Question 271 · 355 in bank
What is a method for transporting security group tags throughout the network?
Show answer
Answer: B
Implementing and Configuring Cisco Identity Services Engine (SISE)355 questions across 36 pages are complete and free, with no account or card.
355 questions in this bank
Free access · progress saved on this device
What is a method for transporting security group tags throughout the network?
Answer: B
What is needed to configure wireless guest access on the network?
Answer: B
The word Guest refers to the users that are not part of your organisation,, you can not have them on AD. Either you auto enrol them or use codes and temp usernames for access. In this context the ACL will be needed to redirect them to the self registration portal
Source: Adapted from community discussion — [Removed]
Which two methods should a sponsor select to create bulk guest accounts from the sponsor portal? (Choose two.)
Answer: DE
What is a valid guest portal type?
Answer: B
The provided answer is correct. There are three default Guest portals: Hotspot Guest portal: Network access is granted without requiring any credentials. Usually, an Acceptance of User Policy (AUP) must be accepted before network access is granted. Sponsored-Guest portal: Network access is granted by a sponsor who creates accounts for guests, and provides the guest with login credentials. Self-Registered Guest portal: Guests can create their own account credentials, and may need sponsor approval before they are granted network access. https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ISE_admin_guide_24/m_ise_guest.html#ID32
Source: Adapted from community discussion — IlPerdan0
What is the purpose of the ip http server command on a switch?
Answer: D
Which advanced option within a WLAN must be enabled to trigger Central Web Authentication for Wireless users on AireOS controller?
Answer: D
Which configuration is required in the Cisco ISE authentication policy to allow Central Web Authentication?
Answer: A
Step 2. Expand Authentication policy. For the MAB rule (match on wired or wireless MAB), expand Options, and choose the CONTINUE option in case you see 'If User not found'. The answer is A. https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213920-central-web-authentication-cwa-on-cata.html
Source: Adapted from community discussion — [Removed]
An engineer is configuring web authentication using non-standard ports and needs the switch to redirect traffic to the correct port. Which command should be used to accomplish this task?
Answer: A
the redirect to ISE is standard on port 8443 (already a non-standard port) the reason it does that is because ISE is sending the radius packet containing the redirect URL containing the port as per best practices on the port you need to allow access to ISE like permit tcp any host eq 8443 if you want to change this to a different port you need to allow this communicaiton to ISE using the different port personally I would't really use option A because it opens up too much but it does the trick the other answers are not related to web authentication
Source: Adapted from community discussion — MORTND
An engineer is using Cisco ISE and configuring guest services to allow wireless devices to access the network. Which action accomplishes this task?
Answer: D
An engineer is configuring web authentication and needs to allow specific protocols to permit DNS traffic. Which type of access list should be used for this configuration?
Answer: A
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
300-715 practice, question 271. 355 questions available.
Version 1.0.0. How we source questions