<< Prev Question Next Question >>

Question 57/132

The IT manager wants to provide different levels of access to network devices when users authenticate using TACACS+. The company needs specific commands to be allowed based on the Active Directory group membership of the different roles within the IT department. The solution must minimize the number of objects created in Cisco ISE. What must be created to accomplish this task?

LEAVE A REPLY

Your email address will not be published. Required fields are marked *

Question List (132q)
Question 1: What is the Microsoft security policy recommendation (or fas...
Question 2: An administrator needs to allow guest devices to connect to ...
Question 3: Which type of identity store allows for creating single-use ...
Question 4: During BYOD flow, from where does a Microsoft Windows PC dow...
Question 5: Which two default guest portals are available with Cisco ISE...
Question 6: An engineer tests Cisco ISE posture services on the network ...
Question 7: What gives Cisco ISE an option to scan endpoints for vulnera...
Question 8: What is the difference between how RADIUS and TACACS+ handle...
Question 9: Which term refers to an endpoint agent that tries to join an...
Question 10: Which two VMware features are supported on a Cisco ISE virtu...
Question 11: An engineer is configuring Central Web Authentication in Cis...
Question 12: An employee must access the internet through the corporate n...
Question 13: What is a restriction of a standalone Cisco ISE node deploym...
Question 14: A network engineer must enforce access control using special...
Question 15: Which personas can a Cisco ISE node assume'?...
Question 16: Which two events trigger a CoA for an endpoint when CoA is e...
Question 17: A network engineer is in the predeployment discovery phase o...
Question 18: An administrator is configuring the Native Supplicant Profil...
Question 19: Which two Cisco ISE deployment models require two nodes conf...
Question 20: Which two components are required for creating a Native Supp...
Question 21: Which two probes must be enabled for the ARP cache to functi...
Question 22: Which two ports must be open between Cisco ISE and the clien...
Question 23: Which port does Cisco ISE use for native supplicant provisio...
Question 24: An engineer must configure Cisco ISE to provide internet acc...
Question 25: Which two actions must be verified to confirm that the inter...
Question 26: On which port does Cisco ISE present the Admin certificate f...
Question 27: How is policy services node redundancy achieved in a deploym...
Question 28: What is a valid status of an endpoint attribute during the d...
Question 29: An engineer needs to configure a new certificate template in...
Question 30: Which command displays all 802 1X/MAB sessions that are acti...
Question 31: An organization has a fully distributed Cisco ISE deployment...
Question 32: A network administrator must configure Cisco SE Personas in ...
Question 33: A policy is being created in order to provide device adminis...
Question 34: Refer to the exhibit. Which two configurations are needed on...
Question 35: In a standalone Cisco ISE deployment, which two personas are...
Question 36: Which two external identity stores are supported by Cisco IS...
Question 37: Which Cisco ISE deployment model provides redundancy by havi...
Question 38: Which CLI command must be configured on the switchport to im...
Question 39: A Cisco ISE server sends a CoA to a NAD after a user logs in...
Question 40: An engineer is enabling a newly configured wireless SSID for...
Question 41: An administrator made changes in Cisco ISE and needs to appl...
Question 42: Which two responses from the RADIUS server to NAS are valid ...
Question 43: What allows an endpoint to obtain a digital certificate from...
Question 44: An engineer is configuring web authentication and needs to a...
Question 45: Which two ports do network devices typically use for CoA? (C...
Question 46: An engineer is assigned to enhance security across the campu...
Question 47: An engineer is implementing network access control using Cis...
Question 48: Which two values are compared by the binary comparison (unct...
Question 49: An organization is hosting a conference and must make guest ...
Question 50: A Cisco ISE administrator must restrict specific endpoints f...
Question 51: MacOS users are complaining about having to read through wor...
Question 52: When planning for the deployment of Cisco ISE, an organizati...
Question 53: An administrator is configuring new probes to use with Cisco...
Question 54: What is a valid guest portal type?...
Question 55: Which Cisco ISE service allows an engineer to check the comp...
Question 56: Refer to the exhibit. (Exhibit) An engineer is configuring a...
Question 57: The IT manager wants to provide different levels of access t...
Question 58: Drag and drop the configuration steps from the left into the...
Question 59: An engineer is configuring 802.1X and is testing out their p...
Question 60: Which two methods should a sponsor select to create bulk gue...
Question 61: Which are two characteristics of TACACS+? (Choose two)...
Question 62: A network administrator is configuring a secondary cisco ISE...
Question 63: A network engineer has been tasked with enabling a switch to...
