Latest Exam Prep

NO.26 In which two ways can users and endpoints be classified for TrustSec?
(Choose Two.)

NO.27 An administrator for a small network is configuring Cisco ISE to provide dynamic network access to users. Management needs Cisco ISE to not automatically trigger a CoA whenever a profile change is detected. Instead, the administrator needs to verify the new profile and manually trigger a CoA.
What must be configuring in the profiler to accomplish this goal?

NO.28 An engineer is working with a distributed deployment of Cisco ISE and needs to configure various network probes to collect a set of attributes from the used to accomplish this task?

NO.29 An administrator is manually adding a device to a Cisco ISE identity group to ensure that it is able to access the network when needed without authentication Upon testing, the administrator notices that the device never hits the correct authorization policy line using the condition EndPoints LogicalProfile EQUALS static_list Why is this occurring?

NO.30 An organization wants to implement 802.1X and is debating whether to use PEAP-MSCHAPv2 or PEAP-EAP-TLS for authentication. Drag the characteristics on the left to the corresponding protocol on the right.

NO.31 An administrator is attempting to replace the built-in self-signed certificates on a Cisco ISE appliance. The CA is requesting some information about the appliance in order to sign the new certificate. What must be done in order to provide the CA this information?

NO.32 Refer to the exhibit Which switch configuration change will allow only one voice and one data endpoint on each port?

NO.33 What is the condition that a Cisco ISE authorization policy cannot match?

NO.34 An administrator is configuring a Cisco ISE posture agent in the client provisioning policy and needs to ensure that the posture policies that interact with clients are monitored, and end users are required to comply with network usage rules Which two resources must be added in Cisco ISE to accomplish this goal? (Choose two)

NO.35 What must be configured on the WLC to configure Central Web Authentication using Cisco ISE and a WLC?

NO.36 Which port does Cisco ISE use for native supplicant provisioning of a Windows laptop?

NO.37 An administrator is migrating device administration access to Cisco ISE from the legacy TACACS+ solution that used only privilege 1 and 15 access levels. The organization requires more granular controls of the privileges and wants to customize access levels 2-5 to correspond with different roles and access needs. Besides defining a new shell profile in Cisco ISE. what must be done to accomplish this configuration?

NO.38 Drag the Cisco ISE node types from the left onto the appropriate purposes on the right.

NO.39 Drag the descriptions on the left onto the components of 802.1X on the right.

NO.40 An engineer is enabling a newly configured wireless SSID for tablets and needs visibility into which other types of devices are connecting to it. What must be done on the Cisco WLC to provide this information to Cisco ISE9

NO.41 Which two ports must be open between Cisco ISE and the client when you configure posture on Cisco ISE? (Choose two).