Drag and Drop Question
Drag the Cisco ISE node types from the left onto the appropriate purposes on the right.

Correct Answer:

Explanation:
Monitoring = provides advanced monitoring and troubleshooting tools that you can use to effectively manage your network and resources Policy Service = provides network access, posture, guest access, client provisioning, and profiling services. This persona evaluates the policies and makes all the decisions.
Administration = manages all system-related configuration and configurations that relate to functionality such as authentication, authorization, auditing, and so on pxGrid = shares context-sensitive information from Cisco ISE to subscribers
https://www.cisco.com/c/en/us/td/docs/security/ise/1-
4/admin_guide/b_ise_admin_guide_14/b_ise_admin_guide_14_chapter_011.html#ID57

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit. Which two configurations are needed on a catalyst switch for it to be added as a network access device in a Cisco ISE that is being used for 802.1X authentications?
(Choose two)

• A.tacacs server ISE1
  address ipv4 192.168.255.15 auth-port 1645 acct-port 1646
  key 7 0607542D5F4A0213034C1E0A1F0F2E2122733F3429000D12055A5A52
• B.radius server ISE1
  address ipv4 192.168.255.19 auth-port 1645 acct-port 1646
  key 7 0607542D5F4A0213034C1E0A1F0F2E2122733F3429000D12055A5A52
• C.radius server ISE1
  address ipv4 192.168.255.16 auth-port 1645 acct-port 1646
  key 7 0607542D5F4A0213034C1E0A1F0F2E2122733F3429000D12055A5A52
• D.tacacs server ISE1
  address ipv4 192.168.255.18 auth-port 1645 acct-port 1646
  key 7 0607542D5F4A0213034C1E0A1F0F2E2122733F3429000D12055A5A52
• E.radius server ISE1
  address ipv4 192.168.255.17 auth-port 1645 acct-port 1646
  key 7 0607542D5F4A0213034C1E0A1F0F2E2122733F3429000D12055A5A52

Comment: *

Name: *

Email: *

Verification: *

If a user reports a device lost or stolen, which portal should be used to prevent the device from accessing the network while still providing information about why the device is blocked?

• A.Client Provisioning
• B.BYOD
• C.Guest
• D.Blacklist

Comment: *

Name: *

Email: *

Verification: *

What is an advantage of using EAP-TLS over EAP-MS-CHAPv2 for client authentication?

• A.EAP-TLS uses a username and password for authentication to enhance security, while EAP-MS-CHAPv2 does not.
• B.EAP-TLS uses a device certificate for authentication to enhance security, while EAP-MS-CHAPv2 does not.
• C.EAP-TLS uses multiple forms of authentication, while EAP-MS-CHAPv2 only uses one.
• D.EAP-TLS secures the exchange of credentials, while EAP-MS-CHAPv2 does not.

Comment: *

Name: *

Email: *

Verification: *

When setting up profiling in an environment using Cisco ISE for network access control, an organization must use non-proprietary protocols for collecting the information at layer 2. Which two probes will provide this information without forwarding SPAN packets to Cisco ISE? {Choose two.)

• A.DHCP SPAN probe
• B.SNMP query probe
• C.NetFlow probe
• D.RADIUS probe
• E.DNS probe

Comment: *

Name: *

Email: *

Verification: *