Q1. Which two authentication stores are supported to design a wireless network using PEAP EAP-MSCHAPv2 as the authentication method? (Choose two.) 

A. Microsoft Active Directory 

B. ACS 

C. LDAP 

D. RSA Secure-ID 

E. Certificate Server 

View Answer

Q2. Which method does Cisco prefer to securely deploy guest wireless access in a BYOD implementation? 

A. deploying a dedicated Wireless LAN Controller in a DMZ 

B. configuring a guest SSID with WPA2 Enterprise authentication 

C. configuring guest wireless users to obtain DHCP centrally from the corporate DHCP server 

D. disabling guest SSID broadcasting 

View Answer

Q3. Which two attributes must match between two Cisco ASA devices to properly enable high availability? (Choose two.) 

A. model, interface configuration, and RAM 

B. major and minor software release 

C. tcp dead-peer detection protocol 

D. 802.1x authentication identity 

View Answer

Q4. Refer to the exhibit. 

The links outside the TrustSec area in the given SGA architecture are unprotected. On which two links does EAC take place? (Choose two.) 

A. between switch 2 and switch 3 

B. between switch 5 and host 2 

C. between host 1 and switch 1 

D. between the authentication server and switch 4 

E. between switch 1 and switch 2 

F. between switch 1 and switch 5 

View Answer

Q5. Refer to the exhibit. 

If the given configuration is applied to the object-group vpnservers, during which time period are external users able to connect? 

A. From Friday at 6:00 p.m. until Monday at 8:00 a.m. 

B. From Monday at 8:00 a.m. until Friday at 6:00 p.m. 

C. From Friday at 6:01 p.m. until Monday at 8:01 a.m. 

D. From Monday at 8:01 a.m. until Friday at 5:59 p.m. 

View Answer

Q6. What user rights does an account need to join ISE to a Microsoft Active Directory domain? 

A. Create and Delete Computer Objects 

B. Domain Admin 

C. Join and Leave Domain 

D. Create and Delete User Objects 

View Answer

Q7. When MAB is configured, how often are ports reauthenticated by default? 

A. every 60 seconds 

B. every 90 seconds 

C. every 120 seconds 

D. never 

View Answer

Q8. When RADIUS NAC and AAA Override are enabled for WLC on a Cisco ISE, which two statements about RADIUS NAC are true? (Choose two.) 

A. It will return an access-accept and send the redirection URL for all users. 

B. It establishes secure connectivity between the RADIUS server and the ISE. 

C. It allows the ISE to send a CoA request that indicates when the user is authenticated. 

D. It is used for posture assessment, so the ISE changes the user profile based on posture result. 

E. It allows multiple users to authenticate at the same time. 

View Answer

Q9. Which Cisco ISE feature can differentiate a corporate endpoint from a personal device? 

A. EAP chaining 

B. PAC files 

C. authenticated in-band provisioning 

D. machine authentication 

View Answer

Q10. Which command in the My Devices Portal can restore a previously lost device to the network? 

A. Reset 

B. Found 

C. Reinstate 

D. Request 

View Answer