Ensurepass  QUESTION 71 The NAC Agent v4.9.x uses which ports and protocols to communicate with an ISE Policy Service Node?   A. tcp/8905, http/80, ftp/21 B. tcp/8905, http/80, https/443 C. udp/8905, telnet/23, https/443 D. udp/8906, http/80, https/443   Correct Answer: B     QUESTION 72 Which two are valid ISE posture conditions? (Choose two.)   A. Dictionary B. memberOf C. Profile status D. File E. Service   Correct Answer: DE   Read more [...]
Ensurepass  QUESTION 51 What implementation must be added to the WLC to enable 802.1X and CoA for wireless endpoints?   A. the ISE B. an ACL C. a router D. a policy server   Correct Answer: A     QUESTION 52 What are the initial steps must you perform to add the ISE to the WLC?   A. 1. With a Web browser, establish an HTTP connection to the WLC pod. 2. Navigate to Administration > Authentication > New. 3. Enter server values to begin the configuration. Read more [...]
Ensurepass  QUESTION 61 In the command 'aaa authentication default group tacacs local', how is the word 'default' defined?   A. Command set B. Group name C. Method list D. Login type   Correct Answer: C             QUESTION 62 In an 802.1X authorization process, a network access device provides which three functions? (Choose three.)   A. Filters traffic prior to authentication B. Passes credentials to authentication server Read more [...]
Ensurepass  QUESTION 31 Wireless client supplicants attempting to authenticate to a wireless network are generating excessive log messages. Which three WLC authentication settings should be disabled? (Choose three.)   A. RADIUS Server Timeout B. RADIUS Aggressive-Failover C. Idle Timer D. Session Timeout E. Client Exclusion F. Roaming   Correct Answer: BCD     QUESTION 32 Which two authentication stores are supported to design a wireless network using Read more [...]
Ensurepass  QUESTION 41 In a basic ACS deployment consisting of two servers, for which three tasks is the primary server responsible? (Choose three.)   A. configuration B. authentication C. sensing D. policy requirements E. monitoring F. repudiation   Correct Answer: ABD     QUESTION 42 In a split ACS deployment with primary and secondary servers, which three statements about AAA load handling are true? (Choose three.)   A. During normal operations, Read more [...]
Ensurepass  QUESTION 21 An organization has recently deployed ISE with the latest models of Cisco switches, and it plans to deploy Trustsec to secure its infrastructure. The company also wants to allow different network access policies for different user groups (e.g., administrators). Which solution is needed to achieve these goals?   A. Cisco Security Group Access Policies in order to use SGACLs to control access based on SGTs assigned to different users B. MACsec in Multiple-Host Read more [...]
Ensurepass  QUESTION 11 Which identity store option allows you to modify the directory services that run on TCP/IP?   A. Lightweight Directory Access Protocol B. RSA SecurID server C. RADIUS D. Active Directory   Correct Answer: A     QUESTION 12 Which term describes a software application that seeks connectivity to the network via a network access device?   A. authenticator B. server C. supplicant D. WLC   Correct Answer: C     Read more [...]
Ensurepass  QUESTION 1 A network administrator needs to implement a service that enables granular control of IOS commands that can be executed. Which AAA authentication method should be selected?   A. TACACS+ B. RADIUS C. Windows Active Directory D. Generic LDAP   Correct Answer: A     QUESTION 2 An administrator can leverage which attribute to assign privileges based on Microsoft Active Directory user groups?   A. member of B. group C. class Read more [...]