Free 300-715 Exam Braindumps (page: 8)

Page 8 of 93

Which Cisco ISE deployment model provides redundancy by having every node in the deployment configured with the Administration, Policy Service, and Monitoring personas to protect from a complete node failure?

  1. dispersed
  2. distributed
  3. two-node
  4. hybrid

Answer(s): C



Which Cisco ISE deployment model is recommended for an enterprise that has over 50,000 concurrent active endpoints?

  1. large deployment with fully distributed nodes running all personas
  2. medium deployment with primary and secondary PAN/MnT/pxGrid nodes with shared PSNs
  3. medium deployment with primary and secondary PAN/MnT/pxGrid nodes with dedicated PSNs
  4. small deployment with one primary and one secondary node running all personas

Answer(s): C



What is a restriction of a standalone Cisco ISE node deployment?

  1. Only the Policy Service persona can be disabled on the node.
  2. The domain name of the node cannot be changed after installation.
  3. Personas are enabled by default and cannot be edited on the node.
  4. The hostname of the node cannot be changed after installation.

Answer(s): C

Explanation:

After you install a Cisco ISE node, all the default services provided by the Administration, Policy Service, and Monitoring personas run on it. This node is in a standalone state. You must log in to the Admin portal of the Cisco ISE node to configure it. You cannot edit the personas or services of a standalone Cisco ISE node. You can, however, edit the personas and services of the primary and secondary Cisco ISE nodes. You must first configure a primary ISE node and then register secondary ISE nodes to the primary ISE node.


Reference:

https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/admin_guide/b_ise_admin_guide_22/ b_ise_admin_guide_22_chapter_010.html



What are the minimum requirements for deploying the Automatic Failover feature on Administration nodes in a distributed Cisco ISE deployment?

  1. a primary and secondary PAN and a health check node for the Secondary PAN
  2. a primary and secondary PAN and no health check nodes
  3. a primary and secondary PAN and a pair of health check nodes
  4. a primary and secondary PAN and a health check node for the Primary PAN

Answer(s): D

Explanation:

In a high availability configuration, the Primary Administration Node (PAN) is in the active state. The Secondary PAN (backup PAN) is in the standby state, which means it receives all configuration updates from the Primary PAN, but is not active in the ISE network.
Cisco ISE supports manual and automatic failover. With automatic failover, when the Primary PAN goes down, an automatic promotion of the Secondary PAN is initiated. Automatic failover requires a non-administration secondary node, which is called a health check node. The health check node checks the health of Primary PAN. If the health detects that the Primary PAN is down or unreachable, the health check node initiates the promotion of the Secondary PAN to take over the primary role.
To deploy the auto-failover feature, you must have at least three nodes, where two of the nodes assume the Administration persona, and one node acts as the health check node. A health check node is a non- administration node and can be a Policy Service, Monitoring, or pxGrid node, or a combination of these. If the PANs are in different data centers, you must have a health check node for each PAN.






Post your Comments and Discuss Cisco® 300-715 exam with other Community members:

300-715 Exam Discussions & Posts