- All Exams Instant Download
Which statement about the Cisco ISE BYOD feature is true?
Which statement about the Cisco ISE BYOD feature is true?A . Use of SCEP/CA is optional.B . BYOD works only on wireless access.C . Cisco ISE needs to integrate with MDM to support BYOE . Only mobile endpoints are supported.View AnswerAnswer: A
Which option must be configured on the switch port?
An engineer wants to migrate 802. 1X deployment phase from Open to Low-Impact mode. Which option must be configured on the switch port?A . open authentication to the domainB . ingress access list applied to the interfaceC . authentication host mode to multiple authenticationD . authentication host mode to multiple...
Which state will their EPS session be placed in?
A user is on a wired connection and the posture status is noncompliant. Which state will their EPS session be placed in?A . disconnectedB . limitedC . no accessD . quarantinedView AnswerAnswer: D
Security Group Access requires which three syslog messages to be sent to Cisco ISE? (Choose three.)
Security Group Access requires which three syslog messages to be sent to Cisco ISE? (Choose three.)A . IOS-7-PROXY_DROPB . AP-1-AUTH_PROXY_DOS_ATTACKC . MKA-2-MACDROPD . AUTHMGR-5-MACMOVEE . ASA-6-CONNECT_BUILTF . AP-1-AUTH_PROXY_FALLBACK_REQView AnswerAnswer: B,D,F
Which two Cisco ISE administration options are available in the Default Posture Status setting? (Choose two.)
Which two Cisco ISE administration options are available in the Default Posture Status setting? (Choose two.)A . UnknownB . CompliantC . FailOpenD . FailCloseE . NoncompliantView AnswerAnswer: B,E
Which two types of client provisioning resources are used for BYOD implementations? (Choose two.)
Which two types of client provisioning resources are used for BYOD implementations? (Choose two.)A . user agentB . Cisco NAC agentC . native supplicant profilesD . device sensorE . software provisioning wizardsView AnswerAnswer: C,E
Which two posture redirect ACLs and remediation DACLs must be pushed from Cisco ISE to a Cisco IOS switch if the endpoint must remediate itself? The ISE IP address is 10.201.228.76 and the IP address of the remediating server is 10.201.229.1. (Choose two.)
Which two posture redirect ACLs and remediation DACLs must be pushed from Cisco ISE to a Cisco IOS switch if the endpoint must remediate itself? The ISE IP address is 10.201.228.76 and the IP address of the remediating server is 10.201.229.1. (Choose two.)A . ip access-l ex ACL-POSTURE-REDIRECT deny udp any any...
How many bits are in a security group tag?
How many bits are in a security group tag?A . 64B . 8C . 16D . 32View AnswerAnswer: C
Which URL must you enter in the External Webauth URL field to configure Cisco ISE CWA correctly?
Refer to the exhibit. Which URL must you enter in the External Webauth URL field to configure Cisco ISE CWA correctly?A . https://ip_address:8443/guestportal/Login.actionB . https://ip_address:443/guestportal/Welcome.htmlC . https://ip_address:443/guestportal/action=cppD . https://ip_address:8905/guestportal/Sponsor.actionView AnswerAnswer: A
Which network component would issue the CoA?
Which network component would issue the CoA?A . switchB . endpointC . Admin NodeD . Policy Service NodeView AnswerAnswer: D
