Question 171 · 355 in bank
An engineer must configure guest access on Cisco ISE for company visitors. Which step must be taken on the Cisco ISE PSNs before a guest portal is configured?
Show answer
Answer: D
Implementing and Configuring Cisco Identity Services Engine (SISE)355 questions across 36 pages are complete and free, with no account or card.
355 questions in this bank
Free access · progress saved on this device
An engineer must configure guest access on Cisco ISE for company visitors. Which step must be taken on the Cisco ISE PSNs before a guest portal is configured?
Answer: D
A network engineer is configuring a portal on Cisco ISE for employees. Employees must use this portal when registering personal devices with native supplicants. For onboarding devices connected with Cisco switches and Cisco wireless LAN controllers, the internal CA must be used. Which portal type must the engineer configure?
Answer: C
According to the Cisco Identity Services Engine Administrator Guide, the portal type that the engineer must configure for this scenario is - Bring Your Own Device portal. The Bring Your Own Device (BYOD) portal allows employees to register their personal devices on the enterprise network using native supplicants. The portal also supports device onboarding using the internal CA for devices connected with Cisco switches and Cisco wireless LAN controllers.
Source: Adapted from community discussion — denverfly
An engineer must configure web redirection for guests to a portal where no authentication is required and an Acceptable Use Policy must be accepted by the guest before network access is allowed. Which type of guest portal must be configured in Cisco ISE to meet the requirement?
Answer: C
To configure web redirection for guests to a portal where no authentication is required and an Acceptable Use Policy (AUP) must be accepted by the guest before network access is allowed, the correct answer is option - Hotspot. A hotspot guest portal is a simple web page that displays an AUP and requires the guest to click Accept in order to access the network. No guest account or credentials are needed for this type of portal.
Source: Adapted from community discussion — denverfly
A network engineer is in the predeployment discovery phase of a Cisco ISE deployment and must discover the network. There is an existing NMS in the network. Which type of probe must be configured to gather the information?
Answer: A
To discover the network in the predeployment phase of a Cisco ISE deployment, the best type of probe to configure is option - SNMP. SNMP stands for Simple Network Management Protocol, which is a standard protocol for collecting and organizing information about network devices. SNMP can be used to query devices for their attributes, such as device type, vendor, model, operating system, IP address, MAC address, and so on. Cisco ISE supports two types of SNMP probes: SNMP Trap and SNMP Query. SNMP Trap probe listens for SNMP notifications sent by network devices, while SNMP Query probe actively polls network devices for information.
Source: Adapted from community discussion — denverfly
An engineer must organize endpoints in a Cisco ISE identity management store to improve the operational management of IP phone endpoints. The endpoints must meet these requirements: • classify endpoints for finance, sales, and marketing departments • tag each endpoint as profiled Which action organizes the endpoints?
Answer: B
To organize endpoints in a Cisco ISE identity management store according to the given requirements, the correct answer is option - Create an endpoint identity group for each department with the profiled parent group. This option allows you to create custom groups for the finance, sales, and marketing departments, and to assign them as subgroups of the profiled group, which is a predefined group that contains all the endpoints that have been profiled by Cisco ISE .
Source: Adapted from community discussion — denverfly
Which permission is common to the Active Directory Join and Leave operations?
Answer: B
tricky question: but B is correct, it is what is common in both operations : join: The join operation requires the following account permissions: Search Active Directory (to see if a Cisco ISE machine account exists) Create Cisco ISE machine account to domain (if the machine account does not already exist) Set attributes on the new machine account (for example, Cisco ISE machine account password, SPN, dnsHostname) leave : The leave operation requires the following account permissions: Search Active Directory (to see if a Cisco ISE machine account exists) Remove the Cisco ISE machine account from the domain If you perform a force leave (leave without the password), it will not remove the machine account from the domain. =============== as you can see the search is the only operation (or permission) that is common
Source: Adapted from community discussion — Daved90
A network engineer must remove a device that has been allowlisted. How should the engineer remove it manually on Cisco ISE?
Answer: B
To remove a device that has been allowlisted manually on Cisco ISE, the correct answer is option - Administration > Identity Management > Groups > Endpoint Identity Groups. This option allows you to view and edit the endpoint identity groups that are configured on Cisco ISE, and to delete any device that belongs to a specific group.
Source: Adapted from community discussion — denverfly
An engineer is adding a new network device to be used with 802.1X authentication. After configuring the device, the engineer notices that no endpoints that connect to the switch are able to authenticate. What is the problem?
Answer: A
Based on the information given in the question, the most likely cause of the authentication failure is option - The command dot1x system-auth-control is not configured on the switch. This command enables 802.1X authentication globally on the switch and is required for the switch to function as an authenticator. Without this command, the switch will not initiate the authentication process with the endpoints.
Source: Adapted from community discussion — denverfly
An administrator must provide administrative access to the helpdesk users on production Cisco IOS routers. The solution must meet these requirements: • Authenticate the users against Microsoft AD. • Validate IOS commands run by users. These configurations have been performed: • joined Cisco ISE to AD • retrieved AD groups • added a router to Cisco ISE • enabled Device Admin Service in Cisco ISE • configured an authorization policy • configured the routers for authentication and authorization Which two components must be configured? (Choose two.)
Answer: AD
An engineer must create an authentication policy in Cisco ISE to allow wired printers that lack support for 802.1X onto the network. What must the RadiusFlowType be set to in the policy to meet the requirement?
Answer: B
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
300-715 practice, question 171. 355 questions available.
Version 1.0.0. How we source questions