<< Prev Question Next Question >>

Question 86/110

Scenario:
Currently, many users are expehecing problems using their AnyConnect NAM supplicant to login to the network. The rr desktop support staff have already examined and vehfed the AnyConnect NAM configuration is correct.
In this simulation, you are tasked to examine the various ISE GUI screens to determine the ISE current configurations to help isolate the problems. Based on the current ISE configurations, you will need to answer three multiple choice questions.
To access the ISE GUI, click on the ISE icon in the topology diagram to access the ISE GUI.
Not all the ISE GUI screen are operational in this simulation and some of the ISE GUI operations have been reduced in this simulation.
Not all the links on each of the ISE GUI screen works, if some of the links are not working on a screen, click Home to go back to the Home page first. From the Home page, you can access all the required screens.
To view some larger GUI screens, use the simulation window scroll bars. Some of the larger GUI screens only shows partially but will include all information required to complete this simulation.


Which two of the following statements are correct? (Choose two.)

LEAVE A REPLY

Your email address will not be published. Required fields are marked *

Question List (110q)
Question 1: Which of these allows you to add event actions globally base...
Question 2: From which location can you run reports on endpoint profilin...
Question 3: What are two actions that can occur when an 802.1X-enabled p...
Question 4: Within the authentications view of Cisco ISE, one of the rec...
Question 5: Which certificate authority is used for identity source real...
Question 6: Under which circumstance would an inline posture node be dep...
Question 7: In the command 'aaa authentication default group tacacs loca...
Question 8: What endpoint operating system provides native support for t...
Question 9: Which statement about single-SSID environment is true?...
Question 10: Which two simple posture conditions are valid?...
Question 11: Which of these is a configurable Cisco IOS feature that trig...
Question 12: Which method does Cisco prefer to securely deploy guest wire...
Question 13: Which network component would issue the CoA?...
Question 14: Which definition of "posturing" as it relates to a general n...
Question 15: In an 802. 1X deployment what two components are responsible...
Question 16: What steps must you perform to deploy a CA-signed identity c...
Question 17: Which setting provides the best security for a WLAN and auth...
Question 18: A security engineer must provision dynamic TrustSec classifi...
Question 19: What are two access methods valid for authentication and aut...
Question 20: Drag and Drop Question Drag and drop each posture assessment...
Question 21: Which remediation type ensures that Automatic Updates config...
Question 22: What is a requirement for posture administration services in...
Question 23: What are two possible reasons why a scheduled nightly backup...
Question 24: Which feature of Cisco ASA allows VPN users to be postured a...
Question 25: When Cisco IOS IPS signatures are being tuned, how is the Ta...
Question 26: Within a BYOD environment, when employees add devices using ...
1 commentQuestion 27: Which interface-level command is needed to turn on dot1x aut...
Question 28: Which option is a recommended agent for guest posture assess...
Question 29: What two commands can show you the Authentication informatio...
Question 30: What sends the redirect ACL that is configured in the author...
Question 31: Which three components comprise the Cisco ISE profiler? (Cho...
Question 32: What event would you expect to see in the details for an EAP...
Question 33: An engineer is designing a BYOD environment utilizing Cisco ...
Question 34: Select the menu item that allow you to add an identity certi...
Question 35: Cisco ISE distributed deployments support which three featur...
Question 36: Which description of the purpose of the Continue option in a...
Question 37: When configuring the Auto Update feature for Cisco IOS IPS, ...
Question 38: If the user in non-compliant state and want to Get out of qu...
Question 39: Which two options are EAP methods supported by Cisco ISE? (C...
Question 40: Which internal Cisco ISE component reduces demand on JVM mem...
Question 41: Which two options are advantages of using the Cisco IOS Devi...
Question 42: Which model does Cisco support in a RADIUS change of authori...
Question 43: Which two protocols does Cisco Prime Infrastructure use for ...
Question 44: Which technology performs CoA support Posture Service?...
Question 45: What are the initial steps to configure an ACS as a TACACS s...
Question 46: In an ISE 1.3 environment which two remediation types are su...
