Ensurepass.com : Ensure you pass the IT Exams
2018 Aug Cisco Official New Released 500-254
100% Free Download! 100% Pass Guaranteed!
Implementing and Configuring Cisco Identity Services Engine (SISE)
Question No: 1
Which two elements must you configure on a Cisco Wireless LAN Controller to allow Cisco ISE to authenticate wireless users? (Choose two.)
-
Configure Cisco ISE as a RADIUS authentication server and enter a shared secret.
-
Configure Cisco ISE as a RADIUS accounting server and enter a shared secret.
-
Configure all attached LWAPs to use the configured Cisco ISE node.
-
Configure RADIUS attributes for each SSID.
-
Configure each WLAN to use the configured Cisco ISE node.
-
Configure the Cisco Wireless LAN Controller to join a Microsoft Active Directory domain.
Answer: A,E
Question No: 2
Which three Cisco TrustSec enforcement modes are used to help protect network operations when securing the network? (Choose three.)
-
logging mode
-
monitor mode
-
semi-passive mode
-
low-impact mode
-
closed mode
Answer: B,D,E
Question No: 3
Which statement is correct about Change of Authorization?
-
Change of Authorization is a fundamental component of Cisco TrustSec and Cisco ISE.
-
Change of Authorization can be triggered dynamically based on a matched condition in a policy, and manually by being invoked by an administrator operation.
-
It is possible to trigger Change of Authorization manually from the ISE interface.
-
Authentication is the supported Change of Authorization action type.
Answer: D
Question No: 4
The default Cisco ISE node configuration has which role or roles enabled by default?
-
Administration only
-
Inline Posture only
-
Administration and Policy Service
-
Policy Service, Monitoring, and Administration
Answer: D
Question No: 5
Inline Posture nodes support which enforcement mechanisms?
-
VLAN assignment
-
downloadable ACLs
-
security group access
-
dynamic ACLs
Answer: B
Question No: 6
What is the process for Cisco ISE to obtain a signed certificate from a CA?
-
Request a certificate from the CA, and import the CA-signed certificate into ISE.
-
Generate a CSR; download the certificate from the CA; bind the CA-signed certificate with its private key, and import the CA-signed certificate into ISE.
-
Generate a CSR; export the CSR to the local file system and send to the CA; download the certificate from the CA, and bind the CA-signed certificate with its private key.
-
Submit a CSR to the CA; download the certificate from the CA; bind the CA-signed certificate with its private key, and import the CA-signed certificate into ISE.
Answer: C
Question No: 7
What is the Cisco ISE default admin login name and password?
-
admin/admin
-
admin/cisco
-
ISEAdmin/admin
-
admin/no default password-the admin password is configured at setup
Answer: D
Question No: 8
What are two methods to verify that Cisco ISE is properly connected to AD? (Choose two.)
-
Use the Test Connection feature in the Cisco ISE External Identity Sources Active Directory.
-
View the Active Directory Log /opt/CSCOcmp/logs/ad_agent.log.
-
Use the ISE Dashboard Summary alarms.
-
Use ktpass to determine if the Kerberos ticket is valid.
Answer: A,B
Question No: 9
Where is the license installed within Cisco ISE deployment?
-
A license is installed on the Policy Service node within ISE deployment.
-
A license is installed on the primary or secondary Administration node within ISE deployment.
-
A license is installed only on the primary Administration node within ISE deployment.
-
A license is preinstalled for ISE deployment.
Answer: C
Question No: 10
Which of these is NOT a high-availability option that is available for Cisco ISE deployments?
-
In the event of failure of the Primary Administration node, the standby instance automatically becomes active.
-
In the event of failure of the Primary Monitoring node, the standby instance automatically becomes active.
-
Clustering of Policy Service nodes to provide N 1 redundancy
-
Stateless failover of Inline Posture nodes
Answer: A
100% Ensurepass Free Download!
–500-254 PDF
100% Ensurepass Free Guaranteed!
–500-254 Dumps
EnsurePass | ExamCollection | Testking | |
---|---|---|---|
Lowest Price Guarantee | Yes | No | No |
Up-to-Dated | Yes | No | No |
Real Questions | Yes | No | No |
Explanation | Yes | No | No |
PDF VCE | Yes | No | No |
Free VCE Simulator | Yes | No | No |
Instant Download | Yes | No | No |