Implementing and Configuring Cisco Identity Services Engine
Read questions, check verified answers and discuss the reasoning. Use reading options to shape your revision, or switch to the simulator for timed practice.
44 questions in this view
An engineer is configuring TACACS+ device administration with per‑command authorization on a Catalyst switch. In Cisco ISE, the device administration policy set is active and TACACS+ authentication succeeds. Two command sets and shell profiles are mapped per AD group, command authorization works and operators are correctly blocked from configure terminal, however administrators have full access to configuration mode. Cisco ISE TACACS+ live logs show authentication and authorization events, but no command accounting records. Which configuration action must be done to meet the requirement?
Select an answer above, then submit your vote. Reading or practicing does not cast a vote.
An engineer must configure a new authorization policy in Cisco ISE for wireless users. The policy must match a specific SSID name and use standard RADIUS attributes. The wireless LAN controller was already configured. Which RADIUS attribute must be configured to meet the requirement?
Select an answer above, then submit your vote. Reading or practicing does not cast a vote.
An administrator needs to add a new third party network device to be used with Cisco ISE for Guest and BYOD authorizations. Which two features must be configured under Network Device Profile to achieve this? (Choose two.)
Select an answer above, then submit your vote. Reading or practicing does not cast a vote.
Which RADIUS attribute type is reserved for vendor-specific information?
Select an answer above, then submit your vote. Reading or practicing does not cast a vote.
Refer to the exhibit. An engineer administers a Cisco ISE deployment that includes endpoints that are profiled. Security policy mandates that when an endpoint's profile changes, the access policies must be updated immediately, without requiring the endpoint to disconnect and reconnect to the network. Which CoA type must be implemented to meet the requirement?
Select an answer above, then submit your vote. Reading or practicing does not cast a vote.
An administrator must provide wired network access to unidentified Cisco devices that fail 802.1X authentication. Cisco ISE profiling services must be configured to gather Cisco Discovery Protocol and LLDP endpoint information from a Cisco switch. These configurations were performed:
• configured switches to accept SNMP queries from Cisco ISE
• enabled Cisco Discovery Protocol and LLDP on the switches
• added the switch as a NAD to Cisco ISE
What must be enabled to complete the configuration?
Select an answer above, then submit your vote. Reading or practicing does not cast a vote.