- All Exams Instant Download
What must be done to accomplish this task?
An administrator is trying to collect metadata information about the traffic going across the network to gam added visibility into the hosts. This Information will be used to create profiling policies for devices us mg Cisco ISE so that network access policies can be used. What must be done to...
Where in the Layer 2 frame should this be verified?
A network engineer is configuring Cisco TrustSec and needs to ensure that the Security Group Tag is being transmitted between two devices. Where in the Layer 2 frame should this be verified?A . CMD filedB . 802.1Q filedC . PayloadD . 802.1 AE headerView AnswerAnswer: A Explanation: https://www.cisco.com/c/dam/global/en_ca/assets/ciscoconnect/2014/pdfs/policy_defined_segmentation_with_trustsec_rob_bleeker.pdf (slide 25)
Which action should accomplish this task?
An engineer is using Cisco ISE and configuring guest services to allow wireless devices to access the network . Which action should accomplish this task?A . Create the redirect ACL on the WLC and add it to the WLC policyB . Create the redirect ACL on the WLC and add...
Drag the descriptions on the left onto the components of 802.1X on the right
DRAG DROP Drag the descriptions on the left onto the components of 802.1X on the right. View AnswerAnswer: Explanation: https://netlabz.wordpress.com/2016/09/24/cisco-ise-fundamentals/
Which default endpoint identity group does an endpoint that does not match any profile in Cisco ISE become a member of?
Which default endpoint identity group does an endpoint that does not match any profile in Cisco ISE become a member of?A . EndpointB . unknownC . blacklistD . white listE . profiledView AnswerAnswer: B Explanation: If you do not have a matching profiling policy, you can assign an unknown profiling...
Which portal must the security engineer configure to accomplish this task?
An engineer is designing a BYOD environment utilizing Cisco ISE for devices that do not support native supplicants. Which portal must the security engineer configure to accomplish this task?A . MDMB . Client provisioningC . My devicesD . BYODView AnswerAnswer: C Explanation: https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/admin_guide/b_ise_admin_guide_22/b_ise_admin_guide_22_chapter_01111.html
What must be configured within Cisco ISE to accomplish this goal?
An organization wants to improve their BYOD processes to have Cisco ISE issue certificates to the BYOD endpoints. Currently, they have an active certificate authority and do not want to replace it with Cisco ISE . What must be configured within Cisco ISE to accomplish this goal?A . Create a...
What is the minimum certainty factor when creating a profiler policy?
What is the minimum certainty factor when creating a profiler policy?A . the minimum number that a predefined condition providesB . the maximum number that a predefined condition providesC . the minimum number that a device certainty factor must reach to become a member of the profileD . the maximum...
What is a function of client provisioning?
What is a function of client provisioning?A . Client provisioning ensures that endpoints receive the appropriate posture agents.B . Client provisioning checks a dictionary attribute with a value.C . Client provisioning ensures an application process is running on the endpoint.D . Client provisioning checks the existence, date, and versions of...
Which two events trigger a CoA for an endpoint when CoA is enabled globally for ReAuth? (Choose two.)
Which two events trigger a CoA for an endpoint when CoA is enabled globally for ReAuth? (Choose two.)A . endpoint marked as lost in My Devices PortalB . addition of endpoint to My Devices PortalC . endpoint profile transition from Apple-Device to Apple-iPhoneD . endpoint profile transition from Unknown to...
