QUESTION: 153

An engineer builds a five-node distributed Cisco ISE deployment. The first two deployed nodes are responsible for the primary and secondary administration and monitoring personas.
Which persona configuration is necessary to have the remaining three Cisco ISE nodes serve as dedicated nodes in the Cisco ISE cube that is responsible only for handling the RADIUS and TACACS+ authentication requests, identity lookups, and policy evaluation?

Answer(s): B

Reveal Solution Next Question

QUESTION: 154

What are two differences between the RADIUS and TACACS+ protocols? (Choose two.)

RADIUS offers multiprotocol support, whereas TACACS+ does not.
RADIUS is a Cisco proprietary protocol, whereas TACACS+ is an open standard protocol.
RADIUS enables encryption of all the packets, whereas with TACACS+, only the password is encrypted.
RADIUS combines authentication and authorization, whereas TACACS+ does not.
TACACS+ uses TCP port 49, whereas RADIUS uses UDP ports 1812 and 1813.

Answer(s): D,E

Reveal Solution Next Question

QUESTION: 155

An administrator adds a new network device to the Cisco ISE configuration to authenticate endpoints to the network. The RADIUS test fails after the administrator configures all of the settings in Cisco ISE and adds the proper configurations to the switch.
What is the issue?

The endpoint profile is showing as ''unknown"
The endpoint does not have the appropriate credentials for network access
The certificate on the switch is self-signed, not a CA-provided certificate
The shared secret is incorrect on the switch or on Cisco ISE

Answer(s): D

Reveal Solution Next Question

QUESTION: 156

An administrator enables the profiling service for Cisco ISE to use for authorization policies while in closed mode.
When the endpoints connect, they receive limited access so that the profiling probes can gather information and Cisco ISE can assign the correct profiles. They are using the default values within Cisco ISE, but the devices do not change their access due to the new profile.
What is the problem?

The default profiler configuration is set to No CoA for the reauthentication setting.
In closed mode, profiling does not work unless CDP is enabled.
The profiler feed is not downloading new information, so the profiler is inactive.
The profiling probes are not able to collect enough information to change the device profile.

Answer(s): A

Reveal Solution Next Question

Free 300-715 Exam Braindumps (page: 39)

QUESTION: 153

QUESTION: 154

QUESTION: 155

QUESTION: 156