- All Exams Instant Download
Which node should be used to accomplish this task?
An engineer is working with a distributed deployment of Cisco ISE and needs to configure various network probes to collect a set of attributes from the endpoints on the network. Which node should be used to accomplish this task?A . PSN B. primary PAN C. pxGrid D. MnTView AnswerAnswer: A
What must be done to accomplish this task?
An administrator is configuring sponsored guest access using Cisco ISE Access must be restricted to the sponsor portal to ensure that only necessary employees can issue sponsored accounts and employees must be classified to do so. What must be done to accomplish this task?A . Configure an identity-based access list...
Which attribute should be used in order to gain access based on location?
A company is attempting to improve their BYOD policies and restrict access based on certain criteria. The company's subnets are organized by building. Which attribute should be used in order to gain access based on location?A . static group assignment B. IP address C. device registration status D. MAC addressView...
What happens when an internal user is configured with an external identity store for authentication, but an engineer uses the Cisco ISE admin portal to select an internal identity store as the identity source?
What happens when an internal user is configured with an external identity store for authentication, but an engineer uses the Cisco ISE admin portal to select an internal identity store as the identity source?A . Authentication is redirected to the internal identity source. B. Authentication is redirected to the external...
In a Cisco ISE split deployment model, which load is split between the nodes?
In a Cisco ISE split deployment model, which load is split between the nodes?A . AAA B. network admission C. log collection D. device admissionView AnswerAnswer: A Explanation: https://www.cisco.com/c/en/us/td/docs/security/ise/2-6/install_guide/b_ise_InstallationGuide26.pdf
What is the problem?
Refer to the exhibit. An organization recently implemented network device administration using Cisco ISE. Upon testing the ability to access all of the required devices, a user in the Cisco ISE group IT Admins is attempting to login to a device in their organization's finance department but is unable to....
What must be configured to correct this?
An organization is hosting a conference and must make guest accounts for several of the speakers attending. The conference ended two days early but the guest accounts are still being used to access the network. What must be configured to correct this?A . Create an authorization rule denying sponsored guest...
An organization wants to implement 802.1X and is debating whether to use PEAP-MSCHAPv2 or PEAP-EAP-TLS for authentication
DRAG DROP An organization wants to implement 802.1X and is debating whether to use PEAP-MSCHAPv2 or PEAP-EAP-TLS for authentication. Drag the characteristics on the left to the corresponding protocol on the right. View AnswerAnswer:
Which two components must be uploaded to Cisco ISE to use Anyconnect for the agent configuration in a client provisioning policy?
An administrator is configuring posture assessment in Cisco ISE for the first time. Which two components must be uploaded to Cisco ISE to use Anyconnect for the agent configuration in a client provisioning policy? (Choose two.)A . Anyconnect network visibility module B. Anyconnect compliance module C. AnyConnectProfile.xml file D. AnyConnectProfile.xsd...
Which option must be selected in the Subject Alternative Name field?
An engineer needs to configure a new certificate template in the Cisco ISE Internal Certificate Authority to prevent BYOD devices from needing to re-enroll when their MAC address changes. Which option must be selected in the Subject Alternative Name field?A . Common Name and GUID B. MAC Address and GUID...
