- All Exams Instant Download
What is the problem?
Refer to the exhibit. An organization recently implemented network device administration using Cisco ISE. Upon testing the ability to access all of the required devices, a user in the Cisco ISE group IT Admins is attempting to login to a device in their organization's finance department but is unable to....
What must be configured to correct this?
An organization is hosting a conference and must make guest accounts for several of the speakers attending. The conference ended two days early but the guest accounts are still being used to access the network. What must be configured to correct this?A . Create an authorization rule denying sponsored guest...
An organization wants to implement 802.1X and is debating whether to use PEAP-MSCHAPv2 or PEAP-EAP-TLS for authentication
DRAG DROP An organization wants to implement 802.1X and is debating whether to use PEAP-MSCHAPv2 or PEAP-EAP-TLS for authentication. Drag the characteristics on the left to the corresponding protocol on the right. View AnswerAnswer:
Which two components must be uploaded to Cisco ISE to use Anyconnect for the agent configuration in a client provisioning policy?
An administrator is configuring posture assessment in Cisco ISE for the first time. Which two components must be uploaded to Cisco ISE to use Anyconnect for the agent configuration in a client provisioning policy? (Choose two.)A . Anyconnect network visibility module B. Anyconnect compliance module C. AnyConnectProfile.xml file D. AnyConnectProfile.xsd...
Which option must be selected in the Subject Alternative Name field?
An engineer needs to configure a new certificate template in the Cisco ISE Internal Certificate Authority to prevent BYOD devices from needing to re-enroll when their MAC address changes. Which option must be selected in the Subject Alternative Name field?A . Common Name and GUID B. MAC Address and GUID...
What must be done to ensure that both devices for a particular user are able to access the guest network simultaneously?
A network engineer is configuring guest access and notices that when a guest user registers a second device for access, the first device loses access. What must be done to ensure that both devices for a particular user are able to access the guest network simultaneously?A . Configure the sponsor...
Which action accomplishes this task for VPN users?
An engineer tests Cisco ISE posture services on the network and must configure the compliance module to automatically download and install on endpoints. Which action accomplishes this task for VPN users?A . Create a Cisco AnyConnect configuration and Client Provisioning policy within Cisco ISE. B. Configure the compliance module to...
An engineer needs to configure a compliance policy on Cisco ISE to ensure that the latest encryption software is running on the C drive of all endpoints
DRAG DROP An engineer needs to configure a compliance policy on Cisco ISE to ensure that the latest encryption software is running on the C drive of all endpoints. Drag and drop the configuration steps from the left into the sequence on the right to accomplish this task. View AnswerAnswer:...
Which configuration should be used when authentication is disabled and third-party switches are in use?
An engineer is configuring static SGT classification. Which configuration should be used when authentication is disabled and third-party switches are in use?A . VLAN to SGT mapping B. IP Address to SGT mapping C. L3IF to SGT mapping D. Subnet to SGT mappingView AnswerAnswer: B Explanation: https://community.cisco.com/t5/security-knowledge-base/segmentation-strategy/ta-p/3757424: "The method of...
What must be done so that the port will allow voice and multiple data endpoints?
An administrator is configuring a switch port for use with 802 1X. What must be done so that the port will allow voice and multiple data endpoints?A . Configure the port with the authentication host-mode multi-auth command B. Connect the data devices to the port, then attach the phone behind...
