QUESTION: 85

Which two external identity stores support EAP-TLS and PEAP-TLS? (Choose two.)

RSA SecurID
RADIUS Token
Active Directory
Internal Database
LDAP

Answer(s): C,E

Reference:

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/214975-configure- eap-tls-authentication-with-is.html

Reveal Solution Next Question

An engineer deploys Cisco ISE and must configure Active Directory to then use information from Active Directory in an authorization policy.
Which two components must be configured, in addition to Active Directory groups, to achieve this goal? (Choose two.)

Identity Source Sequences
LDAP External Identity Sources
Active Directory External Identity Sources
Library Condition for Identity Group: User Identity Group
Library Condition for External Identity: External Groups

Answer(s): C,E

Reveal Solution Next Question

QUESTION: 87

Which deployment mode allows for one or more policy service nodes to be used for session failover?

centralized
secondary
standalone
distributed

Answer(s): D

Reveal Solution Next Question

QUESTION: 88

An engineer is configuring 802.1X and is testing out their policy sets. After authentication, some endpoints are given an access-reject message but are still allowed onto the network.
What is causing this issue to occur?

The authorization results for the endpoints include the Trusted security group tag.
The authorization results for the endpoints include a dACL allowing access.
The switch port is configured with authentication event server dead action authorize vlan.
The switch port is configured with authentication open.

Answer(s): D

Reveal Solution Next Question

Free 300-715 Exam Braindumps (page: 23)

QUESTION: 85

Reference:

QUESTION: 86

QUESTION: 87

QUESTION: 88

Exam Discussions & Posts