- All Exams Instant Download
What service can be enabled on the Cisco ISE node to identity the types of devices connecting to a network?
What service can be enabled on the Cisco ISE node to identity the types of devices connecting to a network?A . MAB B. profiling C. posture D. central web authenticationView AnswerAnswer: B
Which Cisco ISE service allows an engineer to check the compliance of endpoints before connecting to the network?
Which Cisco ISE service allows an engineer to check the compliance of endpoints before connecting to the network?A . personas B. qualys C. nexpose D. postureView AnswerAnswer: D Explanation: https://www.cisco.com/c/en/us/td/docs/security/ise/2-1/admin_guide/b_ise_admin_guide_21/b_ise_admin_guide_20_chapter_010110.html Posture is a service in Cisco Identity Services Engine (Cisco ISE) that allows you to check the state, also known...
What is a restriction of a standalone Cisco ISE node deployment?
What is a restriction of a standalone Cisco ISE node deployment?A . Only the Policy Service persona can be disabled on the node. B. The domain name of the node cannot be changed after installation. C. Personas are enabled by default and cannot be edited on the node. D. The...
Which protocol meets these requirements and why?
An administrator wants to configure network device administration and is trying to decide whether to use TACACS* or RADIUS. A reliable protocol must be used that can check command authorization. Which protocol meets these requirements and why?A . TACACS+ because it runs over TCP B. RADIUS because it runs over...
Which database should be used to accomplish this goal?
A customer wants to set up the Sponsor portal and delegate the authentication flow to a third party for added security while using Kerberos. Which database should be used to accomplish this goal?A . RSA Token Server B. Active Directory C. Local Database D. LDAPView AnswerAnswer: B Explanation: https://www.cisco.com/c/en/us/td/docs/security/ise/2-6/admin_guide/b_ise_admin_guide_26/b_ise_admin_guide_26_chapter_01111.html#conce pt_srz_bkb_4db
Which portal must the security engineer configure to accomplish this task?
An engineer is designing a BYOD environment utilizing Cisco ISE for devices that do not support native supplicants. Which portal must the security engineer configure to accomplish this task?A . MDM B. Client provisioning C. My devices D. BYODView AnswerAnswer: C Explanation: https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/admin_guide/b_ise_admin_guide_22/b_ise_admin_guide_22_chapter_01111.html
Drag and drop the description from the left onto the protocol on the right that is used to carry out system authentication, authentication, and accounting
DRAG DROP Drag and drop the description from the left onto the protocol on the right that is used to carry out system authentication, authentication, and accounting. View AnswerAnswer: Explanation: Graphical user interface, chart, application Description automatically generated https://www.mbne.net/tech-notes/aaa-tacacs-radius
What is the purpose of the ip http server command on a switch?
What is the purpose of the ip http server command on a switch?A . It enables the https server for users for web authentication B. It enables MAB authentication on the switch C. It enables the switch to redirect users for web authentication. D. It enables dot1x authentication on the...
Which two features must be configured to allow for this?
An administrator needs to allow guest devices to connect to a private network without requiring usernames and passwords. Which two features must be configured to allow for this? (Choose two.)A . hotspot guest portal B. device registration WebAuth C. central WebAuth D. local WebAuth E. self-registered guest portalView AnswerAnswer: A,B
Which command displays all 802 1X/MAB sessions that are active on the switch ports of a Cisco Catalyst switch?
Which command displays all 802 1X/MAB sessions that are active on the switch ports of a Cisco Catalyst switch?A . show authentication sessions output B. Show authentication sessions C. show authentication sessions interface Gi 1/0/x D. show authentication sessions interface Gi1/0/x outputView AnswerAnswer: B
