An engineer is configuring TACACS+ within Cisco ISE for use with a non-Cisco network device. They need to send special attributes in the Access-Accept response to ensure that the users are given the appropriate access. What must be configured to accomplish this'?

• A.TACACS+ command sets to provide appropriate access
• B.custom access conditions for defining the different roles
• C.shell profiles with custom attributes that define the various roles
• D.dACLs to enforce the various access policies for the users

Comment: *

Name: *

Email: *

Verification: *

What gives Cisco ISE an option to scan endpoints for vulnerabilities?

• A.authentication profile
• B.authentication policy
• C.authorization policy
• D.authorization profile

Comment: *

Name: *

Email: *

Verification: *

What does the dot1x system-auth-control command do?

• A.causes a network access switch not to track 802.1x sessions
• B.globally enables 802.1x
• C.enables 802.1x on a network access device interface
• D.causes a network access switch to track 802.1x sessions

Comment: *

Name: *

Email: *

Verification: *

What is a function of client provisioning?

• A.Client provisioning ensures that endpoints receive the appropriate posture agents.
• B.Client provisioning checks a dictionary attribute with a value.
• C.Client provisioning ensures an application process is running on the endpoint.
• D.Client provisioning checks the existence, date, and versions of the file on a client.

Comment: *

Name: *

Email: *

Verification: *

Which two actions occur when a Cisco ISE server device administrator logs in to a device? (Choose two)

• A.The device queries the Cisco ISE authorization server
• B.The device queries the external identity store
• C.The Cisco ISE server queries the external identity store.
• D.The Cisco ISE server queries the internal identity store
• E.The device queries the internal identity store

Comment: *

Name: *

Email: *

Verification: *