Q5. A network administrator is seeing a posture status "unknown" for a single corporate machine on the Cisco ISE authentication report, whereas the other machines are reported as "compliant". Which option is the reason for machine being reported as "unknown"?

A. Posture agent is not installed on the machine.

B. Posture policy does not support the OS.

C. Posfure compliance condition is missing on the machine.

D. Posture service is disabled on Cisco ISE.

View Answer

Q6. Which set of commands allows IPX inbound on all interfaces?

A. ASA1(config)# access-list IPX-Allow ethertype permit ipxASA1(config)# access-group IPX-Allow in interface global

B. ASA1(config)# access-list IPX-Allow ethertype permit ipxASA1(config)# access-group IPX-Allow in interface inside

C. ASA1(config)# access-list IPX-Allow ethertype permit ipxASA1(config)# access-group IPX-Allow in interface outside

D. ASA1(config)# access-list IPX-Allow ethertype permit ipxASA1(config)# access-group

IPX-Allow out interface global

View Answer

Q7. What is the function of the SGACL policy matrix on a Cisco TrustSec domain with SGT Assignment?

A. It determines which access policy to apply to the endpoint.

B. It determines which switches are trusted within the TrustSec domain.

C. It determines the path the SGT of the packet takes when entering the Cisco TrustSec domain.

D. It lists all servers that are permitted to participate in the TrustSec domain.

E. It lists all hosts that are permitted to participate in the TrustSec domain.

View Answer

Q8. Which two accounting types are used to implement accounting with RADIUS? (Choose two.)

A. Network

B. User

C. Attribute

D. Device

E. Resource

View Answer

Q9. Refer to the exhibit.

In a distributed deployment of Cisco ISE, which column in Figure 1 is used to fill in the Host Name field in Figure 2 to collect captures on Cisco ISE while authenticating the specific

endpoint?

A. Server

B. Network Device

C. Endpoint ID

D. Identity

View Answer

Q10. You configured wired 802.1X with EAP-TLS on Windows machines. The ISE authentication detail report shows "EAP-TLS failed SSL/TLS handshake because of an unknown CA in the client certificates chain." What is the most likely cause of this error?

A. The ISE certificate store is missing a CA certificate.

B. The Wireless LAN Controller is missing a CA certificate.

C. The switch is missing a CA certificate.

D. The Windows Active Directory server is missing a CA certificate.

View Answer

Q11. Refer to the exhibit.

If the host sends a packet across the Cisco TrustSec domain, where is the SGACL enforced?

A. At the egress router

B. Dynamically at the host

C. After the packet enters the Cisco TrustSec domain

D. At the ingress router.

View Answer

Q12. CORRECT TEXT

Prime Uses Which protocol for devices discovery ?

View Answer

Q13. What three changes require restarting the application service on an ISE node? (Choose three.)

A. Registering a node.

B. Changing the primary node to standalone.

C. Promoting the administration node.

D. Installing the root CA certificate.

E. Changing the guest portal default port settings.

F. Adding a network access device.

View Answer

Q14. Which command defines administrator CLI access in ACS5.x?

A. Application reset-passwd acs username

B. username username password password role admin

C. username username password plain password role admin

D. password-policy

View Answer