SISE - Post Training Assessment

Which of the mode options below can be used in an 802.,1X phased Deployment? (Choose 3)

• Monitor Mode

• Low Impact Mode

• Closed Mode

• High Impact Mode

• Easy Connect Mode

Which option below accurately describes Cisco ISE's ability to integrate with LDAP based systems

• Cisco ISE has built-in schemas for Active Directory , SUN Directory Server, and Novel eDirectory

• The use of LDAP is considered to be more secure than integrating with Microsoft Active Directory

• LDAP integration tends to provide better performance than a system that uses AD integration

• You can only create a single LDAP instance in Cisco ISE

In a typical Cisco ISE deployment, what device is the enforcement point for a security solution?

• The Cisco Identity Services Engine

• Campus network distribution switches

• Microsoft Active Directory or LDAP based identity stores

• Network Access Devices

What feature of the Cisco ISE security enables you to easily understand various users and endpoint on your network

• Context Visibility

• Live Logs

• Posturing

• Policy enforceent

• Policy management

Choose the option below that describes what a Cisco ISE solution reference to control access, based on several criteria related to the connectivity of a particular user

• SGAs

• Context

• dACL

• CoA

• 802.1x

Which Cisco ISE persona is responsible for processing all ISE-related network messaging

• Administration Persona

• Policy Service Persona

• Monitoring Persona

• pxGrid Persona

• Profiling and Posturing

When you deploy a Cisco ISE multi-node solution, what is the relationship between policy creation and policy implementation?

• you create policy on the Admin node, and that policy is actually implemented on a Policy node

• You create and implement policy on the admin node

• Policy creation and implementation duties are split among multiple Admin nodes

• Policy creation and implementation duties are divided among up to 5 policy nodes

Your peers at work are asking you about the Cisco ISE profiling service. Which of options below will you describe to them as being part of the profiler service? (Choose 2)

• The Sensor

• The Analyzer

• The collector

• The Injector

• The Accumulator

Which protocol is best used for device administration authentication and authorization?

• SSH

• TELNET

• TACACS+

• RADIUS

Which service does Cisco ISE posture provide?

• Identity endpoints

• Deploy posture agents

• Check the state of endpoints

• Support Windows Fast User Switching