SISE Implementing and Configuring Cisco Identity Services Engine Practice Test

These questions are part of the practice quiz. Start practicing

• Under which part of the Cisco ISE administration GUI is TACACS+ configured?
• Which license enables TACACS+ device administration for Cisco ISE?
• What does the term 'CoA' stand for in the context of Cisco ISE?
• Which type of authentication would a printer most likely use?
• Which portal allows employees to both register and provision their device for secure access?
• What does the Device Sensor feature help with in Cisco IOS devices?
• What is the purpose of posture assessment in Cisco ISE?
• How does Cisco ISE categorize users for access control?
• How are 'Custom Attributes' created in Cisco ISE?
• What are 'User Defined Attributes' in Cisco ISE used for?
• What defines a 'Group Policy' in the Cisco ISE environment?
• Which of the following types of users can create, modify, suspend, and delete guest user accounts in the Cisco ISE guest database?
• Describe the two types of deployment models supported by Cisco ISE.
• When a request is matched to an authentication policy, which of the following is NOT a reason that an identity verification might fail?
• What is the purpose of 'Authorization Profiles' in Cisco ISE?
• How can Cisco ISE enhance visibility into network activities?
• What role does the Cisco ISE API serve?
• Which option helps determine the access policy assigned to the endpoint in Cisco ISE?
• What role does Logging play in Cisco ISE?
• How does Cisco ISE facilitate device profiling?
• Which option can be configured to associate a time zone with a guest user account?
• Which of the following describes the purpose of the Admission Control feature in Cisco ISE?
• What effect does dynamic adjustment of access permissions have in Cisco ISE?
• What information is primarily collected during the device profiling process?
• Which of the following is a key feature of Cisco ISE regarding endpoint visibility?
• What are the two logical components of the Profiler service that collect attributes and correlate attribute data?
• Which identity source allows Cisco ISE to look for a user or MAC address without authentication being performed?
• What is the primary focus of Identity-based Networking in relation to Cisco ISE?
• In Cisco ISE, what does the term 'policy set' refer to?
• Which identity source could be used to query the Active Directory if Cisco ISE were to get disconnected from the domain?
• Which component of the Cisco ISE posture service provides backend support for posture-specific custom conditions and remediation actions?
• What can be used to verify user or endpoint credentials in an authentication policy?
• What is the primary function of 'Authorization Rules' in Cisco ISE?
• In which way can 'AI and Machine Learning' improve Cisco ISE functionality?
• Which protocol is primarily used for authentication, authorization, and accounting in Cisco ISE?
• Which authentication protocol enables the exchange of security authentication information between an IdP and a Cisco ISE?
• What is a common use case for using identity-based access control in Cisco ISE?
• Which component of Cisco ISE allows administrators to generate reports?
• In Cisco ISE, what does TACACS+ primarily provide?
• What is the default value for the "Default Posture Status" setting within Cisco ISE?
• Which Cisco TrustSec feature uses EAP-FAST to authenticate devices and negotiates IEEE 802.1AE encryption?
• Which of the following device template options defines different Vendor-Specific Attributes (VSAs) that are used to represent common concepts?
• What does an access policy in Cisco ISE define?
• What is the purpose of an 'SSL Certificate' in Cisco ISE?
• Which feature in the Guest Access Work Center allows for detailed information about guest and sponsor access to be exported for inspection outside of the ISE Admin portal?
• What is considered a major advantage of using Cisco TrustSec?
• When creating a Cisco ISE policy rule, which button applies a condition to a policy rule once it has been created?
• How does Cisco ISE categorize devices for policy enforcement?
• What action must be taken to configure a new identity source in Cisco ISE?
• Which deployment method reduces inter-PSN communications and the need to replicate endpoint changes?
• What is the function of Authentication Rules in Cisco ISE?
• Which component in Cisco ISE acts as the central point for managing access policies and authorizations?
• How does Cisco ISE implement 'Multi-Factor Authentication' (MFA)?
• Which Active Directory feature allows Cisco ISE to modify the username for an incoming request and send it to Active Directory in the required format?
• Which Cisco ISE admin GUI page allows for Security Group ACLs (SGACLs) to be defined between source and destination security groups?
• Which section of the RADIUS live log details report shows all events processed by Cisco ISE during the endpoint session lookup?
• If one command is listed in multiple command sets, which permission takes precedence?
• What benefits does Data Segmentation through Cisco ISE offer?
• What are three available license options for Cisco ISE 3.X?
• Which of the following is the endpoint 802.1X-compliant software service that communicates with NAD authenticators to request network access?
• Which posture assessment uses the AnyConnect agent?
• In which posture operational mode is the client notified of failure results and given the option to continue to bypass the posture assessment policy?
• Which of the following organizations supplies the list of fields such as vendor name, product version, product name, and attributes contained in the compliance module used by Cisco ISE posture services?
• Which of the following contains properties common to all certificates issued by the Cisco ISE CA service?
• How is Device Trust established in Cisco ISE?
• What measures does Cisco ISE take to mitigate unauthorized access attempts?
• Which policy selects the agent that should be used for the posture check on the connecting endpoint?
• Which of the new or enhanced features of the Cisco ISE posture service provides posture information to clients, and completely removes itself when finished?
• In which MAC Authentication Bypass phase does the switch accept a single packet to learn the MAC address of the endpoint?
• What type of access does a guest portal typically provide in Cisco ISE?
