WorksheetsSISE
Total questions: 25
Worksheet time: 9mins
Which of the following is NOT an ISE feature?
Guest Management
Profiler
Centralized Policy Administration
URL Filtering
Which of the following is NOT a mandatory ISE persona?
PxGrid
PAN
MnT
PSN
Which ISE deployment mode is defined with "authentication open" command?
Monitor Mode
Low Impact Mode
Closed Mode
Open Auth Mode
What is the meaning of DROP option in Authentication Policy?
Drop an e-Mail to the ISE Admin
Take a Drop-Down approach
Drop the Access_Request from NAD
Reply with Access_Reject to NAD
In Cisco TrustSec, SGACLs are written based on _______
MAC addresses of the Endpoints
Layer 3 information only
Layer 4 information only
Layer 3 and Layer 4 information
What does a NAD do after receiving a RADIUS CoA Message?
Sends EAP Success message
Re-authenticats the session
Open the port
Close the port
In HOTSPOT Guest access, when is the user considered to be authenticated as guest?
After 802.1x times out
After MAB times out
After accepting the AUP
After logging in to the Guest Portal
Which of the following is NOT performed during BYOD onboarding of a device?
Device Registration
Supplicant Provisioning
Certificate Provisioning
AV installation checks
Employees use this portal to manage their BYOD devices.
Sponsor Portal
My Devices Portal
BYOD Portal
Guest Portal
Which of the following is NOT a valid value for Session:PostureStatus attribute?
QUARANTINE
COMPLIANT
NON-COMPLIANT
UNKNOWN
Why TACACS+ is better suited for Device Administration than RADIUS?
Encrypts the entire payload
Runs over TCP/49
Separates Authentication and Authorization
Cisco Propitiatory
Which ISE persona runs Device Admin Service?
PAN
MnT
PSN
PxGrid
Which attribute/value pair tells ISE that the user is connected via a Wireless Network?
Service_Type = Wireless_802.11
Service_Type = WiFi
NAS_Port_Type = Ethernet
NAS_Port_Type = Wireless_802.11
In Cisco TrustSec, where SGACLs are enforced?
On the ingress switches
On the egress switches
On the core switch
On the ISE
What does Cisco ISE do if a device is marked as 'lost' in the My Devices Portal?
Moves the MAC address of the device to the Blacklist Endpoint Group
Deletes the MAC address from the Internal Endpoint Database
Revokes the device's certificate
Registers a police compliant
An endpoint does not have 802.1X supplicant running on it. How will this endpoint authenticate to ISE and get access to network resources?
Using NAC Agent
Using Discovery Agent
Using MAB (MAC Authentication Bypass)
This device cannot get network access
Which of the following ISE modules detects the presence of virus/malware in an endpoint?
ISE NAC Agent Module
ISE Profiler Module
ISE Posture (Endpoint Compliance Services) Module
None of the above
Identity Source Sequence (ISS) means . . .
Authenticating using AD only
Authenticate device first, then authenticate the user next
Authenticate the user using Internal User Identity Store only
Check multiple databases in sequence to authenticate the user
During MAB, _________ is used as the username and password in the RADIUS ACCESS-REQUEST message.
Username/Password provided by the user
UUID of the endpoint
IP Address of the endpoint
MAC Address of the endpoint
Which of the following policies allow you to define which software packages/agents will be pushed to the endpoint, based on its OS, user-group or other conditions?
Client Provisioning Policy
Posture Policy
Profiler Policy
NAC Agent Policy
After the user is authenticated, all user traffic must pass through ISE PSN for inspection.
In TACACS+ Command Sets, which of the following grants overrides any other grant?
PERMIT
DENY
DENY_ALWAYS
FORBIDDEN
Which of the following is NOT true in regards to Cisco ISE 3.X Licensing?
Needs Smart Licensing
License tiers are stacked
Essentials licenses are perpetual
Advantage Tier also includes functions of Essential Tier
In Central Web Authentication, Redirect_ACL is configured on the switch and referenced in the Authorization Profile.
Select all the protocols used by Cisco IOS Device Sensor feature to gather raw endpoint data from the devices. [Choose 3 answers]
HTTP/HTTPS
CDP
LLDP
DHCP Snooping
