A company is attempting to improve their BYOD policies and restrict access based on certain criteri a. The company's subnets are organized by building. Which attribute should be used in order to gain access based on location?

• A.IP address
• B.static group assignment
• C.MAC address
• D.device registration status

Comment: *

Name: *

Email: *

Verification: *

Which default endpoint identity group does an endpoint that does not match any profile in Cisco ISE become a member of?

• A.blacklist
• B.unknown
• C.whitelist
• D.profiled
• E.endpoint

Comment: *

Name: *

Email: *

Verification: *

In which two ways can users and endpoints be classified for TrustSec? (Choose two)

• A.VLAN
• B.SXP
• C.dynamic
• D.QoS
• E.SGACL

Comment: *

Name: *

Email: *

Verification: *

What is needed to configure wireless guest access on the network?

• A.valid user account in Active Directory
• B.endpoint already profiled in ISE
• C.WEBAUTH ACL for redirection
• D.Captive Portal Bypass turned on

Comment: *

Name: *

Email: *

Verification: *

A Cisco ISE engineer is creating certificate authentication profile to be used with machine authentication for the network. The engineer wants to be able to compare the user-presented certificate with a certificate stored in Active Directory. What must be done to accomplish this?

• A.Enable the option for performing binary comparison.
• B.Use MS-CHAPv2 since it provides machine credentials and matches them to credentials stored in Active Directory.
• C.Add the subject alternative name and the common name to the CAP
• D.Configure the user-presented password hash and a hash stored in Active Directory for comparison.

Comment: *

Name: *

Email: *

Verification: *