A customer has implemented a BYOD policy to allow employees to use personal devices on the corporate network. Which two methods can an employee use to add their devices to the network? (Choose two.) A. Helpdesk registration B. native supplicants…
Which keying mechanism is used with downlink MACsec? A. MACsec Key Agreement (MKA) B. Galois Counter Mode C. Transport Layer Security D. Security
While troubleshooting a posture assessment issue on a Windows PC, the NAC Agent is not popping up as expected. Which two logs would help in isolating the issue? (Choose two.) A. Cisco AnyConnect ISE posture logs B. Cisco ISE ise-psc.log…
A manager of Company A is hosting a conference. Conference participants use a code on the AUP page of the hotspot guest portal. Which code must the manager create on Cisco ISE before the meeting? A. registration code B. passcode…
What is the first step for configuring Cisco ISE for the onboarding process? A. Configure the action that is taken when an unsupported device attempts to connect to a secure network. B. Create the native supplicant profile that is sent…
Which action is a Cisco recommended practice while attempting to increase efficiency on the monitoring nodes? A. Remove endpoints when not active B. Re-index the data on a regular basis. C. Back up data and transfer to a remote repository…
A new consultant must be granted network access for only six months. Which type of ISE default guest account must be used to allow this access? A. contractor B. annual C. employee D. temporary
An organization is deciding between single or dual SSID solutions for onboarding BYOD devices. Which item must be considered before selecting the dual SSID solution? A. Wireless coverage is reduced with dual SSIDs. B. The second SSID adds channel overhead.…
A network administrator noticed that wireless guests are able to access internal resources which should not be accessible. Looking at the settings on the Cisco ISE, the administrator notices that the correct ACL is applied in Authorization Profile Settings and…
A security engineer must provision dynamic TrustSec classifications. Which two classification options must the engineer select to accomplish this task? (Choose two.) A. MAB B. 802.1X C. VLAN D. interface E. IP subnet