Question 1

Which two methods should a sponsor select to create bulk guest accounts from the sponsor portal? (Choose two.)

Accepted Answer

A)  Known 
B)  Monthly 
C)  Daily 
D)  Imported 
E)  Random 
A)  Known 
B)  Monthly 
C)  Daily 
D)  Imported 
E)  Random A,E

Question 2

What occurs when a Cisco ISE distributed deployment has two nodes and the secondary node is deregistered?

Accepted Answer

A)  The secondary node restarts. 
B)  The primary node restarts. 
C)  Both nodes restart. 
D)  The primary node becomes standalone. 
A)  The secondary node restarts. 
B)  The primary node restarts. 
C)  Both nodes restart. 
D)  The primary node becomes standalone. C

Question 3

An engineer is using the low-impact mode for a phased deployment of Cisco ISE and is trying to connect to the network prior to authentication. Which access will be denied in this deployment?

Accepted Answer

A)  DNS 
B)  DHCP 
C)  EAP 
D)  HTTP 
A)  DNS 
B)  DHCP 
C)  EAP 
D)  HTTP D

Question 4

Which two ports do network devices typically use for CoA? (Choose two.)

Accepted Answer

A)  19005 
B)  443 
C)  3799 
D)  8080 
E)  1700 
A)  19005 
B)  443 
C)  3799 
D)  8080 
E)  1700

Question 5

What service can be enabled on the Cisco ISE node to identify the types of devices connecting to a network?

Accepted Answer

A)  profiling 
B)  central web authentication 
C)  MAB 
D)  posture 
A)  profiling 
B)  central web authentication 
C)  MAB 
D)  posture

Question 6

An engineer is configuring Cisco ISE to reprofile endpoints based only on new requests of INIT-REBOOT and SELECTING message types. Which probe should be used to accomplish this task?

Accepted Answer

A)  DHCP 
B)  DNS 
C)  NMAP 
D)  RADIUS 
A)  DHCP 
B)  DNS 
C)  NMAP 
D)  RADIUS

Question 7

What is the purpose of the ip http server command on a switch?

Accepted Answer

A)  It enables the https server for users for web authentication. 
B)  It enables dot1x authentication on the switch. 
C)  It enables MAB authentication on the switch. 
D)  It enables the switch to redirect users for web authentication. 
A)  It enables the https server for users for web authentication. 
B)  It enables dot1x authentication on the switch. 
C)  It enables MAB authentication on the switch. 
D)  It enables the switch to redirect users for web authentication.

Question 8

A network engineer needs to ensure that the access credentials are not exposed during the 802.1X authentication among components. Which two protocols should be configured to accomplish this task? (Choose two.)

Accepted Answer

A)  PEAP 
B)  EAP-TLS 
C)  EAP-MD5 
D)  EAP-TTLS 
E)  LEAP 
A)  PEAP 
B)  EAP-TLS 
C)  EAP-MD5 
D)  EAP-TTLS 
E)  LEAP

Question 9

Which two components are required for creating a Native Supplicant Profile within a BYOD flow? (Choose two.)

Accepted Answer

A)  Redirect ACL 
B)  Connection Type 
C)  Operating System 
D)  Windows Settings 
E)  iOS Settings 
A)  Redirect ACL 
B)  Connection Type 
C)  Operating System 
D)  Windows Settings 
E)  iOS Settings

Question 10

Which statement about configuring certificates for BYOD is true?

Accepted Answer

A)  The SAN field is populated with the end user name. 
B)  The CN field is populated with the endpoint host name. 
C)  An endpoint certificate is mandatory for the Cisco ISE BYOD. 
D)  An Android endpoint uses EST, whereas other operating systems use SCEP for enrollment. 
A)  The SAN field is populated with the end user name. 
B)  The CN field is populated with the endpoint host name. 
C)  An endpoint certificate is mandatory for the Cisco ISE BYOD. 
D)  An Android endpoint uses EST, whereas other operating systems use SCEP for enrollment.

Question 11

In a standalone Cisco ISE deployment, which two personas are configured on a node? (Choose two.)

Accepted Answer

A)  subscriber 
B)  primary 
C)  administration 
D)  publisher 
E)  policy service 
A)  subscriber 
B)  primary 
C)  administration 
D)  publisher 
E)  policy service

Question 12

Which term refers to an endpoint agent that tries to join an 802.1X-enabled network?

Accepted Answer

A)  EAP server 
B)  authenticator 
C)  supplicant 
D)  client 
A)  EAP server 
B)  authenticator 
C)  supplicant 
D)  client

Question 13

What happens when an internal user is configured with an external identity store for authentication, but an engineer uses the Cisco ISE admin portal to select an internal identity store as the identity source?

