Which configuration item must be changed in the network device within Cisco ISE to accomplish this goal?

An administrator is adding network devices for a new medical building into Cisco ISE. These devices must be in a network device group that is identifying them as "Medical Switch" so that the policies can be made separately for the endpoints connecting through them . Which configuration item must be...

April 5, 2022 No Comments READ MORE +

Which two events trigger a CoA for an endpoint when CoA is enabled globally for ReAuth? (Choose two.)

Which two events trigger a CoA for an endpoint when CoA is enabled globally for ReAuth? (Choose two.)A . endpoint marked as lost in My Devices PortalB . addition of endpoint to My Devices PortalC . endpoint profile transition from Apple-Device to Apple-iPhoneD . endpoint profile transition from Unknown to...

April 4, 2022 No Comments READ MORE +

Which Cisco ISE deployment model provides redundancy by having every node in the deployment configured with the Administration. Policy Service, and Monitoring personas to protect from a complete node failure?

Which Cisco ISE deployment model provides redundancy by having every node in the deployment configured with the Administration. Policy Service, and Monitoring personas to protect from a complete node failure?A . distributedB . dispersedC . two-nodeD . hybridView AnswerAnswer: A

April 4, 2022 No Comments READ MORE +

Which advanced option within a WLAN must be enabled to trigger Central Web Authentication for Wireless users on AireOS controller?

Which advanced option within a WLAN must be enabled to trigger Central Web Authentication for Wireless users on AireOS controller?A . DHCP serverB . static IP tunnelingC . override Interface ACLD . AAA overrideView AnswerAnswer: D

April 4, 2022 No Comments READ MORE +

What does the dot1x system-auth-control command do?

What does the dot1x system-auth-control command do?A . causes a network access switch not to track 802.1x sessionsB . globally enables 802.1xC . enables 802.1x on a network access device interfaceD . causes a network access switch to track 802.1x sessionsView AnswerAnswer: B Explanation: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/XE3-8-0E/15-24E/configuration/guide/xe-380-configuration/dot1x.html

April 4, 2022 No Comments READ MORE +

Which two requirements must be met to implement this change?

Users in an organization report issues about having to remember multiple usernames and passwords. The network administrator wants the existing Cisco ISE deployment to utilize an external identity source to alleviate this issue . Which two requirements must be met to implement this change? (Choose two.)A . Enable IPC access...

April 4, 2022 No Comments READ MORE +

Which configuration is causing this problem?

A Cisco ISE administrator needs to ensure that guest endpoint registrations are only valid for one day When testing the guest policy flow, the administrator sees that the Cisco ISE does not delete the endpoint in the Guest Endpoints identity store after one day and allows access to the guest...

April 4, 2022 No Comments READ MORE +

Which two methods should a sponsor select to create bulk guest accounts from the sponsor portal? (Choose two)

Which two methods should a sponsor select to create bulk guest accounts from the sponsor portal? (Choose two)A . RandomB . MonthlyC . DailyD . ImportedE . KnownView AnswerAnswer: A,D

April 4, 2022 No Comments READ MORE +

Which two features are available when the primary admin node is down and the secondary admin node has not been promoted? (Choose two.)

Which two features are available when the primary admin node is down and the secondary admin node has not been promoted? (Choose two.)A . hotspotB . new AD user 802 1X authenticationC . postureD . BYODE . guest AUPView AnswerAnswer: B,C

April 3, 2022 No Comments READ MORE +

Which two task types are included in the Cisco ISE common tasks support for TACACS+ profiles? (Choose two)

Which two task types are included in the Cisco ISE common tasks support for TACACS+ profiles? (Choose two)A . FirepowerB . WLCC . IOSD . ASAE . ShellView AnswerAnswer: B,E Explanation: https://www.cisco.com/c/en/us/td/docs/security/ise/2-1/admin_guide/b_ise_admin_guide_21/b_ise_admin_guide_20_chapter_0100010.html TACACS+ Profile TACACS+ profiles control the initial login session of the device administrator. A session refers to each...

April 3, 2022 No Comments READ MORE +