Question No: 1

In a Cisco ISE deployment, which traffic is permitted by the default dynamic ACL?

A. all IP traffic

B. management traffic only

C. TCP traffic only

D. UDP traffic only

View Answer

Question No: 2

Which action must an administrator take after joining a Cisco ISE deployment to an Active Directory domain?

A. Choose an Active Directory user.

B. Configure the management IP address.

C. Configure replication.

D. Choose an Active Directory group.

View Answer

Question No: 3

Which model does Cisco support in a RADIUS change of authorization implementation?

A. push

B. pull

C. policy

D. security

View Answer

Question No: 4

Which statement about Cisco ISE BYOD is true?

A. Dual SSID allows EAP-TLS only when connecting to the secured SSID.

B. Single SSID does not require endpoints to be registered.

C. Dual SSID allows BYOD for guest users.

D. Single SSID utilizes open SSID to accommodate different types of users.

E. Single SSID allows PEAP-MSCHAPv2 for native supplicant provisioning.

View Answer

Question No: 5

Which two conditions are valid when configuring ISE for posturing? (Choose two.)

A. Dictionary

B. member Of

C. Profile status

D. File

E. Service

View Answer

Question No: 6

What are the initial steps to configure an ACS as a TACACS server?

A. 1. Choose Network Devices and AAA Clients > Network Resources.2. Click Create.

B. 1. Choose Network Resources > Network Devices and AAA Clients.2. Click Create.

C. 1. Choose Network Resources > Network Devices and AAA Clients.2. Click Manage.

D. 1. Choose Network Devices and AAA Clients > Network Resources.2. Click Install.

View Answer

Question No: 7

Which command would be used in order to maintain a single open connection between a network access device and a tacacs server?

A. tacacs-server host timeout

B. tacacs-server host single-connection

C. tacacs-server host <ip address>

D. tacacs-server host <ip address> single-connection

View Answer

Question No: 8

Which three statements about the Cisco ISE profiler are true? (Choose three.)

A. It sends endpoint data to AAA servers.

B. It collects endpoint attributes.

C. It stores MAC addresses for endpoint systems.

D. It monitors and polices router and firewall traffic.

E. It matches endpoints to their profiles.

F. It stores endpoints in the Cisco ISE database with their profiles.

View Answer

Question No: 9

Which statement about IOS accounting is true?

A. A named list of AAA methods must be defined.

B. A named list of accounting methods must be defined.

C. Authorization must be configured before accounting.

D. A named list of tracking methods must be defined.

View Answer

Question No: 10

Which type of SGT propagation does a WLC in a data center require?

A. SXP

B. SGT

C. SGT inline

D. SGT Reflector

View Answer