Accepted Answer

A)  Authentication is redirected to the internal identity source. 
B)  Authentication is granted. 
C)  Authentication fails. 
D)  Authentication is redirected to the external identity source. 
A)  Authentication is redirected to the internal identity source. 
B)  Authentication is granted. 
C)  Authentication fails. 
D)  Authentication is redirected to the external identity source.

Question 14

Which configuration is required in the Cisco ISE authentication policy to allow Central Web Authentication?

Accepted Answer

A)  MAB and if user not found, continue 
B)  MAB and if authentication failed, continue 
C)  Dot1x and if authentication failed, continue 
D)  Dot1x and if user not found, continue 
A)  MAB and if user not found, continue 
B)  MAB and if authentication failed, continue 
C)  Dot1x and if authentication failed, continue 
D)  Dot1x and if user not found, continue

Question 15

Which three default endpoint identity groups does Cisco ISE create? (Choose three.)

Accepted Answer

A)  endpoint 
B)  unknown 
C)  blacklist 
D)  profiled 
E)  whitelist 
A)  endpoint 
B)  unknown 
C)  blacklist 
D)  profiled 
E)  whitelist

Question 16

What is the minimum certainty factor when creating a profiler policy?

Accepted Answer

A)  the minimum number that a predefined condition provides 
B)  the maximum number that a predefined condition provides 
C)  the minimum number that a device certainty factor must reach to become a member of the profile 
D)  the maximum number that a device certainty factor must reach to become a member of the profile 
A)  the minimum number that a predefined condition provides 
B)  the maximum number that a predefined condition provides 
C)  the minimum number that a device certainty factor must reach to become a member of the profile 
D)  the maximum number that a device certainty factor must reach to become a member of the profile

Question 17

An engineer is working with a distributed deployment of Cisco ISE and needs to configure various network probes to collect a set of attributes from the endpoints on the network. Which node should be used to accomplish this task?

Accepted Answer

A)  policy service 
B)  monitoring 
C)  primary policy administrator 
D)  pxGrid 
A)  policy service 
B)  monitoring 
C)  primary policy administrator 
D)  pxGrid

Question 18

Which supplicant(s) and server(s) are capable of supporting EAP-CHAINING?

Accepted Answer

A)  Cisco Secure Services Client and Cisco Access Control Server 
B)  Cisco AnyConnect NAM and Cisco Identity Service Engine 
C)  Cisco AnyConnect NAM and Cisco Access Control Server 
D)  Windows Native Supplicant and Cisco Identity Service Engine 
A)  Cisco Secure Services Client and Cisco Access Control Server 
B)  Cisco AnyConnect NAM and Cisco Identity Service Engine 
C)  Cisco AnyConnect NAM and Cisco Access Control Server 
D)  Windows Native Supplicant and Cisco Identity Service Engine

Question 19

Which RADIUS attribute is used to dynamically assign the Inactivity active timer for MAB users from the Cisco ISE node?

Accepted Answer

A)  session-timeout 
B)  termination-action 
C)  radius-server timeout 
D)  idle-timeout 
A)  session-timeout 
B)  termination-action 
C)  radius-server timeout 
D)  idle-timeout

Question 20

What should be considered when configuring certificates for BYOD?

Accepted Answer

A)  The SAN field is populated with the end user name. 
B)  The CN field is populated with the endpoint host name. 
C)  An endpoint certificate is mandatory for the Cisco ISE BYOD. 
D)  An Android endpoint uses EST, whereas other operating systems use SCEP for enrollment. 
A)  The SAN field is populated with the end user name. 
B)  The CN field is populated with the endpoint host name. 
C)  An endpoint certificate is mandatory for the Cisco ISE BYOD. 
D)  An Android endpoint uses EST, whereas other operating systems use SCEP for enrollment.

Exam 24: Securing Email with Cisco Email Security Appliance (300-720 SESA)

Which two methods should a sponsor select to create bulk guest accounts from the sponsor portal? (Choose two.)

What occurs when a Cisco ISE distributed deployment has two nodes and the secondary node is deregistered?

An engineer is using the low-impact mode for a phased deployment of Cisco ISE and is trying to connect to the network prior to authentication. Which access will be denied in this deployment?

Which two ports do network devices typically use for CoA? (Choose two.)

What service can be enabled on the Cisco ISE node to identify the types of devices connecting to a network?

