Cisco CANAC - Implementing Cisco NAC Appliance Set 2

Question - 15 Maximum mark : - 28

Home
All Exams
Cisco CANAC - Implementing Cisco NAC Appliance Online Practice Exams
Cisco CANAC - Implementing Cisco NAC Appliance Set 2

After you implement a network scan and view the report, you notice that a plug-in did not access any of it's dependent plug-ins. What did you forget to do?

Install dependent plug-ins when you updated the Cisco NAC Appliance plug-in library ✘ Configure dependent plug-on support when you mapped the Nessus scan check to the Nessus plug-in rule ✘ Load the dependent plug-ins for that plug-in in the Plug-in updates form ✘ Enable the Dependent Plug-in check box on the General Tab form ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

In a Cisco NAM high-availability configuration, when does the secondary Cisco NAM take over?

When the IP-based heartbeat signal fails to be transmitted and received within a certain time period ✘ When the UDP heartbeat signal fails to be transmitted on the serial heartbeat connection between failoverpeers ✘ When the UDP heartbeat signal is not transmitted and received within a certain time period ✘ When the timeout value is exceeded during data-mirroring activities ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

When the Cisco NAS is configured for Windows Active Directory SSO to which component in a Cisco NAC Appliance solution does the client make a request for a Kerberos Service ticket?

Microsoft Windows Active Directory Server ✘ Cisco NAM ✘ Cisco NAS ✘ Cisco NAA ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

You are implementing switch management in a Cisco NAM for out-of-band deployment. Once communication between the switch and the Cisco NAM has been verified, what is configured next?

Configure the Switches to use the appropriate SNMP settings ✘ Configure group, switch and port profiles on the Cisco NAM ✘ Add the switches that you want to control to the Cisco NAM domain ✘ Configure the Cisco NAM SNMP receiver settings ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Based on the Boolean order of precedence, how would Cisco NAC Appliance evaluate the following rule? AdAwareLogRecent&(NorAVProcesslsActiveymAVProcesslsActive)

(The Norton Antivirus is active and there is a recent Ad Aware log entry) or ( The Symantec antivirus

process is active) ✘ There is a recent Ad ware log entry, the Norton Antivirus is active and the Symantec antivirus process isactive ✘ There is a recent Ad Aware log entry or the Norton Antivirus is active or the Symantec Antivirus Process isactive ✘ (Either the Norton Antivirus or the Symantec Antivirus process is active) and (there is a recent Ad Aware logentry) ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

A small public library wants to implement network admission control for their public wireless network and their internal wired network. Their network contains switches from a variety of vendors. Which Cisco NAC Appliance solution would best suit this client?

An out-of-band Cisco NAS deployment with a Cisco NAM Cluster ✘ A Hybrid solution using in-band Cisco NAS for the wireless and out-of-band Cisco NAS for the wiredDeployment ✘ An in-band Cisco NAS deployment and a Cisco NAM ✘ A Combination of an out-of-band and an in-band Cisco NAS deployment with a Cisco NAM Cluster ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Which Cisco NAC appliance out-of-band solution statement is correct?

Access switch to Cisco NAM configuration and status change messages are communicated via a

proprietary protocol ✘ The Swichport Access and authentication VLAN information is sent to the access switch from the CiscoNAM ✘ As a laptop device accesses the Cisco NAC Appliance network, the access switch sends the device MACaddress to the Cisco NAS ✘ All client traffic flows through the CAS while access switch VLAN management is performed out of band ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

In an edge deployment of an in-band virtual-gateway Cisco NAC Appliance solution, how does the Cisco NAS ensure that authenticated client traffic arrives at the correct default gateway?

Managed subnets ensure that devices on different untrusted VLANs arrive at the correct default gateways

on the trusted side ✘ After authentication, the Cisco NAA using its cached IP Addresses, supplies the IP Address of the Correctgateway to the Cisco NAS ✘ VLAN trunks are used to aggregate the traffic form the managed subnets to the Cisco NAS beforeforwarded to their respective gateways on the Layer 3 switch or router ✘ Cisco NAS interface are connected to trunked ports to provide VLAN passthrough to the correct gateway ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Why are managed subnets configure in out-of-band virtual gateway mode?

Configures the Cisco NAS to map the managed subnet to the proper access VLAN ✘ Configure the Cisco NAS with an IP Address in the untrusted VLAN that Cisco NAS can use to send ARPrequest in that particular VLAN ✘ Configure the Cisco NAM management subnet so that all the Cisco NAM initiated traffic will be sent out onthe proper management subnet ✘ Configure the Cisco NAS management subnet so that all the Cisco NAS initiated traffic will sent out of theproper management subnet ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

10.

A CA-signed certificate is returned from the CA authority and the private key on which the CA certificate is based no longer matches the one in the Cisco NAS. What should the administrator do?

Regenerate the certificates based on the FQDN rather than using the service ip address of the NAM ✘ Import the single root CA or intermediate CA to .chain.crt in the admin console ✘ Edit the Certificate files directly in the file system ✘ Reimport the old private key and then install the CA-signed certificate ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Prev Next

Congratulations

you have successfully completed the test

Back to Question View Result

Detail Form

We will send your result on your email id and phone no. please fill detail

Name

Email ID Note: Report will be send to the above Email ID

Phone No

Cisco CANAC - Implementing Cisco NAC Appliance Set 2

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner