<< Prev Question Next Question >>

Question 53/150

In a split ACS deployment with primary and secondary servers, which three statements about AAA load handling are true? (Choose three.)

LEAVE A REPLY

Your email address will not be published. Required fields are marked *

Question List (150q)
Question 1: What are the initial steps must you perform to add the ISE t...
Question 2: When you add a new PSN for guest access services, which two ...
Question 3: Wireless client supplicants attempting to authenticate to a ...
Question 4: Which two profile attributes can be collected by a Cisco Wir...
Question 5: What are two client-side requirements of the NAC Agent and N...
Question 6: Which administrative role has permission to assign Security ...
Question 7: Refer to the exhibit. (Exhibit) Which URL must you enter in ...
Question 8: In the command 'aaa authentication default group tacacs loca...
Question 9: What is the effect of the ip http secure-server command on a...
Question 10: In AAA, what function does authentication perform?...
Question 11: Which EAP method uses a modified version of the MS-CHAP auth...
Question 12: Which three pieces of information can be found in an authent...
Question 13: Which two conditions are valid when configuring ISE for post...
Question 14: Which two statements about administrative access to the ACS ...
Question 15: Which time allowance is the minimum that can be configured f...
Question 16: When RADIUS NAC and AAA Override are enabled for a WLC on a ...
Question 17: Which two statements about MAB are true? (Choose two.)...
Question 18: Which two EAP types require server side certificates? (Choos...
Question 19: A network administrator needs to determine the ability of ex...
Question 20: Refer to the exhibit. (Exhibit) If the given configuration i...
Question 21: You are installing Cisco ISE on nodes that will be used in a...
Question 22: What steps must you perform to deploy a CA-signed identify c...
Question 23: Which five portals are provided by PSN? (Choose five.)...
Question 24: In a multi-node ISE deployment, backups are not working on t...
Question 25: A properly configured Cisco ISE Policy Service node is not r...
Question 26: In Cisco ISE, which two actions can be taken based on matchi...
Question 27: Which three network access devices allow for static security...
Question 28: Which two are valid ISE posture conditions? (Choose two.)...
Question 29: Which type of access list is the most scalable that Cisco IS...
Question 30: Which functionality does the Cisco ISE self-provisioning flo...
Question 31: When you select Centralized Web Auth in the ISE Authorizatio...
Question 32: Which two Active Directory authentication methods are suppor...
Question 33: Where is client traffic decrypted in a controller-based wire...
Question 34: Your guest-access wireless network is experiencing degraded ...
Question 35: Cisco 802.1X phasing enables flexible deployments through th...
Question 36: Changes were made to the ISE server while troubleshooting, a...
Question 37: Where must periodic re-authentication be configured to allow...
Question 38: In Cisco ISE, which probe must be enabled to collect profili...
Question 39: Which three posture states can be used for authorization rul...
Question 40: A network administrator must enable which protocol extension...
Question 41: You have configured a Cisco ISE 1.2 deployment for self-regi...
Question 42: In the command 'aaa authentication default group tacacs loca...
Question 43: Refer to the exhibit. (Exhibit) The links outside the TrustS...
Question 44: Which feature of Cisco ASA allows VPN users to be postured a...
Question 45: You enabled the guest session limit feature on the Cisco ISE...
Question 46: What is a required configuration step for an 802.1X capable ...
Question 47: What is a requirement for posture administration services in...
Question 48: Certain endpoints are missing DHCP profiling data. Which opt...
Question 49: Which three statements about the Cisco ISE profiler are true...
Question 50: Which RADIUS attribute is used primarily to differentiate an...
Question 51: What is the default posture status for non-agent capable dev...
Question 52: Which identity store option allows you to modify the directo...
Question 53: In a split ACS deployment with primary and secondary servers...
Question 54: From which location can you run reports on endpoint profilin...
Question 55: What is the purpose of the Cisco ISE Guest Service Sponsor P...
Question 56: Which two statements about Cisco NAC Agents that are install...
Question 57: Cisco ISE distributed deployments support which three featur...
Question 58: A network administrator must enable which protocol to utiliz...
Question 59: Which statement about Cisco Management Frame Protection is t...
Question 60: How frequently does the Profiled Endpoints dashlet refresh d...
Question 61: Which three statements about the Cisco wireless IPS solution...
Question 62: Refer to the exhibit. (Exhibit) You are configuring permissi...
Question 63: Which network component would issue the CoA?...
Question 64: A network engineer is configuring HTTP based CWA on a switch...
Question 65: Under which circumstance would an inline posture node be dep...
Question 66: Which set of commands allows IPX inbound on all interfaces?...
Question 67: When MAB is configured, how often are ports reauthenticated ...
Question 68: What user rights does an account need to join ISE to a Micro...
Question 69: What is a required step when you deploy dynamic VLAN and ACL...
Question 70: DRAG DROP Select and Place: (Exhibit)...
Question 71: What are the initial steps to configure an ACS as a TACACS s...
Question 72: After an endpoint has completed authentication with MAB, a s...
Question 73: Which two switchport commands enable MAB and allow non-802.1...
