Ensurepass    QUESTION 111 In Cisco ISE, which probe must be enabled to collect profiling data using Device Sensor?   A. RADIUS B. SNMPQuery C. SNMPTrap D. Network Scan E. Syslog   Correct Answer: A     QUESTION 112 Which two profile attributes can be collected by a Cisco Catalyst Switch that supports Device Sensor? (Choose two.)   A. LLDP agent information B. user agent C. DHCP options D. open ports E. operating system F. trunk Read more [...]
Ensurepass  QUESTION 91 Which RADIUS attribute is used primarily to differentiate an IEEE 802.1x request from a Cisco MAB request?   A. RADIUS Attribute (5) NAS-Port B. RADIUS Attribute (6) Service-Type C. RADIUS Attribute (7) Framed-Protocol D. RADIUS Attribute (61) NAS-Port-Type   Correct Answer: B     QUESTION 92 Which authorization method is the Cisco best practice to allow endpoints access to the Apple App store or Google Play store with Cisco WLC software Read more [...]
Ensurepass  QUESTION 101 A network administrator needs to determine the ability of existing network devices to deliver key BYOD services. Which tool will complete a readiness assessment and outline hardware and software capable and incapable devices?   A. Prime Infrastructure B. Network Control System C. Cisco Security Manager D. Identity Services Engine   Correct Answer: A     QUESTION 102 Which EAP method uses a modified version of the MS-CHAP authentication Read more [...]
Ensurepass  QUESTION 71 The NAC Agent v4.9.x uses which ports and protocols to communicate with an ISE Policy Service Node?   A. tcp/8905, http/80, ftp/21 B. tcp/8905, http/80, https/443 C. udp/8905, telnet/23, https/443 D. udp/8906, http/80, https/443   Correct Answer: B     QUESTION 72 Which two are valid ISE posture conditions? (Choose two.)   A. Dictionary B. memberOf C. Profile status D. File E. Service   Correct Answer: DE   Read more [...]
Ensurepass  QUESTION 81 Which three are required steps to enable SXP on a Cisco ASA? (Choose three).   A. configure AAA authentication B. configure password C. issue the aaa authorization command aaa-server group command D. configure a peer E. configure TACACS F. issue the cts sxp enable command Correct Answer: BDF     QUESTION 82 Which three network access devices allow for static security group tag assignment? (Choose three.)   A. intrusion prevention Read more [...]
Ensurepass  QUESTION 61 In the command 'aaa authentication default group tacacs local', how is the word 'default' defined?   A. Command set B. Group name C. Method list D. Login type   Correct Answer: C             QUESTION 62 In an 802.1X authorization process, a network access device provides which three functions? (Choose three.)   A. Filters traffic prior to authentication B. Passes credentials to authentication server Read more [...]
Ensurepass  QUESTION 51 What implementation must be added to the WLC to enable 802.1X and CoA for wireless endpoints?   A. the ISE B. an ACL C. a router D. a policy server   Correct Answer: A     QUESTION 52 What are the initial steps must you perform to add the ISE to the WLC?   A. 1. With a Web browser, establish an HTTP connection to the WLC pod. 2. Navigate to Administration > Authentication > New. 3. Enter server values to begin the configuration. Read more [...]
Ensurepass  QUESTION 41 In a basic ACS deployment consisting of two servers, for which three tasks is the primary server responsible? (Choose three.)   A. configuration B. authentication C. sensing D. policy requirements E. monitoring F. repudiation   Correct Answer: ABD     QUESTION 42 In a split ACS deployment with primary and secondary servers, which three statements about AAA load handling are true? (Choose three.)   A. During normal operations, Read more [...]
Ensurepass  QUESTION 31 Wireless client supplicants attempting to authenticate to a wireless network are generating excessive log messages. Which three WLC authentication settings should be disabled? (Choose three.)   A. RADIUS Server Timeout B. RADIUS Aggressive-Failover C. Idle Timer D. Session Timeout E. Client Exclusion F. Roaming   Correct Answer: BCD     QUESTION 32 Which two authentication stores are supported to design a wireless network using Read more [...]
Ensurepass  QUESTION 21 An organization has recently deployed ISE with the latest models of Cisco switches, and it plans to deploy Trustsec to secure its infrastructure. The company also wants to allow different network access policies for different user groups (e.g., administrators). Which solution is needed to achieve these goals?   A. Cisco Security Group Access Policies in order to use SGACLs to control access based on SGTs assigned to different users B. MACsec in Multiple-Host Read more [...]
Ensurepass  QUESTION 11 Which identity store option allows you to modify the directory services that run on TCP/IP?   A. Lightweight Directory Access Protocol B. RSA SecurID server C. RADIUS D. Active Directory   Correct Answer: A     QUESTION 12 Which term describes a software application that seeks connectivity to the network via a network access device?   A. authenticator B. server C. supplicant D. WLC   Correct Answer: C     Read more [...]
Ensurepass QUESTION 1 A network administrator needs to implement a service that enables granular control of IOS commands that can be executed. Which AAA authentication method should be selected?   A. TACACS+ B. RADIUS C. Windows Active Directory D. Generic LDAP   Correct Answer: A     QUESTION 2 An administrator can leverage which attribute to assign privileges based on Microsoft Active Directory user groups?   A. member of B. group C. class D. Read more [...]