An administrator wants to configure network device administration and is trying to decide whether to use TACACS+ or RADIUS. A reliable protocol must be used that can check command authorization. Which protocol meets these requirements and why?

• A.TACACS+ because it runs over TCP
• B.RADIUS because it runs over UDP
• C.RADIUS because it runs over TCP.
• D.TACACS+ because it runs over UDP

Comment: *

Name: *

Email: *

Verification: *

An administrator is configuring a new profiling policy in Cisco ISE for a printer type that is missing from the profiler feed The logical profile Printers must be used in the authorization rule and the rule must be hit. What must be done to ensure that this configuration will be successful^

• A.Enable the EndPoints:EndPointPolicy condition in the authorization policy.
• B.Add the new profiling policy to the logical profile Printers.
• C.Create a new logical profile for the new printer policy
• D.Modify the profiler conditions to ensure that it goes into the correct logical profile

Comment: *

Name: *

Email: *

Verification: *

Drag the Cisco ISE node types from the left onto the appropriate purposes on the right.

Correct Answer:

Explanation

Monitoring = provides advanced monitoring and troubleshooting tools that you can use to effectively manage your network and resources Policy Service = provides network access, posture, guest access, client provisioning, and profiling services.
This persona evaluates the policies and makes all the decisions.
Administration = manages all system-related configuration and configurations that relate to functionality such as authentication, authorization, auditing, and so on pxGrid = shares context-sensitive information from Cisco ISE to subscribers
https://www.cisco.com/c/en/us/td/docs/security/ise/1-4/admin_guide/b_ise_admin_guide_14/b_ise_admin_guide

Comment: *

Name: *

Email: *

Verification: *

There are several devices on a network that are considered critical and need to be placed into the ISE database and a policy used for them. The organization does not want to use profiling. What must be done to accomplish this goal?

• A.Enter the IP address in the correct Endpoint Identity Group.
• B.Enter the IP address in the correct Logical Profile.
• C.Enter the MAC address in the correct Endpoint Identity Group.
• D.Enter the MAC address in the correct Logical Profile.

Comment: *

Name: *

Email: *

Verification: *

An engineer builds a five-node distributed Cisco ISE deployment The first two deployed nodes are responsible for the primary and secondary administration and monitoring personas Which persona configuration is necessary to have the remaining three Cisco ISE nodes serve as dedicated nodes in the Cisco ISE cube that is responsible only for handling the RADIUS and TACACS+ authentication requests, identity lookups, and policy evaluation?
A)

B)

C)

D)

• A.Option B
• B.Option A
• C.Option C
• D.Option D

Comment: *

Name: *

Email: *

Verification: *