- All Exams Instant Download
Which command is typed within the CU of a switch to view the troubleshooting output?
Refer to the exhibit: Which command is typed within the CU of a switch to view the troubleshooting output?A . show authentication sessions mac 000e.84af.59af details B. show authentication registrations C. show authentication interface gigabitethemet2/0/36 D. show authentication sessions methodView AnswerAnswer: A
Which default endpoint identity group does an endpoint that does not match any profile in Cisco ISE become a member of?
Which default endpoint identity group does an endpoint that does not match any profile in Cisco ISE become a member of?A . Endpoint B. unknown C. blacklist D. white list E. profiledView AnswerAnswer: B Explanation: If you do not have a matching profiling policy, you can assign an unknown profiling...
What is the problem'?
An administrator enables the profiling service for Cisco ISE to use for authorization policies while in closed mode. When the endpoints connect, they receive limited access so that the profiling probes can gather information and Cisco ISE can assign the correct profiles. They are using the default values within Cisco...
Which portal must the security engineer configure to accomplish this task?
An engineer is designing a BYOD environment utilizing Cisco ISE for devices that do not support native supplicants. Which portal must the security engineer configure to accomplish this task?A . MDM B. Client provisioning C. My devices D. BYODView AnswerAnswer: C Explanation: https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/admin_guide/b_ise_admin_guide_22/b_ise_admin_guide_22_chapter_01111.html
What is a function of client provisioning?
What is a function of client provisioning?A . It ensures an application process is running on the endpoint. B. It checks a dictionary' attribute with a value. C. It ensures that endpoints receive the appropriate posture agents D. It checks the existence date and versions of the file on a...
Which two probes will provide this information without forwarding SPAN packets to Cisco ISE?
When setting up profiling in an environment using Cisco ISE for network access control, an organization must use non-proprietary protocols for collecting the information at layer 2 . Which two probes will provide this information without forwarding SPAN packets to Cisco ISE? {Choose two.)A . DHCP SPAN probe B. SNMP...
Which protocol must be allowed for a BYOD device to access the BYOD portal?
Which protocol must be allowed for a BYOD device to access the BYOD portal?A . HTTP B. SMTP C. HTTPS D. SSHView AnswerAnswer: C
What must be configured to correct this?
An organization is hosting a conference and must make guest accounts for several of the speakers attending. The conference ended two days early but the guest accounts are still being used to access the network . What must be configured to correct this?A . Create an authorization rule denying sponsored...
Where in the Layer 2 frame should this be verified?
A network engineer is configuring Cisco TrustSec and needs to ensure that the Security Group Tag is being transmitted between two devices. Where in the Layer 2 frame should this be verified?A . CMD filed B. 802.1Q filed C. Payload D. 802.1 AE headerView AnswerAnswer: A Explanation: https://www.cisco.com/c/dam/global/en_ca/assets/ciscoconnect/2014/pdfs/policy_defined_segmentation_with_trustsec_rob_bleeker.pdf (slide 25)
An administrator is configuring a new profiling policy in Cisco ISE for a printer type that is missing from the profiler feed. The logical profile Printers must be used in the authorization rule and the rule must be hit .
An administrator is configuring a new profiling policy in Cisco ISE for a printer type that is missing from the profiler feed. The logical profile Printers must be used in the authorization rule and the rule must be hit . What must be done to ensure that this configuration will...
