Cisco Implementing Cisco Secure Access Solutions (SISAS) Set 1

1.

In the command 'aaa authentication default group tacacs local', how is the word 'default' defined?

Command set Group name Method list Login type

2.

Which statement about IOS accounting is true?

A named list of AAA methods must be defined. A named list of accounting methods must be defined. Authorization must be configured before accounting. A named list of tracking methods must be defined.

3.

What are the initial steps to configure an ACS as a TACACS server?

1. Choose Network Devices and AAA Clients > Network Resources. 2. Click Create.

1. Choose Network Resources > Network Devices and AAA Clients. 2. Click Create.

1. Choose Network Resources > Network Devices and AAA Clients. 2. Click Manage.

1. Choose Network Devices and AAA Clients > Network Resources.2. Click Install.

4.

Which effect does the ip http secure-server command have on a Cisco ISE?

It enables the HTTP server for users to connect on the command line. It enables the HTTP server for users to connect by using web-based authentication. It enables the HTTPS server for users to connect by using web-based authentication. It enables the HTTPS server for users to connect on the command line.

5.

The NAC Agent v4.9.x uses which ports and protocols to communicate with an ISE Policy Service Node?

tcp/8905, http/80, ftp/21

tcp/8905, http/80, https/443

udp/8905, telnet/23, https/443

udp/8906, http/80, https/443

6.

What attribute could be obtained from the SNMP query probe?

FQDN CDP DHCP class identifier User agent

7.

What is a required configuration step for an 802.1X capable switch to support dynamic VLAN and ACL assignments?

Configure the VLAN assignment. Configure the ACL assignment. Configure 802.1X authenticator authorization. Configure port security on the switch port.

8.

Which network component would issue the CoA?

switch endpoint Admin Node Policy Service Node

9.

What steps must you perform to deploy a CA-signed identity certificate on an ISE device?

1. Download the CA server certificate and install it on ISE. 2. Generate a signing request and save it as a file. 3. Access the CA server and submit the CA request. 4. Install the issued certificate on the ISE. 1. Download the CA server certificate and install it on ISE.2. Generate a signing request and save it as a file. 3. Access the CA server and submit the CSR. 4. Install the issued certificate on the CA server. 1. Generate a signing request and save it as a file.2. Download the CA server certificate and install it on ISE. 3. Access the ISE server and submit the CA request. 4. Install the issued certificate on the CA server. 1. Generate a signing request and save it as a file.2. Download the CA server certificate and install it on ISE. 3. Access the CA server and submit the CSR. 4. Install the issued certificate on the ISE.

10.

An organization has recently deployed ISE with Trustsec capable Cisco switches and would like to allow differentiated network access based on user groups. Which solution is most suitable for achieving these goals?

Cyber Threat Defense for user group control by leveraging Netflow exported from the Cisco switches and identity information from ISE MACsec in Multiple-Host Mode in order to encrypt traffic at each hop of the network infrastructure Identity-based ACLs preconfigured on the Cisco switches with user identities provided by ISE Cisco Security Group Access Policies to control access based on SGTs assigned to different user groups

Cisco Implementing Cisco Secure Access Solutions (SISAS) Set 1

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner

Cisco Implementing Cisco Secure Access Solutions (SISAS) Set 1

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner