- All Exams Instant Download
The phones do not have the ability to auto switch port for authentication?
An administrator is adding a switch to a network that is running Cisco ISE and is only for IP Phones. The phones do not have the ability to auto switch port for authentication?A . enable bypass-MACB . dot1x system-auth-controlC . mabD . enable network-authenticationView AnswerAnswer: B
Which two components are required for creating a Native Supplicant Profile within a BYOD flow? (Choose two)
Which two components are required for creating a Native Supplicant Profile within a BYOD flow? (Choose two)A . Windows SettingsB . Connection TypeC . iOS SettingsD . Redirect ACLE . Operating SystemView AnswerAnswer: B,E Explanation: https://www.cisco.com/c/en/us/td/docs/security/ise/2-1/admin_guide/b_ise_admin_guide_21/b_ise_admin_guide_20_chapter_010101.html #reference_21024A3B2B27427EAC78495E56962729
Which two roles are taken on by the administration person within a Cisco ISE distributed environment? (Choose two.)
Which two roles are taken on by the administration person within a Cisco ISE distributed environment? (Choose two.)A . backupB . secondaryC . standbyD . primaryE . activeView AnswerAnswer: B,D
Which type of access list should be used for this configuration?
An engineer is configuring web authentication and needs to allow specific protocols to permit DNS traffic . Which type of access list should be used for this configuration?A . reflexive ACLB . extended ACLC . standard ACLD . numbered ACLView AnswerAnswer: B
Which personas can a Cisco ISE node assume'?
Which personas can a Cisco ISE node assume'?A . policy service, gatekeeping, and monitoringB . administration, policy service, and monitoringC . administration, policy service, gatekeepingD . administration, monitoring, and gatekeepingView AnswerAnswer: B Explanation: https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_dis_deploy.html The persona or personas of a node determine the services provided by a node. An ISE...
Which probe must be used to accomplish this task?
An engineer is implementing network access control using Cisco ISE and needs to separate the traffic based on the network device ID and use the IOS device sensor capability . Which probe must be used to accomplish this task?A . HTTP probeB . NetFlow probeC . network scan probeD ....
Which command should the engineer run on the interface to accomplish this goal?
A network security engineer needs to configure 802.1X port authentication to allow a single host to be authenticated for data and another single host to be authenticated for voice . Which command should the engineer run on the interface to accomplish this goal?A . authentication host-mode single-hostB . authentication host-mode...
Which command should be used to accomplish this task?
An engineer is configuring web authentication using non-standard ports and needs the switch to redirect traffic to the correct port . Which command should be used to accomplish this task?A . permit tcp any any eq <port number>B . aaa group server radius proxyC . ip http port <port number>D...
Which statement about configuring certificates for BYOD is true?
Which statement about configuring certificates for BYOD is true?A . An Android endpoint uses EST, whereas other operating systems use SCEP for enrollmentB . The SAN field is populated with the end user name.C . An endpoint certificate is mandatory for the Cisco ISE BYODD . The CN field is...
What does a fully distributed Cisco ISE deployment include?
What does a fully distributed Cisco ISE deployment include?A . PAN and PSN on the same node while MnTs are on their own dedicated nodes.B . PAN and MnT on the same node while PSNs are on their own dedicated nodes.C . All Cisco ISE personas on their own dedicated...