Question 74: Which three personas can a Cisco ISE assume in a deployment?...
Question 75: Which two identity databases are supported when PEAP-MSCHAPv...
Question 76: Which two Cisco ISE administration options are available in ...
Question 77: Which command can check a AAA server authentication for serv...
Question 78: Which setting provides the best security for a WLAN and auth...
Question 79: Which error in a redirect ACL can cause the redirection of a...
Question 80: Which configuration must you perform on a switch to deploy C...
Question 81: Which Cisco ISE feature can differentiate a corporate endpoi...
Question 82: Which command configures console port authorization under li...
Question 83: What is another term for 802.11i wireless network security?...
Question 84: Which two attributes must match between two Cisco ASA device...
Question 85: Which two authentication stores are supported to design a wi...
Question 86: Which two statements about administrative access to the Cisc...
Question 87: When RADIUS NAC and AAA Override are enabled for WLC on a Ci...
Question 88: Which three host modes support MACsec? (Choose three.)...
Question 89: Which two profile attributes can be collected by a Cisco Cat...
Question 90: Which profiling capability allows you to gather and forward ...
Question 91: The NAC Agent uses which port and protocol to send discovery...
Question 92: Which model does Cisco support in a RADIUS change of authori...
Question 93: Which advanced authentication setting is needed to allow an ...
Question 94: What three changes require restarting the application servic...
Question 95: Refer to the exhibit. (Exhibit) You are troubleshooting RADI...
Question 96: Which protocol sends authentication and accounting in differ...
Question 97: Which command enables static PAT for TCP port 25?...
Question 98: In an 802.1X authorization process, a network access device ...
Question 99: Which statement about the Cisco ISE BYOD feature is true?...
Question 100: Which statement about IOS accounting is true?...
Question 101: You are troubleshooting wired 802.1X authentications and see...
Question 102: Which three algorithms should be avoided due to security con...
Question 103: When you configure an endpoint profiling policy rule, which ...
Question 104: Which two options are valid for configuring IEEE 802.1AE MAC...
Question 105: An administrator can leverage which attribute to assign priv...
Question 106: Which two portals can be configured to use portal FQDN? (Cho...
Question 107: Which three components comprise the Cisco ISE profiler? (Cho...
Question 108: What is the function of the SGACL policy matrix on a Cisco T...
Question 109: During client provisioning on a Mac OS X system, the client ...
Question 110: Which two fields are characteristics of IEEE 802.1AE frame? ...
Question 111: An organization has recently deployed ISE with the latest mo...
Question 112: In a basic ACS deployment consisting of two servers, for whi...
Question 113: The corporate security policy requires multiple elements to ...
Question 114: Which option is required for inline security group tag propa...
Question 115: Which Cisco ISE 1.x protocol can be used to control admin ac...
Question 116: Which three statements describe differences between TACACS+ ...
Question 117: The NAC Agent v4.9.x uses which ports and protocols to commu...
Question 118: Which command in the My Devices Portal can restore a previou...
Question 119: Where would a Cisco ISE administrator define a named ACL to ...
Question 120: Where is dynamic SGT classification configured?...
Question 121: In the command 'aaa authentication default group tacacs loca...
Question 122: Security Group Access requires which three syslog messages t...
Question 123: Which statement about a distributed Cisco ISE deployment is ...
Question 124: Which two types of client provisioning resources are used fo...
Question 125: An organization has recently deployed ISE with Trustsec capa...
Question 126: What EAP method supports mutual certificate-based authentica...
Question 127: Which option restricts guests from connecting more than one ...
Question 128: Which three are required steps to enable SXP on a Cisco ASA?...
Question 129: Which command is useful when troubleshooting AAA Authenticat...
Question 130: Changes were made to the ISE server while troubleshooting, a...
Question 131: What are two possible reasons why a scheduled nightly backup...
Question 132: Which statement about Cisco ISE BYOD is true?...
Question 133: What steps must you perform to deploy a CA-signed identity c...
Question 134: Which two Cisco Catalyst switch interface commands allow onl...
Question 135: What is the first step that occurs when provisioning a wired...
Question 136: Which default identity source is used by the MyDevices_Porta...
Question 137: What is a feature of Cisco WLC and IPS synchronization?...
Question 138: Which effect does the ip http secure-server command have on ...
Question 139: Which two services are included in the Cisco ISE posture ser...
Question 140: Which authorization method is the Cisco best practice to all...
Question 141: You are configuring SGA on a network device that is unable t...
Question 142: A network administrator needs to implement a service that en...
Question 143: Refer to the exhibit. (Exhibit) Which three statements about...
Question 144: Which two identity store options allow you to authorize base...
Question 145: Which statement about system time and NTP server configurati...
Question 146: What implementation must be added to the WLC to enable 802.1...
Question 147: Which action must an administrator take after joining a Cisc...
Question 148: A user is on a wired connection and the posture status is no...
Question 149: Which debug command on a Cisco WLC shows the reason that a c...
Question 150: Which term describes a software application that seeks conne...