QUESTION: 97

Which type of identity store allows for creating single-use access credentials in Cisco ISE?

OpenLDAP
Local
PKI
RSA SecurID

Answer(s): D

Reference:

https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_man_id_stores.html

While configuring Cisco TrustSec on Cisco IOS devices, the engineer must set the CTS device ID and password in order for the devices to authenticate with each other. However, after this is complete, the devices are not able to properly authenticate.
What issue would cause this to happen even if the device ID and passwords are correct?

EAP-FAST is not enabled.
The SGT mappings have not been defined.
The device aliases are not matching.
The devices are missing the configuration cts credentials trustsec verify 1.

Answer(s): A

Reveal Solution Next Question

QUESTION: 99

A Cisco device has a port configured in multi-authentication mode and is accepting connections only from hosts assigned the SGT of SGT_0123456789. The VLAN trunk link supports a maximum of 8 VLANS.
What is the reason for these restrictions?

The device is performing inline tagging without acting as a SXP speaker.
The device is performing inline tagging while acting as a SXP speaker.
The IP subnet addresses are dynamically mapped to an SGT.
The IP subnet addresses are statically mapped to an SGT.

Answer(s): A

Reveal Solution Next Question

QUESTION: 100

An engineer is deploying Cisco ISE to use 802.1X authentication for controlling access to the company's wired network. The request from company management is to minimize the impact on users during the rollout of 802.1X on the company switches.
Which mode must be used first in a phased 802.1X deployment to fulfill this request?

Monitor
Open
Low-impact
Closed

Answer(s): A

Reveal Solution Next Question

Free 300-715 Exam Braindumps (page: 26)

QUESTION: 97

Reference:

QUESTION: 98

QUESTION: 99

QUESTION: 100

Exam Discussions & Posts