QUESTION: 93

Refer to the exhibit.
Which two configurations are needed on a catalyst switch to add it as a network access device in a Cisco ISE that is being used for 802.1X authentications? (Choose two.)

radius server ISE1address ipv4 192.168.255.17 auth-port 1645 acct-port 1646key 7 0607542D5F4A0213034C1E0A1F0F2E2122733F3429000D12055A5A52
tacacs server ISE1address ipv4 192.168.255.15 auth-port 1645 acct-port 1646key 7 0607542D5F4A0213034C1E0A1F0F2E2122733F3429000D12055A5A52
radius server ISE1address ipv4 192.168.255.19 auth-port 1645 acct-port 1646key 7 0607542D5F4A0213034C1E0A1F0F2E2122733F3429000D12055A5A52
tacacs server ISE1address ipv4 192.168.255.18 auth-port 1645 acct-port 1646key 7 0607542D5F4A0213034C1E0A1F0F2E2122733F3429000D12055A5A52
radius server ISE1
address ipv4 192.168.255.16 auth-port 1645 acct-port 1646
key 7 0607542D5F4A0213034C1E0A1F0F2E2122733F3429000D12055A5A52

Answer(s): A,C

Reveal Solution Next Question

The security team wants to secure the wired network. A legacy printer on the network with the MAC address 11:22:33:44:55:AA does not support 802.1X.
Which setting must be enabled in the Allowed Authentication Protocols list in your Authentication Policy for Cisco ISE to support MAB for this MAC address?

MS-CHAPv2
EAP-TLS
PAP
Process Host Lookup

Answer(s): D

Reference:

https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/admin_guide/b_ise_admin_guide_22/
b_ise_admin_guide_22_chapter_010010.html#task_282816DDB9BA440BAF30EB451FF3445E

Reveal Solution Next Question

QUESTION: 95

Refer to the exhibit. An engineer is configuring a client but cannot authenticate to Cisco ISE. During troubleshooting, the show authentication sessions command was issued to display the authentication status of each port.
Which command gives additional information to help identify the problem with the authentication?

show authentication sessions
show authentication sessions output
show authentication sessions interface Gi1/0/1 output
show authentication sessions interface Gi1/0/1 details

Answer(s): D

Reveal Solution Next Question

QUESTION: 96

An organization is using Cisco ISE to provide AAA services to non-Cisco switches with IP phones connected. An engineer needs to use Profiling Services to authorize network access for IP phones that do not support 802.1X.
What must be configured to accomplish this goal?

DHCP
SNMPTRAP
SNMPQUERY
RADIUS

Answer(s): C

Reveal Solution Next Question

Free 300-715 Exam Braindumps (page: 25)

QUESTION: 93

QUESTION: 94

Reference:

QUESTION: 95

QUESTION: 96

Exam Discussions & Posts