Implementing and Configuring Cisco Identity Services Engine (SISE)355 questions across 36 pages are complete and free, with no account or card.
355 questions in this bank
Free access · progress saved on this device
An administrator is adding a switch to a network that is running Cisco ISE and is only for IP Phones. The phones do not have the ability to authenticate via 802.1X. Which command is needed on each switch port for authentication?
Answer: D
An engineer is configuring a virtual Cisco ISE deployment and needs each persona to be on a different node. Which persona should be configured with the largest amount of storage in this environment?
Answer: A
Definitely A - the Monitoring Node is where all the logging is stored by default, absolutely this must have the largest amount of disk space.
Source: Adapted from community discussion — Totosos1
A network engineer needs to ensure that the access credentials are not exposed during the 802.1X authentication among components. Which two protocols should be configured to accomplish this task? (Choose two.)
Answer: AB
EAP-TTLS is a secure protocol that provides strong encryption for the authentication process, but it does not inherently protect the access credentials from exposure during the 802.1X authentication process. EAP-TTLS requires an inner authentication method to be used in conjunction with it, such as PAP or MSCHAPv2, which can potentially expose the access credentials if they are not properly protected. On the other hand, PEAP and EAP-TLS are designed to protect the access credentials during the authentication process, making them more suitable for this specific requirement.
Source: Adapted from community discussion — zsrite
A network engineer is configuring guest access and notices that when a guest user registers a second device for access, the first device loses access. What must be done to ensure that both devices for a particular user are able to access the guest network simultaneously?
Answer: C
ciscopress page 343: The primary difference between guest types is in how long the accounts are permitted to be active. Default guest types help ISE customers by providing templates, based on the most popular needs from Cisco’s customer research, but every setting is configurable. Different guest types have different settings for how many simultaneous logins may be used, the number of endpoints each guest may register with ISE, and the messaging to use with the guest related account creation and renewal.
Source: Adapted from community discussion — faridh
A Cisco ISE administrator needs to ensure that guest endpoint registrations are only valid for 1 day. When testing the guest policy flow, the administrator sees that the Cisco ISE does not delete the endpoint in the GuestEndpoints identity store after 1 day and allows access to the guest network after that period. Which configuration is causing this problem?
Answer: B
This is about endpoint purge. Not accounts. We could use the elapsed days setting here. So C is correct. https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/admin_guide/b_ise_admin_guide_22/b_ise_admin_guide_22_chapter_01100.html#concept_0776B37A2C3542189950F5DFB1961FA2
Source: Adapted from community discussion — kornalt
A network engineer must enable a profiling probe. The profiling must take details through the Active Directory. Where in the Cisco ISE interface would the engineer enable the probe?
Answer: D
A network administrator is setting up wireless guest access and has been unsuccessful in testing client access. The endpoint is able to connect to the SSID but is unable to gain access to the guest network through the guest portal. What must be done to identify the problem?
Answer: D
An organization is hosting a conference and must make guest accounts for several of the speakers attending. The conference ended two days early but the guest accounts are still being used to access the network. What must be configured to correct this?
Answer: D
The correct answer is - Navigate to the Sponsor Portal and suspend the guest accounts. When a guest account is created, it is assigned to a sponsor group. The sponsor group determines who can approve or deny the guest account. In this case, the guest accounts were created by the sponsor group for the conference. However, the conference has ended, so the guest accounts should no longer be active. To suspend the guest accounts, follow these steps: Log in to Cisco ISE. Navigate to Administration > Guest Access > Guest Accounts. Select the guest accounts that you want to suspend. Click Suspend. Click OK to confirm. Once you have suspended the guest accounts, they will no longer be able to access the network.
Source: Adapted from community discussion — denverfly
An organization is migrating its current guest network to Cisco ISE and has 1000 guest users in the current database. There are no resources to enter this information into the Cisco ISE database manually. What must be done to accomplish this task efficiently?
Answer: B
A customer wants to set up the Sponsor portal and delegate the authentication flow to a third party for added security while using Kerberos. Which database should be used to accomplish this goal?
Answer: D
Kerberos Authentication for the Sponsor Portal You can configure Cisco ISE to use Kerberos to authenticate a sponsor user who is logged onto Windows for access to the sponsor portal. This process uses the Active Directory credentials of the logged in sponsor user in the Kerberos ticket. Kerberos SSO is performed inside the secure tunnel after the browser establishes the SSL connection with Cisco ISE.
Source: Adapted from community discussion — Cnoteone
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
300-715 practice, question 281. 355 questions available.
Version 1.0.0. How we source questions