What is the purpose of the ip http server command on a switch?A . It enables the https server for users for web authenticationB . It enables MAB authentication on the switchC . It enables the switch to redirect users for web authentication.D . It enables dot1x authentication on the switch. View Answer Answer:...
Continue readingClient provisioning resources can be added into the Cisco ISE Administration node from which three of these? (Choose three.)
Client provisioning resources can be added into the Cisco ISE Administration node from which three of these? (Choose three.)A . FTPB . TFTPC . www-cisco.comD . local diskE . Posture Agent Profile View Answer Answer: CDE...
What are two benefits of TACACS+ versus RADIUS for device administration? (Choose two)
What are two benefits of TACACS+ versus RADIUS for device administration? (Choose two)A . TACACS+ supports 802.1X, and RADIUS supports MABB . TACACS+ uses UDP, and RADIUS uses TCPC . TACACS+ has command authorization, and RADIUS does not.D . TACACS+ provides the service type, and RADIUS does notE . TACACS+ encrypts the whole payload,...
Continue readingWhich interface-level command is needed to turn on 802 1X authentication?
Which interface-level command is needed to turn on 802 1X authentication?A . Dofl1x pae authenticatorB . dot1x system-auth-controlC . authentication host-mode single-hostD . aaa server radius dynamic-author View Answer Answer: A...
Which command displays all 802 1X/MAB sessions that are active on the switch ports of a Cisco Catalyst switch?
Which command displays all 802 1X/MAB sessions that are active on the switch ports of a Cisco Catalyst switch?A . show authentication sessions outputB . Show authentication sessionsC . show authentication sessions interface Gi 1/0/xD . show authentication sessions interface Gi1/0/x output View Answer Answer: B...
What allows an endpoint to obtain a digital certificate from Cisco ISE during a BYOD flow?
What allows an endpoint to obtain a digital certificate from Cisco ISE during a BYOD flow?A . Network Access ControlB . My Devices PortalC . Application Visibility and ControlD . Supplicant Provisioning Wizard View Answer Answer: B...
Which profiling probe collects the user-agent string?
Which profiling probe collects the user-agent string?A . DHCPB . ADC . HTTPD . NMAP View Answer Answer: C...
What does the dot1x system-auth-control command do?
What does the dot1x system-auth-control command do?A . causes a network access switch not to track 802.1x sessionsB . globally enables 802.1xC . enables 802.1x on a network access device interfaceD . causes a network access switch to track 802.1x sessions View Answer Answer: B Explanation: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/XE3-8-0E/15-24E/configuration/guide/xe-380-configuration/dot1x.html...
How is policy services node redundancy achieved in a deployment?
How is policy services node redundancy achieved in a deployment?A . by enabling VIPB . by utilizing RADIUS server list on the NADC . by creating a node groupD . by deploying both primary and secondary node View Answer Answer: D...
What gives Cisco ISE an option to scan endpoints for vulnerabilities?
What gives Cisco ISE an option to scan endpoints for vulnerabilities?A . authorization policyB . authentication policyC . authentication profileD . authorization profile View Answer Answer: D...