What must be configured on the Cisco ISE authentication policy for unknown MAC addresses/identities for successful authentication?

• A.pass
• B.reject
• C.drop
• D.continue

Comment: *

Name: *

Email: *

Verification: *

Drag and Drop Question
An engineer needs to configure a compliance policy on Cisco ISE to ensure that the latest encryption software is running on the C drive of all endpoints. Drag and drop the configuration steps from the left into the sequence on the right to accomplish this task.

Correct Answer:

Comment: *

Name: *

Email: *

Verification: *

An administrator is migrating device administration access to Cisco ISE from the legacy TACACS+ solution that used only privilege 1 and 15 access levels. The organization requires more granular controls of the privileges and wants to customize access levels 2-5 to correspond with different roles and access needs. Besides defining a new shell profile in Cisco ISE. what must be done to accomplish this configuration?

• A.Enable the privilege levels in Cisco ISE
• B.Enable the privilege levels in the IOS devices.
• C.Define the command privileges for levels 2-5 in the IOS devices
• D.Define the command privileges for levels 2-5 in Cisco ISE

Comment: *

Name: *

Email: *

Verification: *

An engineer is using Cisco ISE and configuring guest services to allow wireless devices to access the network.
Which action should accomplish this task?

• A.Create the redirect ACL on the WLC and add it to the WLC policy
• B.Create the redirect ACL on the WLC and add it to the Cisco ISE policy.
• C.Create the redirect ACL on Cisco ISE and add it to the WLC policy
• D.Create the redirect ACL on Cisco ISE and add it to the Cisco ISE Policy

Comment: *

Name: *

Email: *

Verification: *

A network engineer has recently configured a remote branch router to authenticate to a centralized Cisco ISE server behind the corporate firewall using TACACS+. After making this configuration change, the engineer opened another SSH session to the router in order to verity that login attempts are now being sent to Cisco ISE, however that login attempt was unsuccessful. There are no connection attempts showing in the TACACS live log in Cisco ISE and the firewall administrator has verified that they see syslog and SNMP traffic destinated for the IP address of Cisco ISE, but no TACACS+ traffic. Which misconfiguration is the cause of the failed login?

• A.The shared secret entered on the router for the Cisco ISE server is incorrect.
• B.The router is missing a route to the Cisco ISE server.
• C.The tacacs source-interface command on the router references the wrong interface.
• D.No hosts have been defined under the aaa server group on the router.

Comment: *

Name: *

Email: *

Verification: *