Question 47: Which protocol does Cisco ISE use to request certificates fo...
Question 48: Which two options are valid for configuring IEEE 802.1AE MAC...
Question 49: A network administrator wants to use dynamic VLAN assignment...
Question 50: Which statement about Cisco NAC web agent is true?...
Question 51: A network administrator needs to determine the ability of ex...
Question 52: Which two protocols does Cisco Prime Infrastructure use for ...
Question 53: Identify the features of the 802.1X Closed Mode deployment o...
Question 54: Which two attributes are delivered by the DHCP probe to the ...
Question 55: Which three host modes support MACsec? (Choose three.)...
Question 56: Which three statements describe differences between TACACS+ ...
Question 57: Which two Cisco Catalyst switch interface commands allow onl...
Question 58: Where must periodic re-authentication be configured to allow...
Question 59: When you configure an endpoint profiling policy rule, which ...
Question 60: Which option is one method for transporting security group t...
Question 61: dot1x and which traffic will be passed. It was based on conf...
Question 62: What feature is used to ensure authorized clients continue t...
Question 63: which is the default behavior of 802.1x...
Question 64: What are the three parties involved in 802.1X authentication...
Question 65: Refer to the exhibit. If the host sends a packet across the ...
Question 66: Which mechanism does Cisco ISE use to force a device off the...
Question 67: Which two authentication stores are supported to design a wi...
Question 68: In the command 'aaa authentication default group tacacs loca...
Question 69: Which two additional fields are added to an Ethernet frame w...
Question 70: The corporate security policy requires multiple elements to ...
Question 71: What is a feature of the SGT Exchange Protocol?...
Question 72: What user rights does an account need to join ISE to a Micro...
Question 73: A network administration wants to set up a posture condition...
1 commentQuestion 74: Which WLC debug command would be used to troubleshoot authen...
Question 75: Which command can check a AAA server authentication for serv...
Question 76: When you add a new PSN for guest access services, which two ...
Question 77: When MAB is configured, how often are ports reauthenticated ...
Question 78: Which two Active Directory authentication methods are suppor...
Question 79: Which characteristic of static SGT classification is true?...
Question 80: Which three personas can a Cisco ISE assume in a deployment?...
Question 81: You are troubleshooting wired 802.1X authentications and see...
1 commentQuestion 82: Which client interface or interfaces are provisioned when th...
Question 83: In a multi-node ISE deployment, backups are not working on t...
Question 84: How does the device sensor send information to a RADIUS serv...
Question 85: When performing NAT, which of these is a limitation you need...
Question 86: Scenario: Currently, many users are expehecing problems usin...
Question 87: Which action do you take to define the global authorization ...
Question 88: Which command on the switch ensures that the Service-Type at...
Question 89: Refer to the exhibit. Which URL must you enter in the Extern...
Question 90: Which two attributes must match between two Cisco ASA device...
Question 91: What are the four code fields which identify the type of an ...
Question 92: What can ISE apply to an endpoint through a NAC agent?...
Question 93: A customer has implemented a BYOD policy to allow employees ...
Question 94: Which two component are required for creating native supplic...
Question 95: What application security feature is used with Exchange serv...
Question 96: Which OS has Anyconnect posture support?...
Question 97: Which command enables static PAT for TCP port 25?...
Question 98: If the user is in a non-compliant state and wants to Get out...
Question 99: A security engineer must create an Antivirus remediation pol...
Question 100: Which type of SGT classification method is required when aut...
Question 101: Which action must an administrator take after joining a Cisc...
Question 102: Which NAC agents support remediation (chose 3)?...
Question 103: Which option is the correct format of username in MAB authen...
Question 104: Which Cisco ISE probe gathers data from the Cisco IOS Device...
Question 105: When performing NAT, which of these is a limitation you need...
Question 106: An engineer must limit the configuration parameters that can...
Question 107: A user reports that a switch's RADIUS accounting packets are...
Question 108: By default, how many days does Cisco ISE wait before it purg...
Question 109: A customer is concerned with the use of the issued laptops e...
Question 110: Which statement about the CAK is true?...