- All Exams Instant Download
Which personas can a Cisco ISE node assume'?
Which personas can a Cisco ISE node assume'?A . policy service, gatekeeping, and monitoringB . administration, policy service, and monitoringC . administration, policy service, gatekeepingD . administration, monitoring, and gatekeepingView AnswerAnswer: B Explanation: https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_dis_deploy.html The persona or personas of a node determine the services provided by a node. An ISE...
Which RADIUS attribute is used to dynamically assign the Inactivity active timer for MAB users from the Cisco ISE node?
Which RADIUS attribute is used to dynamically assign the Inactivity active timer for MAB users from the Cisco ISE node?A . session timeoutB . idle timeoutC . radius-server timeoutD . termination-actionView AnswerAnswer: B Explanation: When the inactivity timer is enabled, the switch monitors the activity from authenticated endpoints. When the...
Which action accomplishes this task for VPN users?
An engineer tests Cisco ISE posture services on the network and must configure the compliance module to automatically download and install on endpoints. Which action accomplishes this task for VPN users?A . Create a Cisco AnyConnect configuration and Client Provisioning policy within Cisco ISC . Configure the compliance module to...
What is the requirement to enable this feature?
An engineer is designing a new distributed deployment for Cisco ISE in the network and is considering failover options for the admin nodes. There is a need to ensure that an admin node is available for configuration of policies at all times . What is the requirement to enable this...
What must be configured on the network device to accomplish this goal?
An organization is adding new profiling probes to the system to improve profiling on Oseo ISE. The probes must support a common network management protocol to receive information about the endpoints and the ports to which they are connected. What must be configured on the network device to accomplish this...
What is the problem'?
An administrator enables the profiling service for Cisco ISE to use for authorization policies while in closed mode. When the endpoints connect, they receive limited access so that the profiling probes can gather information and Cisco ISE can assign the correct profiles. They are using the default values within Cisco...
Which port does Cisco ISE use for native supplicant provisioning of a Windows laptop?
Which port does Cisco ISE use for native supplicant provisioning of a Windows laptop?A . TCP 8909B . TCP 8905C . UDP 1812D . TCP 443View AnswerAnswer: B
What is the problem?
An administrator is troubleshooting an endpoint that is supposed to bypass 802 1X and use MAB. The endpoint is bypassing 802.1X and successfully getting network access using MAB. however the endpoint cannot communicate because it cannot obtain an IP address. What is the problem?A . The DHCP probe for Cisco...
What must be done to make the information available?
An organization has a fully distributed Cisco ISE deployment When implementing probes, an administrator must scan for unknown endpoints to learn the IP-to-MAC address bindings. The scan is complete on one FPSN. but the information is not available on the others . What must be done to make the information...
Which two ports or port sets must be opened up on the firewall to accomplish this task?
An engineer is tasked with placing a guest access anchor controller in the DMZ . Which two ports or port sets must be opened up on the firewall to accomplish this task? (Choose two.)A . UDP port 1812 RADIUSB . TCP port 161C . TCP port 514D . UDP port...
