- All Exams Instant Download
Which two features must be used on Cisco ISE to enable the TACACS. feature? (Choose two)
Which two features must be used on Cisco ISE to enable the TACACS. feature? (Choose two)A . Device Administration LicenseB . Server SequenceC . Command SetsD . Enable Device Admin ServiceE . External TACACS ServersView AnswerAnswer: A, D
What are two benefits of TACACS+ versus RADIUS for device administration? (Choose two)
What are two benefits of TACACS+ versus RADIUS for device administration? (Choose two)A . TACACS+ supports 802.1X, and RADIUS supports MABB . TACACS+ uses UDP, and RADIUS uses TCPC . TACACS+ has command authorization, and RADIUS does not.D . TACACS+ provides the service type, and RADIUS does notE . TACACS+...
What must match between Cisco ISE and the network access device to successfully authenticate endpoints?
What must match between Cisco ISE and the network access device to successfully authenticate endpoints?A . SNMP versionB . shared secretC . certificateD . profileView AnswerAnswer: B Explanation: https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_man_network_devices.html
Which interface-level command is needed to turn on 802 1X authentication?
Which interface-level command is needed to turn on 802 1X authentication?A . Dofl1x pae authenticatorB . dot1x system-auth-controlC . authentication host-mode single-hostD . aaa server radius dynamic-authorView AnswerAnswer: A
Which term refers to an endpoint agent that tries to join an 802 1X-enabled network?
Which term refers to an endpoint agent that tries to join an 802 1X-enabled network?A . EAP serverB . supplicantC . clientD . authenticatorView AnswerAnswer: B Explanation: https://www.oreilly.com/library/view/cisco-ise-for/9780133103632/ch16.html#:~:text=What%20is%20a%20supplicant%3F,networks%2C%20both%20wired%20and%20wireless.&text=The%20802.1X%20transactions%20are,Identity%20Services%20Engine%20(ISE).
Which access will be denied in this?
An engineer is using the low-impact mode for a phased deployment of Cisco ISE and is trying to connect to the network prior to authentication. Which access will be denied in this?A . HTTPB . DNSC . EAPD . DHCPView AnswerAnswer: A
Which protocol must be allowed for a BYOD device to access the BYOD portal?
Which protocol must be allowed for a BYOD device to access the BYOD portal?A . HTTPB . SMTPC . HTTPSD . SSHView AnswerAnswer: C
Which personas can a Cisco ISE node assume'?
Which personas can a Cisco ISE node assume'?A . policy service, gatekeeping, and monitoringB . administration, policy service, and monitoringC . administration, policy service, gatekeepingD . administration, monitoring, and gatekeepingView AnswerAnswer: B Explanation: https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_dis_deploy.html The persona or personas of a node determine the services provided by a node. An ISE...
Which two fields are available when creating an endpoint on the context visibility page of Cisco IS? (Choose two)
Which two fields are available when creating an endpoint on the context visibility page of Cisco IS? (Choose two)A . Policy AssignmentB . Endpoint FamilyC . Identity Group AssignmentD . Security Group TagE . IP AddressView AnswerAnswer: A, C
Which action should accomplish this task?
An engineer is using Cisco ISE and configuring guest services to allow wireless devices to access the network. Which action should accomplish this task?A . Create the redirect ACL on the WLC and add it to the WLC policyB . Create the redirect ACL on the WLC and add it...