An engineer is configuring Cisco ISE to reprofile endpoints based only on new requests of INIT-REBOOT and SELECTING message types. Which probe should be used to accomplish this task?

What is the purpose of the ip http server command on a switch?

A network engineer needs to ensure that the access credentials are not exposed during the 802.1X authentication among components. Which two protocols should be configured to accomplish this task? (Choose two.)

Which two components are required for creating a Native Supplicant Profile within a BYOD flow? (Choose two.)

Which statement about configuring certificates for BYOD is true?

In a standalone Cisco ISE deployment, which two personas are configured on a node? (Choose two.)

Which term refers to an endpoint agent that tries to join an 802.1X-enabled network?

What happens when an internal user is configured with an external identity store for authentication, but an engineer uses the Cisco ISE admin portal to select an internal identity store as the identity source?

Which configuration is required in the Cisco ISE authentication policy to allow Central Web Authentication?

Which three default endpoint identity groups does Cisco ISE create? (Choose three.)

What is the minimum certainty factor when creating a profiler policy?

An engineer is working with a distributed deployment of Cisco ISE and needs to configure various network probes to collect a set of attributes from the endpoints on the network. Which node should be used to accomplish this task?

Which supplicant(s) and server(s) are capable of supporting EAP-CHAINING?

Which RADIUS attribute is used to dynamically assign the Inactivity active timer for MAB users from the Cisco ISE node?

What should be considered when configuring certificates for BYOD?

Supporting Cisco Data Center System Devices (DCTECH)

Cisco Certified Technician Routing & Switching (RSTECH)

Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)

Cisco Certified Network Associate (CCNA)

Managing Industrial Networks with Cisco Networking Technologies (IMINS)

DevNet Associate (DEVASC)

Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR)

Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)

Implementing Cisco SD-WAN Solutions (ENSDWI)

Designing Cisco Enterprise Networks (ENSLD)

Designing Cisco Enterprise Wireless Networks (300-425 ENWLSD)

Implementing Cisco Enterprise Wireless Networks (300-430 ENWLSI)

Automating Cisco Enterprise Solutions (ENAUTO)

Implementing Cisco Service Provider Advanced Routing Solutions (SPRI)

Implementing Cisco Service Provider VPN Services (SPVI)

Designing Cisco Data Center Infrastructure (DCID)

Troubleshooting Cisco Data Center Infrastructure (DCIT)

Implementing Cisco Application Centric Infrastructure (DCACI)

Configuring Cisco MDS 9000 Series Switches (DCSAN)

Implementing Cisco Application Centric Infrastructure - Advanced

Automating Cisco Data Center Solutions (DCAUTO)

Securing Networks with Cisco Firepower (300-710 SNCF)

Implementing and Configuring Cisco Identity Services Engine (300-715 SISE)

Securing the Web with Cisco Web Security Appliance (300-725 SWSA)

Implementing Secure Solutions with Virtual Private Networks (SVPN 300-730)

Automating Cisco Security Solutions (SAUTO)

Implementing Cisco Collaboration Applications (CLICA)

Implementing Cisco Advanced Call Control and Mobility Services (CLASSM)

Implementing Cisco Collaboration Cloud and Edge Solutions

Implementing Cisco Collaboration Conferencing

Automating Cisco Collaboration Solutions (CLAUTO)

Implementing DevOps Solutions and Practices using Cisco Platforms (DEVOPS)

Developing Solutions Using Cisco IoT and Edge Platforms (DEVIOT)

Developing Applications for Cisco Webex and Webex Devices (DEVWBX)

Performing CyberOps Using Core Security Technologies (CBRCOR)

Implementing Cisco Enterprise Network Core Technologies (ENCOR)

Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR)

Implementing and Operating Cisco Data Center Core Technologies (DCCOR)

Implementing and Operating Cisco Security Core Technologies

Implementing Cisco Collaboration Core Technologies (CLCOR)

Developing Applications using Cisco Core Platforms and APIs (DEVCOR)

CCDE Design Written

Deploying Cisco Unified Contact Center Express

Cisco Meraki Solutions Specialist

Securing Cisco Networks with Sourcefire FireAMP Endpoints

Designing Cisco Unified Contact Center Enterprise (UCCED)

Implementing and Supporting Cisco Unified Contact Center Enterprise (UCCEIS)

Cisco Collaboration SaaS Authorization Exam

Cisco Security Architecture for System Engineers

Adopting The Cisco Business Architecture Approach (DTBAA)

Cisco Customer Success Manager (CSM)

Mastering The Cisco Business Architecture Discipline (DTBAD)

Filters