- All Exams Instant Download
Which command is needed on each switch port for authentication?
An administrator is adding a switch to a network that is running Cisco ISE and is only for IP Phones The phones do not have the ability to authenticate via 802 1X Which command is needed on each switch port for authentication?A . dot1x system-auth-control B. enable bypass-mac C. enable...
Which configuration is causing this behavior?
An organization wants to split their Cisco ISE deployment to separate the device administration functionalities from the mam deployment. For this to work, the administrator must deregister any nodes that will become a part of the new deployment, but the button for this option is grayed out. Which configuration is...
An administrator is configuring RADIUS on a Cisco switch with a key set to Cisc403012128 but is receiving the error “Authentication failed: 22040 Wrong password or invalid shared secret. “what must be done to address this issue?
An administrator is configuring RADIUS on a Cisco switch with a key set to Cisc403012128 but is receiving the error “Authentication failed: 22040 Wrong password or invalid shared secret. “what must be done to address this issue?A . Add the network device as a NAD inside Cisco ISE using the...
What does a fully distributed Cisco ISE deployment include?
What does a fully distributed Cisco ISE deployment include?A . PAN and PSN on the same node while MnTs are on their own dedicated nodes. B. PAN and MnT on the same node while PSNs are on their own dedicated nodes. C. All Cisco ISE personas on their own dedicated...
What is needed to configure wireless guest access on the network?
What is needed to configure wireless guest access on the network?A . endpoint already profiled in ISE B. WEBAUTH ACL for redirection C. valid user account in Active Directory D. Captive Portal Bypass turned onView AnswerAnswer: D
Which two values are compared by the binary comparison (unction in authentication that is based on Active Directory?
Which two values are compared by the binary comparison (unction in authentication that is based on Active Directory?A . subject alternative name and the common name B. MS-CHAPv2 provided machine credentials and credentials stored in Active Directory C. user-presented password hash and a hash stored in Active Directory D. user-presented...
What must be configured to accomplish this task?
An organization wants to standardize the 802 1X configuration on their switches and remove static ACLs on the switch ports while allowing Cisco ISE to communicate to the switch what access to provide What must be configured to accomplish this task?A . security group tag within the authorization policy B....
Which type of access list should be used for this configuration?
An engineer is configuring web authentication and needs to allow specific protocols to permit DNS traffic. Which type of access list should be used for this configuration?A . reflexive ACL B. extended ACL C. standard ACL D. numbered ACLView AnswerAnswer: B
Which action should accomplish this task?
An engineer is using Cisco ISE and configuring guest services to allow wireless devices to access the network. Which action should accomplish this task?A . Create the redirect ACL on the WLC and add it to the WLC policy B. Create the redirect ACL on the WLC and add it...
Which two task types are included in the Cisco ISE common tasks support for TACACS+ profiles? (Choose two.)
Which two task types are included in the Cisco ISE common tasks support for TACACS+ profiles? (Choose two.)A . Firepower B. WLC C. IOS D. ASA E. ShellView AnswerAnswer: B,E Explanation: https://www.cisco.com/c/en/us/td/docs/security/ise/2-1/admin_guide/b_ise_admin_guide_21/b_ise_admin_guide_20_chapter_0100010.html TACACS+ Profile TACACS+ profiles control the initial login session of the device administrator. A session refers to each...
