- All Exams Instant Download
Which advanced option within a WLAN must be enabled to trigger Central Web Authentication for Wireless users on AireOS controller?
Which advanced option within a WLAN must be enabled to trigger Central Web Authentication for Wireless users on AireOS controller?A . DHCP serverB . static IP tunnelingC . override Interface ACLD . AAA overrideView AnswerAnswer: D
Which command should the engineer run on the interface to accomplish this goal?
A network security engineer needs to configure 802.1X port authentication to allow a single host to be authenticated for data and another single host to be authenticated for voice . Which command should the engineer run on the interface to accomplish this goal?A . authentication host-mode single-hostB . authentication host-mode...
Which node should be used to accomplish this task?
An engineer is working with a distributed deployment of Cisco ISE and needs to configure various network probes to collect a set of attributes from the endpoints on the network . Which node should be used to accomplish this task?A . PSNB . primary PANC . pxGridD . MnTView AnswerAnswer:...
What must be done to ensure that both devices for a particular user are able to access the guest network simultaneously?
A network engineer is configuring guest access and notices that when a guest user registers a second device for access, the first device loses access. What must be done to ensure that both devices for a particular user are able to access the guest network simultaneously?A . Configure the sponsor...
What happens when an internal user is configured with an external identity store for authentication, but an engineer uses the Cisco ISE admin portal to select an internal identity store as the identity source?
What happens when an internal user is configured with an external identity store for authentication, but an engineer uses the Cisco ISE admin portal to select an internal identity store as the identity source?A . Authentication is redirected to the internal identity source.B . Authentication is redirected to the external...
What is the maximum number of PSN nodes supported in a medium-sized deployment?
What is the maximum number of PSN nodes supported in a medium-sized deployment?A . threeB . fiveC . twoD . eightView AnswerAnswer: B
What does a fully distributed Cisco ISE deployment include?
What does a fully distributed Cisco ISE deployment include?A . PAN and PSN on the same node while MnTs are on their own dedicated nodes.B . PAN and MnT on the same node while PSNs are on their own dedicated nodes.C . All Cisco ISE personas on their own dedicated...
Which two default guest portals are available with Cisco ISE? (Choose two.)
Which two default guest portals are available with Cisco ISE? (Choose two.)A . visitorB . WIFI-accessC . self-registeredD . central web authenticationE . sponsoredView AnswerAnswer: C,E
Which Cisco ISE deployment model provides redundancy by having every node in the deployment configured with the Administration. Policy Service, and Monitoring personas to protect from a complete node failure?
Which Cisco ISE deployment model provides redundancy by having every node in the deployment configured with the Administration. Policy Service, and Monitoring personas to protect from a complete node failure?A . distributedB . dispersedC . two-nodeD . hybridView AnswerAnswer: C
Which SSID type accomplishes this configuration?
An engineer is configuring a dedicated SSID for onboarding devices . Which SSID type accomplishes this configuration?A . dualB . hiddenC . broadcastD . guestView AnswerAnswer: A Explanation: https://community.cisco.com/t5/security-documents/ise-byod-dual-vs-single-ssid-onboarding/ta-p/3641422 https://www.youtube.com/watch?v=HH_Xasqd9k4&ab_channel=CiscoISE-IdentityServicesEngine http://www.labminutes.com/sec0053_ise_1_1_byod_wireless_onboarding_dual_ssid
