500-254 Latest Exam (Aug 2018)

[Free] 2018(Aug) Ensurepass Cisco 500-254 Dumps with VCE and PDF 11-20

August 19, 2018

Ensurepass.com : Ensure you pass the IT Exams
2018 Aug Cisco Official New Released 500-254
100% Free Download! 100% Pass Guaranteed!

Implementing and Configuring Cisco Identity Services Engine (SISE)

Question No: 11

What are the three default Cisco ISE identity user groups? (Choose three.)

  1. employee

  2. contractor

  3. activated guest

  4. guest

  5. sponsor

Answer: A,C,D

Question No: 12

Which three features require accurate time? (Choose three.)

  1. EAP-TLS-based authentication

  2. EAP-MS-CHAPv2-based authentication

  3. accurate posture assessment results

  4. Active Directory integration

  5. consistent profiling data collection

  6. accurate and reliable logging

Answer: A,D,F

Question No: 13

What is the default authorization rule in Cisco ISE?

  1. permit all access

  2. deny all access

  3. redirect users to CWA

  4. redirect users to LWA

Answer: A

Question No: 14

If there is a firewall between Cisco ISE and an Active Directory external identity store, which port does not need to be open?

  1. TCP 88

  2. TCP 445

  3. UDP 53

  4. UDP 123

  5. UDP/TCP 389

Answer: C

Question No: 15

Which three network information items are required to set up Cisco ISE? (Choose three.)

  1. primary name server

  2. secondary name server

  3. Network Time Protocol server

  4. hostname

  5. IP address and netmask of the Gigabit Ethernet 1 interface

Answer: A,C,D

Question No: 16

If MAB is enabled before WebAuth in Policy -gt; Authentications, what option must be selected if authentication fails, in order for users to have the ability to log in to the guest portal?

  1. Accept

  2. Reject

  3. Continue

  4. Drop

Answer: B

Question No: 17

When does the browser get redirected in WebAuth?

  1. when there is a request for DNS

  2. before getting the IP address

  3. when there is a request for a web page

  4. when the Cisco NAC Agent reaches the Policy Service node

Answer: C

Question No: 18

Which of these is NOT an Inline Posture node operating mode?

  1. router mode

  2. bridged mode

  3. transparent mode

  4. maintenance mode

Answer: C

Question No: 19

What is the cisco-av-pair automatically set to for an Inline Posture node profile?

  1. ipep-compliant=true

  2. ipep-authz=true

  3. inline-posture=true

  4. SessionIdValueamp;action=cpp

Answer: B

Question No: 20

Which Authentication Policy option should be selected for MAB rule to support Central Web Auth?

  1. Accept

  2. Reject

  3. Continue

  4. Drop

Answer: C

100% Ensurepass Free Download!
500-254 PDF
100% Ensurepass Free Guaranteed!
500-254 Dumps

EnsurePass ExamCollection Testking
Lowest Price Guarantee Yes No No
Up-to-Dated Yes No No
Real Questions Yes No No
Explanation Yes No No
Free VCE Simulator Yes No No
Instant Download Yes No No