Quiz
Untitled
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (21)
1What is the CoA port used by the ISE server by default?
- A3312
- B1646
- C3799
- D1700
2What happens when the device administration (Tacacs) license expires and PSN nodes are using this feature?
- AThe server will continue authenticating in order to avoid the affectation of users
- BAn alarm is displayed indicating that you have 45 days to obtain a valid license
- CThe nodes will stop listening on port 49 until a valid license is imported
- DOnce a license expired only one PSN can continue using the feature
3You have an issue where customer indicates an ACL is unable to apply to the session of a wireless users, while looking at the configuration in ISE, you notice the authorization profile is configured to send a DACL and an access accept. Based on this information what can be the cause of the issue?
- A“Airspace ACL” attribute should be used instead of DACL
- BThe DACL name is incorrect
- CThe “Allow AAA override” option is not enable on the SSID configuration
- DThe ACL may have not valid entries and due to this the ACL is unable to apply to the session
4Which of the following is the main method to determine what certificates are being negotiated during TLS handshake
- ACollect a TCP dump
- BEnable radius debugs on NAD
- CEnable runtime-aaa and nsf debugs
- DVerify endpoints certificate store
5To take a configuration backup from an ISE node, the OPT cannot be higher than
- A72%
- B80%
- C70%
- D90%
6When looking up the sessions stablished with the ISE deployment via API, whole node should be the API taken from
- ASession node
- BPSN
- CAdmin
- DMNT
7What determines if an endpoint can be classified as specific device
- AThe conditions configured on the authorization policies
- BThe result in the authorization profile
- CThe license consumed by the endpoint
- DThe certainty factor
8When configuring certificate based authentication for ISE web interface if the incorrect certificate is selected how can we get access to the ISE server again
- AThe server will need to be started in safe mode
- Bthe certificate will need to be updated via CLI
- Cthe server will need to be reload in order to remove the non-saved config
- DIf certificate identity is not available we can select internal as fallback when loggin in
9You receive a case where the client indicates that they are sending a DACL in the authorization profile from ISE, but this is not being applied to the session of the user. While taking debugs we can see the following
“EPM_SESS_EVENT:UN-installling Named ACL xACSACLx_IP_permit_All_traffic_51ef7db1 Session_ctx 5f0BB938 feat_ctx 5f0CE894 feat_conf 5F0AFCD4”
What can be causing the DACL not to be applied properly?- AThe ACL is not configured on the switch
- BDevice-tracking is not properly configured on the device
- CIncorrect ACL name is used
- DThe session of the endpoint was not authorized by the radius server
10When a certificate is checked by a device it checked first the common name and if it does not match it will continue checking the SAN field
- ATrue
- BFalse
11In a two node deployment, If the PAN goes down what are the following services that the SAN can take over
- ALocal web authentication
- BBYOD with internal CA
- CGUI access
- DExisting endpoint with no profile change
12What is the maximum number of dedicated PSN that the cisco ISE can handel since2.4 version in all devices?
- A25
- B31
- C40
- D50
13For ISE appliances running virtualized, what is the basis for VM license required
- AType of node (PAN/PSN/MNT/PxGrid)
- BConfigured CPU cores
- CConfigured CPU cores, RAM and Hdd capacities
- DConfigured CPU cores and RAM capacity
14When planning for the deployment of Cisco ISE, as an organization’s security policy dictates that they must use network access authentication via RADIUS. It also states that the deployment needs to be provide an adequate amount of security and visibility for the hosts on the network. Why should the engineer configure MAB in this situation?
- AMAB user provides authentication
- BMAB provides the strongest form of authentication available
- CThe Cisco switches only support MAB
- DThe devices in the network do not have a 802.1x supplicant
15Select the corresponding definition for each host mode
- AMulti-auth: multiple endpoints can be authenticated on a single port
- BSingle-host: Only a single endpoint authenticated
- CMulti-host: First endpoint that authenticates enable access for all other via the same port
- DMulti-domain: Only two endpoints per domain (DATA and Voice)
16What is the packect that contains DACL and the VLAN number to be sent to the WLC and switch?
- AAccess Accept
- BAccess Request
- CAccess challenge
- DEAPol
17The ISE sends a DACL to the NAS Device is order to approve the URL redirection portal
- ATrue
- BFalse
18What is the device that sends the redirection URL to the endpoint
- AISE
- BWLC
19What does AAA stands for?
- AAuthentication, authorization, accounting
- Bansjndj
- Cakjsnkjns
- Dakjdsakjnds
20Identify the false statement about RADIUS
- ARADIUS is a defined standard on RFC4556
- BRADUIS runs on udp port 1812
- CRADIUS runs on tcp port 1812
- Daccounting information runs over port 1646
21TACACS is transport over which tcp port numbers
- A49
- B21
- C23
- D1812
Information
- Description
- Quiz on Untitled, created by Nelson Andres Macias on 04/04/2024.
- Author
- Nelson Andres Macias
- Language
- English
- Views
- 0
- Rating
- No ratings yet Rate this quiz