- All Exams Instant Download
Which node should be used to accomplish this task?
An engineer is working with a distributed deployment of Cisco ISE and needs to configure various network probes to collect a set of attributes from the endpoints on the network . Which node should be used to accomplish this task?A . PSN B. primary PAN C. pxGrid D. MnTView AnswerAnswer:...
Which action accomplishes this task for VPN users?
An engineer tests Cisco ISE posture services on the network and must configure the compliance module to automatically download and install on endpoints. Which action accomplishes this task for VPN users?A . Create a Cisco AnyConnect configuration and Client Provisioning policy within Cisco ISE. B. Configure the compliance module to...
Which two requirement complete this policy?
An engineer is configuring a guest password policy and needs to ensure that the password complexity requirements are set to mitigate brute force attacks . Which two requirement complete this policy? (Choose two)A . minimum password length B. active username limit C. access code control D. gpassword expiration period E....
What issue would cause this to happen even if the device ID and passwords are correct?
While configuring Cisco TrustSec on Cisco IOS devices the engineer must set the CTS device ID and password in order for the devices to authenticate with each other. However after this is complete the devices are not able to property authenticate. What issue would cause this to happen even if...
Which two requirements must be met to implement this change?
Users in an organization report issues about having to remember multiple usernames and passwords. The network administrator wants the existing Cisco ISE deployment to utilize an external identity source to alleviate this issue . Which two requirements must be met to implement this change? (Choose two.)A . Enable IPC access...
Which two ports or port sets must be opened up on the firewall to accomplish this task?
An engineer is tasked with placing a guest access anchor controller in the DMZ . Which two ports or port sets must be opened up on the firewall to accomplish this task? (Choose two.)A . UDP port 1812 RADIUS B. TCP port 161 C. TCP port 514 D. UDP port...
What must be done to validate the AAA configuration and identify the problem with the TACACS+ servers?
An administrator is configuring TACACS+ on a Cisco switch but cannot authenticate users with Cisco ISE. The configuration contains the correct key of Cisc039712287. but the switch is not receiving a response from the Cisco ISE instance. What must be done to validate the AAA configuration and identify the problem...
Why is this occurring?
An administrator is manually adding a device to a Cisco ISE identity group to ensure that it is able to access the network when needed without authentication Upon testing, the administrator notices that the device never hits the correct authorization policy line using the condition EndPoints LogicalProfile EQUALS static_list. Why...
What is causing this issue to occur?
An engineer is configuring 802.1X and is testing out their policy sets. After authentication, some endpoints are given an access-reject message but are still allowed onto the network . What is causing this issue to occur?A . The switch port is configured with authentication event server dead action authorize vlan.B...
Which component must be configured to apply the SGACL?
Refer to the exhibit. Which component must be configured to apply the SGACL?A . egress routerB . hostC . secure serverD . ingress routerView AnswerAnswer: A Explanation: https://www.cisco.com/c/en/us/td/docs/switches/lan/trustsec/configuration/guide/trustsec/ar ch_over.html#52796
