...