Question 64: An administrator is configuring a new profiling policy in Ci...
Question 65: What is a characteristic of the UDP protocol?...
Question 66: An engineer is configuring ISE for network device administra...
Question 67: What is a function of client provisioning?...
Question 68: An administrator connects an HP printer to a dot1x enable po...
Question 69: An administrator is configuring cisco ISE lo authenticate us...
Question 70: Which two endpoint compliance statuses are possible? (Choose...
Question 71: A network engineer needs to deploy 802.1x using Cisco ISE in...
Question 72: What is the deployment mode when two Cisco ISE nodes are con...
Question 73: Which protocol must be allowed for a BYOD device to access t...
Question 74: What are two differences between the RADIUS and TACACS+ prot...
Question 75: A network administrator is configuring a new access switch t...
Question 76: An engineer is tasked with placing a guest access anchor con...
Question 77: An engineer deploys Cisco ISE and must configure Active Dire...
Question 78: An engineer is migrating users from MAB to 802.1X on the net...
Question 79: An administrator is troubleshooting an endpoint that is supp...
Question 80: An administrator is configuring a Cisco WLC for web authenti...
Question 81: What are two differences of TACACS+ compared to RADIUS? (Cho...
Question 82: A new employee just connected their workstation to a Cisco I...
Question 83: A network administrator must use Cisco ISE to check whether ...
Question 84: What is the default port used by Cisco ISE for NetFlow versi...
Question 85: Select and Place (Exhibit)
Question 86: What does the dot1x system-auth-control command do?...
Question 87: A network administrator is configuring authorization policie...
Question 88: An administrator is trying to collect metadata information a...
Question 89: What is an advantage of TACACS+ versus RADIUS authentication...
Question 90: Which default endpoint identity group does an endpoint that ...
Question 91: Drag and drop the description from the left onto the protoco...
Question 92: Which Cisco ISE solution ensures endpoints have the latest v...
Question 93: What occurs when a Cisco ISE distributed deployment has two ...
Question 94: An administrator must provide wired network access to uniden...
Question 95: A network engineer is configuring guest access and notices t...
Question 96: What is a difference between TACACS+ and RADIUS in regards t...
Question 97: Drag the steps to configure a Cisco ISE node as a primary ad...
Question 98: Which type of identity store allows for creating single-use ...
Question 99: A Cisco ISE administrator needs to ensure that guest endpoin...
Question 100: An organization is adding new profiling probes to the system...
Question 101: An administrator is configuring sponsored guest access using...
Question 102: An engineer is configuring the remote access VPN to use Cisc...
Question 103: A network engineer must configure a centralized Cisco ISE so...
Question 104: An engineer is configuring a virtual Cisco ISE deployment an...
Question 105: A Cisco ISE administrator needs to ensure that guest endpoin...
Question 106: A user changes the status of a device to stolen in the My De...
Question 107: An engineer wants to learn more about Cisco ISE and deployed...
Question 108: An administrator needs to connect ISE to Active Directory as...
Question 109: An administrator replaced a PSN in the distributed Cisco ISE...
Question 110: An engineer is unable to use SSH to connect to a switch afte...
Question 111: An engineer is deploying a new Cisco ISE environment for a c...
Question 112: An administrator must deploy the Cisco Secure Client posture...
Question 113: An engineer is configuring a guest password policy and needs...
Question 114: Which two roles are taken on by the administration person wi...
Question 115: An engineer is configuring Cisco ISE to reprofile endpoints ...
Question 116: Drag the Cisco ISE node types from the left onto the appropr...
Question 117: Which file extension is required when deploying Cisco ISE us...
Question 118: An engineer needs to configure Cisco ISE Profiling Services ...
Question 119: A network administrator has just added a front desk receptio...
Question 120: An engineer is using the low-impact mode for a phased deploy...
Question 121: Which nodes are supported in a distributed Cisco ISE deploym...
Question 122: There are several devices on a network that are considered c...
Question 123: What is a difference between RADIUS versus TACACS+ with rega...
Question 124: Refer to the exhibit. (Exhibit) An organization recently imp...
Question 125: Which portal is used to customize the settings for a user to...
Question 126: Which compliance status is set when a matching posture polic...
Question 127: An engineer is working with a distributed deployment of Cisc...
Question 128: What is the minimum certainty factor when creating a profile...
Question 129: Which two actions occur when a Cisco ISE server device admin...
Question 130: An engineer must use Cisco ISE profiler services to provide ...
Question 131: Refer to the exhibit: (Exhibit) Which command is typed withi...
Question 132: An administrator is migrating device administration access t...