- All Exams Instant Download
What must be done to validate the AAA configuration and identify the problem with the TACACS+ servers?
An administrator is configuring TACACS+ on a Cisco switch but cannot authenticate users with Cisco ISE. The configuration contains the correct key of Cisc039712287. but the switch is not receiving a response from the Cisco ISE instance. What must be done to validate the AAA configuration and identify the problem...
Why is this occurring?
An administrator is manually adding a device to a Cisco ISE identity group to ensure that it is able to access the network when needed without authentication Upon testing, the administrator notices that the device never hits the correct authorization policy line using the condition EndPoints LogicalProfile EQUALS static_list. Why...
What is causing this issue to occur?
An engineer is configuring 802.1X and is testing out their policy sets. After authentication, some endpoints are given an access-reject message but are still allowed onto the network . What is causing this issue to occur?A . The switch port is configured with authentication event server dead action authorize vlan.B...
Which component must be configured to apply the SGACL?
Refer to the exhibit. Which component must be configured to apply the SGACL?A . egress routerB . hostC . secure serverD . ingress routerView AnswerAnswer: A Explanation: https://www.cisco.com/c/en/us/td/docs/switches/lan/trustsec/configuration/guide/trustsec/ar ch_over.html#52796
Using the Cisco ISE Guest Sponsor Portal, which guest services can the receptionist provide?
A network administrator has just added a front desk receptionist account to the Cisco ISE Guest Service sponsor group. Using the Cisco ISE Guest Sponsor Portal, which guest services can the receptionist provide?A . Keep track of guest user activitiesB . Configure authorization settings for guest usersC . Create and...
What must be done in order to provide the CA this information?
An administrator is attempting to replace the built-in self-signed certificates on a Cisco ISE appliance. The CA is requesting some information about the appliance in order to sign the new certificate . What must be done in order to provide the CA this information? A. Install the Root CA and...
What is a function of client provisioning?
What is a function of client provisioning?A . It ensures an application process is running on the endpoint.B . It checks a dictionary' attribute with a value.C . It ensures that endpoints receive the appropriate posture agentsD . It checks the existence date and versions of the file on a...
Which two responses from the RADIUS server to NAS are valid during the authentication process? (Choose two)
Which two responses from the RADIUS server to NAS are valid during the authentication process? (Choose two)A . access-responseB . access-requestC . access-reservedD . access-acceptE . access-challengeView AnswerAnswer: B,D
Which protocol must be allowed for a BYOD device to access the BYOD portal?
Which protocol must be allowed for a BYOD device to access the BYOD portal?A . HTTPB . SMTPC . HTTPSD . SSHView AnswerAnswer: C
Which action does the CoA perform?
A Cisco ISE server sends a CoA to a NAD after a user logs in successfully using CWA. Which action does the CoA perform? A. It terminates the client session B. It applies the downloadable ACL provided in the CoA C. It applies new permissions provided in the CoA to...
