- All Exams Instant Download
What must be configured to correct this?
An organization is hosting a conference and must make guest accounts for several of the speakers attending. The conference ended two days early but the guest accounts are still being used to access the network . What must be configured to correct this?A . Create an authorization rule denying sponsored...
What gives Cisco ISE an option to scan endpoints for vulnerabilities?
What gives Cisco ISE an option to scan endpoints for vulnerabilities?A . authorization policyB . authentication policyC . authentication profileD . authorization profileView AnswerAnswer: A
What must be configured on the WLC to configure Central Web Authentication using Cisco ISE and a WLC?
What must be configured on the WLC to configure Central Web Authentication using Cisco ISE and a WLC?A . Set the NAC State option to SNMP NAC . Set the NAC State option to RADIUS NAE . Use the radius-server vsa send authentication command.F . Use the ip access-group webauth...
Which policy condition must be used in order to accomplish this?
When creating a policy within Cisco ISE for network access control, the administrator wants to allow different access restrictions based upon the wireless SSID to which the device is connecting . Which policy condition must be used in order to accomplish this?A . Network Access NetworkDeviceName CONTAINS <SSID Name>B ....
Which RADIUS attribute is used to dynamically assign the Inactivity active timer for MAB users from the Cisco ISE node?
Which RADIUS attribute is used to dynamically assign the Inactivity active timer for MAB users from the Cisco ISE node?A . session timeoutB . idle timeoutC . radius-server timeoutD . termination-actionView AnswerAnswer: B Explanation: When the inactivity timer is enabled, the switch monitors the activity from authenticated endpoints. When the...
Which two endpoint compliance statuses are possible? (Choose two.)
Which two endpoint compliance statuses are possible? (Choose two.)A . unknownB . knownC . invalidD . compliantE . validView AnswerAnswer: A,D
Which action ensures the users are able to log into the network devices?
An administrator is configuring cisco ISE lo authenticate users logging into network devices using TACACS+ The administrator is not seeing any oí the authentication in the TACACS+ live logs . Which action ensures the users are able to log into the network devices?A . Enable the device administration service in...
Which three default endpoint identity groups does cisco ISE create? (Choose three)
Which three default endpoint identity groups does cisco ISE create? (Choose three)A . UnknownB . whitelistC . end pointD . profiledE . blacklistView AnswerAnswer: A,D,E Explanation: Default Endpoint Identity Groups Created for Endpoints Cisco ISE creates the following five endpoint identity groups by default: Blacklist, GuestEndpoints, Profiled, Registered Devices, and...
Which configuration is required in the Cisco ISE authentication policy to allow Central Web Authentication?
Which configuration is required in the Cisco ISE authentication policy to allow Central Web Authentication?A . MAB and if user not found, continueB . MAB and if authentication failed, continueC . Dot1x and if user not found, continueD . Dot1x and if authentication failed, continueView AnswerAnswer: A
Which alternate method should be used to tell users how to remediate?
MacOS users are complaining about having to read through wordy instructions when remediating their workstations to gam access to the network. Which alternate method should be used to tell users how to remediate?A . URL linkB . message textC . executableD . file distributionView AnswerAnswer: A
