Question No: 16

What type of identity group is the Blacklist identity group?

A. endpoint

B. user

C. blackhole

D. quarantine

E. denied systems

Question No: 17

Refer to the exhibit.

Which statement about the authentication protocol used in the configuration is true?

A. There is separate authentic and authorization request packet.

B. The authentication request contains only a password.

C. The authentication and authorization requests are grouped in a single packet.

D. The authentication request contains only a username.

Question No: 18

Which two statements about administrative access to the Cisco Secure ACS SE are true? (Choose two.)

A. The Cisco Secure ACS SE supports command-line connections through a serial-port connection.

B. For GUI access, an administrative GUI user must be created by using the add-guiadmin command.

C. The Cisco Secure ACS SE supports command-line connections through an Ethernet interface.

D. An ACL-based policy must be configured to allow administrative-user access.

E. GUI access to the Cisco Secure ASC SE is not supported.

Question No: 19

Which two options are EAP methods supported by Cisco ISE? (Choose two.)

A. EAP-FAST

B. EAP-TLS

C. EAP-MS-CHAPv2

D. EAP-GTC

Question No: 20

What three changes require restarting the application service on an ISE node? (Choose three.)

A. Registering a node.

B. Changing the primary node to standalone.

C. Promoting the administration node.

D. Installing the root CA certificate.

E. Changing the guest portal default port settings.

F. Adding a network access device.

Question No: 21

Which functionality does the Cisco ISE self-provisioning flow provide?

A. It provides support for native supplicants, allowing users to connect devices directly to the network.

B. It provides the My Devices portal, allowing users to add devices to the network.

C. It provides support for users to install the Cisco NAC agent on enterprise devices.

D. It provides self-registration functionality to allow guest users to access the network.

Question No: 22

An engineer must limit the configuration parameters that can be executed on the Cisco ASAs deployed throughout the network. Which command allows the engineer to complete this task?

A. AAA-server tacacs1(inside) host 10.5.109.18

$3cr37 timeout2

!

aaa authorization command tacacs1

B. AAA-server tacacs1(inside) host 10.5.109.18

$3cr37 timeout2

!

aaa authentication ssh console tacacs1

C. AAA-server tacacs1(inside) host 10.5.109.18

$3cr37 timeout2

!

aaa authorization exec authentication-server

D. AAA-server tacacs1(inside) host 10.5.109.18

$3cr37 timeout2

!

aaa authentication exclude ssh

Question No: 23

In a multi-node ISE deployment, backups are not working on the MnT node. Which ISE CLI option would help mitigate this issue?

A. repository

B. ftp-url

C. application-bundle

D. collector

Question No: 24

Which two options are valid for configuring IEEE 802.1AE MACSec between switches in a TrustSec network? (Choose two.)

A. manually on links between supported switches

B. in the Cisco Identity Services Engine

C. in the global configuration of a TrustSec non-seed switch

D. dynamically on links between supported switches

E. in the Cisco Secure Access Control System

F. in the global configuration of a TrustSec seed switch