- All Exams Instant Download
Which default endpoint identity group does an endpoint that does not match any profile in Cisco ISE become a member of?
Which default endpoint identity group does an endpoint that does not match any profile in Cisco ISE become a member of?A . EndpointB . unknownC . blacklistD . white listE . profiledView AnswerAnswer: B Explanation: If you do not have a matching profiling policy, you can assign an unknown profiling...
Which portal must the security engineer configure to accomplish this task?
An engineer is designing a BYOD environment utilizing Cisco ISE for devices that do not support native supplicants. Which portal must the security engineer configure to accomplish this task?A . MDMB . Client provisioningC . My devicesD . BYODView AnswerAnswer: C Explanation: https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/admin_guide/b_ise_admin_guide_22/b_ise_admin_guide_22_chapter_01111.html
What must be configured within Cisco ISE to accomplish this goal?
An organization wants to improve their BYOD processes to have Cisco ISE issue certificates to the BYOD endpoints. Currently, they have an active certificate authority and do not want to replace it with Cisco ISE . What must be configured within Cisco ISE to accomplish this goal?A . Create a...
What is the minimum certainty factor when creating a profiler policy?
What is the minimum certainty factor when creating a profiler policy?A . the minimum number that a predefined condition providesB . the maximum number that a predefined condition providesC . the minimum number that a device certainty factor must reach to become a member of the profileD . the maximum...
What is a function of client provisioning?
What is a function of client provisioning?A . Client provisioning ensures that endpoints receive the appropriate posture agents.B . Client provisioning checks a dictionary attribute with a value.C . Client provisioning ensures an application process is running on the endpoint.D . Client provisioning checks the existence, date, and versions of...
Which two events trigger a CoA for an endpoint when CoA is enabled globally for ReAuth? (Choose two.)
Which two events trigger a CoA for an endpoint when CoA is enabled globally for ReAuth? (Choose two.)A . endpoint marked as lost in My Devices PortalB . addition of endpoint to My Devices PortalC . endpoint profile transition from Apple-Device to Apple-iPhoneD . endpoint profile transition from Unknown to...
Drag the Cisco ISE node types from the left onto the appropriate purposes on the right
DRAG DROP Drag the Cisco ISE node types from the left onto the appropriate purposes on the right. View AnswerAnswer: Explanation: Monitoring = provides advanced monitoring and troubleshooting tools that you can use to effectively manage your network and resources Policy Service = provides network access, posture, guest access, client...
Which feature should be configured to achieve this in a scalable manner?
A network engineer must enforce access control using special tags, without re-engineering the network design . Which feature should be configured to achieve this in a scalable manner?A . SGTB . dACLC . VLAND . RBACView AnswerAnswer: A
Which task must be configured in order to meet this requirement?
A policy is being created in order to provide device administration access to the switches on a network. There is a requirement to ensure that if the session is not actively being used, after 10 minutes, it will be disconnected . Which task must be configured in order to meet...
Which permission is common to the Active Directory Join and Leave operations?
Which permission is common to the Active Directory Join and Leave operations?A . Create a Cisco ISE machine account in the domain if the machine account does not already existB . Remove the Cisco ISE machine account from the domain.C . Set attributes on the Cisco ISE machine accountD ....
