Question 231 · 355 in bank
Select 2Which two VMware features are supported on a Cisco ISE virtual appliance? (Choose two.)
Show answer
Answer: AB
Implementing and Configuring Cisco Identity Services Engine (SISE)355 questions across 36 pages are complete and free, with no account or card.
355 questions in this bank
Free access · progress saved on this device
Which two VMware features are supported on a Cisco ISE virtual appliance? (Choose two.)
Answer: AB
What gives Cisco ISE an option to scan endpoints for vulnerabilities?
Answer: B
Answer B is the correcet answer for sure ... you can see the option clearly in Authorization profile tab : Authorization Profile * Name Description * Access Type Network Device Profile Service Template Track Movement Passive Identity Tracking DACL Name ACL (Filter-ID) Security Group VLAN Voice Domain Permission Web Redirection (CWA, MDM, NSP, CPP) Display Certificates Renewal Message Static IP/Host name/FQDN Suppress Profiler CoA for endpoints in Logical Profile Auto Smart Port [Assess Vulnerabilities Adapter Instance Trigger scan if the time since last scan is greater than Enter value in hours (1-9999) Assess periodically using above interval]
Source: Adapted from community discussion — hisho72
An engineer must onboard secure Windows 11 laptops of directors on the BYOD portal by using Cisco ISE. Corporate security policies require the Cisco ISE internal CA to use an ECC certificate rather than the standard RSA certificate. What must be configured in Cisco ISE?
Answer: A
Correct Answer A. I tested this and you change the Cisco ISE EAP authentication certificate template settings to ECC. D is wrong, you cannot even modify the ISE internal CA settings.
Source: Adapted from community discussion — Cachaman
Which two values are compared by the binary comparison function in authentication that is based on Active Directory?
Answer: A
The answer seems to be "A". Refer to that phrase from the official book: "A binary comparison takes the public certificate used by the user or device attempting access and performs a bit-for-bit comparison to a copy stored elsewhere (usually on the issuing CA)."
Source: Adapted from community discussion — YmerG
What happens when an internal user is configured with an external identity store for authentication, but an engineer uses the Cisco ISE admin portal to select an internal identity store as the identity source?
Answer: C
read the manuals CORRECT IS C If an internal user is configured with an external identity store for authentication, while logging in to the ISE Admin portal, the internal user must select the external identity store as the Identity Source. Authentication will fail if Internal Identity Source is selected. https://www.cisco.com/c/en/us/td/docs/security/ise/2-7/admin_guide/b_ise_27_admin_guide/b_ISE_admin_27_overview.html
Source: Adapted from community discussion — MrCalifornia
Which two actions occur when a Cisco ISE server device administrator logs in to a device? (Choose two.)
Answer: AE
Could be A,C and E. The device queries ISE and ISE can use an internal or external identity store. https://www.cisco.com/c/en/us/td/docs/security/ise/2-7/admin_guide/b_ise_27_admin_guide/b_ISE_admin_27_device_admin.html#concept_9B1DD5A7AD9C445AAC764722E6E7D32A The device administrator performs the task of setting up a device to communicate with the Cisco ISE server. When a device administrator logs on to a device, the device queries the Cisco ISE server, which in turn queries an internal or external identity store, to validate the details of the device administrator. When the validation is done by the Cisco ISE server, the device informs the Cisco ISE server of the final outcome of each session or command authorization operation for accounting and auditing purposes.
Source: Adapted from community discussion — vsu56986
An engineer is configuring a guest password policy and needs to ensure that the password complexity requirements are set to mitigate brute force attacks. Which two requirements should be included in this policy? (Choose two.)
Answer: BE
Which two features are available when the primary admin node is down and the secondary admin node has not been promoted? (Choose two.)
Answer: AC
The following table lists the features that are affected when the primary PAN goes down and the secondary PAN is yet to take over. Features Name Available When Primary PAN is Down? (Yes/No) Existing or new AD user RADIUS authentication Yes Guest: AUP No Posture Yes BYOD with Internal CA No
Source: Adapted from community discussion — iceise
An engineer is using the low-impact mode for a phased deployment of Cisco ISE and is trying to connect to the network prior to authentication. Which access will be denied in this deployment?
Answer: D
D is correct if you follow the typical examples for pre-auth acl. EAP is permitted by default, in Low Impact you can create a pre-auth ACL to permit DHCP & DNS--technically anything else you desire to allow but the Best-practice example allows DNS & DHCP
Source: Adapted from community discussion — THEODORABLE
An administrator needs to connect ISE to Active Directory as an external authentication source and allow the proper ports through the firewall. Which two ports should be opened to accomplish this task? (Choose two.)
Answer: DE
DE is still valid on ISE 3.0 , there is however several other ports based on the context of the question as seen on this document. https://www.cisco.com/c/en/us/td/docs/security/ise/3-0/install_guide/b_ise_InstallationGuide30/b_ise_InstallationGuide30_chapter_7.html
Source: Adapted from community discussion — [Removed]
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
300-715 practice, question 231. 355 questions available.
Version 1.0.0. How we source questions