Q11. What is the purpose of the Cisco ISE Guest Service Sponsor Portal? 

A. It tracks and stores user activity while connected to the Cisco ISE. 

B. It securely authenticates guest users for the Cisco ISE Guest Service. 

C. It filters guest users from account holders to the Cisco ISE. 

D. It creates and manages Guest User accounts. 

Answer:


Q12. Which RADIUS attribute is used primarily to differentiate an IEEE 802.1x request from a Cisco MAB request? 

A. RADIUS Attribute (5) NAS-Port 

B. RADIUS Attribute (6) Service-Type 

C. RADIUS Attribute (7) Framed-Protocol 

D. RADIUS Attribute (61) NAS-Port-Type 

Answer:


Q13. Which three personas can a Cisco ISE assume in a deployment? (Choose three.) 

A. connection 

B. authentication 

C. administration 

D. testing 

E. policy service 

F. monitoring 

Answer: C,E,F 


Q14. Which default identity source is used by the MyDevices_Portal_Sequence identity source sequence? 

A. internal users 

B. guest users 

C. Active Directory 

D. internal endpoints 

E. RADIUS servers 

Answer:


Q15. Which network access device feature can you configure to gather raw endpoint data? 

A. Device Sensor 

B. Device Classifier 

C. Switched Port Analyzer 

D. Trust Anchor 

Answer:


Q16. The corporate security policy requires multiple elements to be matched in an authorization policy. Which elements can be combined to meet the requirement? 

A. Device registration status and device activation status 

B. Network access device and time condition 

C. User credentials and server certificate 

D. Built-in profile and custom profile 

Answer:


Q17. In this simulation, you are task to examine the various authentication events using the ISE GUI. For example, you should see events like Authentication succeeded. Authentication failed and etc... 

Which four statements are correct regarding the event that occurred at 2014-05-07 00:19:07.004? (Choose four.) 

A. The IT_Corp authorization profile were applied. 

B. The it1 user was matched to the IT_Corp authorization policy. 

C. The it1 user supplicant used the PEAP (EAP-MSCHAPv2) authentication method. 

D. The it1 user was authenticated using MAB. 

E. The it1 user was successfully authenticated against AD1 identity store. 

F. The it1 user machine has been profiled as a Microsoft-Workstation. 

G. The it1 user machine has passed all the posture assessement tests. 

Answer: B,C,E,F 

Explanation: 

Here are the details shown for this event: 

Screen Shot 2015-06-23 at 5.27.37 PM 


Q18. In the command 'aaa authentication default group tacacs local', how is the word 'default' defined? 

A. Command set 

B. Group name 

C. Method list 

D. Login type 

Answer:


Q19. A user is on a wired connection and the posture status is noncompliant. 

Which state will their EPS session be placed in? 

A. disconnected 

B. limited 

C. no access 

D. quarantined 

Answer:


Q20. Which two profile attributes can be collected by a Cisco Wireless LAN Controller that supports Device Sensor? (Choose two.) 

A. LLDP agent information 

B. user agent 

C. DHCP options 

D. open ports 

E. CDP agent information 

F. FQDN 

Answer: B,C