500-254 Latest Exam (May 2018)

[Free] 2018(June) Dumps4cert Cisco 500-254 Dumps with VCE and PDF Download 21-30

July 3, 2018

Dumps4cert.com : Latest Dumps with PDF and VCE Files
2018 May Cisco Official New Released 500-254
100% Free Download! 100% Pass Guaranteed!

Implementing and Configuring Cisco Identity Services Engine (SISE)

Question No: 21

Which two dictionary groups does Cisco ISE provide? (Choose two.)

  1. system-defined

  2. RADIUS vendor


  4. user-defined

  5. LDAP

  6. Active Directory

Answer: A,D

Question No: 22

What is the limit of groups that Cisco ISE can retrieve from an Active Directory?

  1. 10

  2. 50 C. 100 D. 150 E. 200

Answer: C

Question No: 23

Which global command is used to activate 802.1X on a switch?

  1. dot1x enable

  2. dot1x system-auth-control

  3. dot1x service start

  4. dot1x switchport enable

Answer: B

Question No: 24

Which two commands are needed to configure 802.1X open mode? (Choose two.)

  1. authentication event

  2. authentication host-mode multi-auth

  3. authentication host-mode single domain

  4. authentication open

Answer: B,D

Question No: 25

Which statement is true about 802.1X closed mode?

  1. It is the default configuration of an 802.1X-enabled switch port.

  2. Only EAPOL traffic is allowed until the authentication process is finished.

  3. DNS and DHCP are allowed before authentication.

  4. Cisco Discovery Protocol is allowed before authentication.

  5. Only EAPOL and Cisco Discovery Protocol are allowed until the authentication process completes.

Answer: D

Question No: 26

The 802.1X protocol supports which two port types? (Choose two.)

  1. Layer 2 access port

  2. trunk port

  3. dynamic port

  4. Layer 3 access port

  5. EtherChannel port

Answer: A,D

Question No: 27

What is the default period for Cisco ISE to automatically purge expired guest accounts?

  1. immediately after expiration

  2. 1 day

  3. 7 days

  4. 15 days

  5. 30 days

Answer: D

Question No: 28

What is the recommended time zone for Cisco ISE installations?

  1. customer local time zone

  2. customer headquarters time zone

  3. Pacific time

  4. Coordinated Universal Time

Answer: D

Question No: 29

Which two EAP authentication methods require only a server certificate? (Choose two.)

  1. EAP-TLS


  3. EAP-GTC

  4. EAP-MD5


Answer: C,E

Question No: 30

Which three encryption policies does MACsec support? (Choose three.)

  1. always-secure

  2. must-secure

  3. should-secure

  4. never-secure

  5. must-not-secure

Answer: B,C,E

100% Dumps4cert Free Download!
Download Free Demo:500-254 Demo PDF
100% Dumps4cert Pass Guaranteed!
500-254 Dumps

Dumps4cert ExamCollection Testking
Lowest Price Guarantee Yes No No
Up-to-Dated Yes No No
Real Questions Yes No No
Explanation Yes No No
Free VCE Simulator Yes No No
Instant Download Yes No No