Cisco Implementing Cisco Secure Access Solutions (SISAS) Set 1

802.1x ✘ WEP ✘ TKIP ✘ WPA ✔ WPA2 ✔

Access Point ✘ Switch ✘ Wireless LAN Controller ✘ Authentication Server ✔

WPA2 AES-CCMP and 801.X authentication ✘ WPA2 AES-CCMP and PSK authentication ✘ WPA2 TKIP and PSK authentication ✘ WPA2 TKIP and 802.1X authentication ✔

Cisco WLC populates the ACLs to prevent repeat intruder attacks. ✘ The IPS automatically send shuns to Cisco WLC for an active host block. ✘ Cisco WLC and IPS synchronization enables faster wireless access. ✘ IPS synchronization uses network access points to provide reliable monitoring. ✔

It enables stations to remain in power-save mode, except at specified intervals to receive data from the access point. ✘ It detects spoofed MAC addresses. ✘ It identifies potential RF jamming attacks. ✘ It protects against frame and device spoofing. ✔

Reports > Operations > Catalog > Endpoint

✘

Operations > Reports > Catalog > Endpoint

✘

Operations > Catalog > Reports > Endpoint

✘

Operations > Catalog > Endpoint

✔

at least one Cisco router to store Cisco ISE profiling policies ✘ Cisco NAC Agents that communicate with the Cisco ISE server ✘ an ACL that points traffic to the Cisco ISE deployment ✘ the advanced license package must be installed ✔

1. Download the CA server certificate. 2. Generate a signing request and save it as a file. 3. Access the CA server and submit the ISE request. 4. Install the issued certificate on the ISE. ✘ 1. Download the CA server certificate.2. Generate a signing request and save it as a file. 3. Access the CA server and submit the ISE request. 4. Install the issued certificate on the CA server. ✘ 1. Generate a signing request and save it as a file.2. Download the CA server certificate. 3. Access the ISE server and submit the CA request. 4. Install the issued certificate on the CA server. ✘ 1. Generate a signing request and save it as a file.2. Download the CA server certificate. 3. Access the CA server and submit the ISE request. 4. Install the issued certificate on the ISE. ✔

the ISE ✘ an ACL ✘ a router ✘ a policy server ✔

1. With a Web browser, establish an HTTP connection to the WLC pod. 2, Navigate to Administration > Authentication > New. 3. Enter server values to begin the configuration.

✘

1. With a Web browser, establish an FTP connection to the WLC pod.2. Navigate to Security > Administration > New. 3. Add additional security features for FTP authentication.

✘

1. With a Web browser, establish an HTTP connection to the WLC pod.2. Navigate to Authentication > New. 3. Enter ACLs and Authentication methods to begin the configuration.

✘

1. With a Web browser connect, establish an HTTPS connection to the WLC pod.2. Navigate to Security > Authentication > New. 3. Enter server values to begin the configuration.

✔