• Which feature reduces data collection and replication to a subset of profile-specific attributes so that anything that is not used for profiling policy will not be replicated?
• Which of the following is a key consideration when configuring Guest Access in Cisco ISE?
• How does Cisco ISE support a Zero Trust security model?
• How does Cisco ISE utilize the concept of 'TrustSec'?
• What is a significant benefit of using 'Single Sign-On' with Cisco ISE?
• Which option is considered a TACACS+ configuration option in Cisco ISE?
• What role does 'Packet Capture' play in troubleshooting with Cisco ISE?
• Which migration element is supported when moving from Cisco Secure ACS to Cisco ISE?
• What is the purpose of profiling in Cisco ISE?
• Which of the following is NOT a benefit of using Cisco ISE for network security?
• Which three of the following are steps that should be taken as part of planning for Profiler usage?
• Which of the following encrypts all traffic between the client agent and the Cisco ISE server for posture assessment and remediation of clients?
• What does Cisco ISE's real-time monitoring enable administrators to do?
• How can administrators ensure minimal disruption during ISE updates?
• When deploying a BYOD deployment with Cisco ISE as a standalone CA, which component performs the role of root CA?
• What is the primary function of the Cisco ISE Policy Service?
• What advantage does Contextual Information provide in policy enforcement in Cisco ISE?
• What is the importance of testing policies in a staging environment first?
• What is the significance of enabling pxGrid services globally in ISE?
• What is the significance of the Policy Evaluation Order in Cisco ISE?
• What role does the endpoint classification play in Cisco ISE?
• What is a critical aspect of the Zero Trust security model supported by Cisco ISE?
• Which of the following allows Cisco TrustSec a faster and more secure delivery of environment updates from Cisco ISE to the NADs?
• What does the term "BYOD" stand for in the context of network access solutions?
• What is the primary purpose of a TACACS+ profile?
• What is a primary benefit of using Cisco ISE for network segmentation?
• What are two main reasons an enterprise might run the Profiler service when deploying Cisco ISE?
• What feature facilitates the dynamic assignment of ACLs based on user roles in Cisco ISE?
• In Cisco ISE, what does the term 'MAB' stand for?
• Which portal can an employee directly access with a friendly URL to manage registered devices?
• How does Cisco ISE streamline 'Access Requests' from users?
• What does the Cisco ISE system primarily focus on regarding network security?
• Which of the following guest access options allows a guest to create their own account but requires a sponsor for approval?
• What component manages the authentication and access control policies in Cisco ISE?
• What type of probe includes DHCP SPAN as one of its types?
• What type of authentication method can be implemented in Cisco ISE for network devices?
• What role does the endpoint profiling feature play in Cisco ISE?
• The Profiling server resides in which ISE persona?
• When defining extensible attributes in Cisco ISE, which option is required?
• What type of profile is used to specify the radius settings in a Cisco ISE deployment?
• What is the purpose of a 'Quarantine VLAN' in Cisco ISE?
• Which probe is best suited for obtaining near real-time profiling data from endpoints?
• Which method allows Cisco ISE to apply policies based on the context of the endpoint?
• How can Security Policies be enforced across multiple endpoints in Cisco ISE?
• In the context of Cisco ISE, what does 'SE-Server' reference?
• When implementing Cisco ISE, which functionality allows for real-time updates of endpoint status and visibility?
• Which two ISE Admin portal pages display profiler statistic graphs and a table of endpoints with their profiler statistics?
• Which type of assessment is conducted by Cisco ISE to ensure endpoints meet security compliance before being granted network access?
• What is the method used to integrate Active Directory with Cisco ISE?
• What is 'Continuous Monitoring' in Cisco ISE primarily aimed at?
• Which of these web authentication scenarios uses the Cisco ISE Policy Node to authenticate users based on username and password?
• What does 'Device Posture Assessment' in Cisco ISE verify?
• Which three Cisco ISE features were added in release 3.X?
• Which protocol does Cisco ISE primarily use for communication in a network environment?
• What functionality does 'Time-based Access Control' provide in Cisco ISE?
• Which of the following contains files, agents, or installation packages that can be uploaded to Cisco ISE to provision endpoint posture?
• What are the two ways to reduce overhead when using DHCP attributes for profiling?
• Which of the following can be applied in a Cisco ISE network device configuration to define the features and communication standards that the network device supports?
• Which of the following correctly describes the dual SSID BYOD solution?
• What is the default port used by RADIUS for authentication in Cisco ISE?
• From which section of the Cisco ISE GUI would you set parameters such as remediation timer and default posture status?
• Which option is not a valid description of guest access configuration settings?
• Which feature allows administrators to monitor and control devices connected to the network in real-time?
• What applies a security group tag to an authenticating RADIUS user or endpoint?
• In which task of configuring the Cisco ISE Posture Service do you assign the posture agent type based on the endpoint operating system?
• Which feature of Cisco ISE can provide granular control over network access?
• What is the primary function of the Cisco Identity Services Engine (ISE)?
• What type of authentication protocol does Cisco ISE natively support for device administration?
• Which menu path will display a table to inspect RADIUS events in real time from the Cisco ISE GUI?
• In which column of the Cisco ISE Posture Policy page do you choose the Active Directory identity group condition?
• Which feature allows you to define which events are displayed in the RADIUS live log table?
• What is the purpose of device onboarding in a Cisco ISE deployment?
• How does Cisco ISE support BYOD (Bring Your Own Device) policies?
• What does RADIUS stand for?
• Which ISE Admin portal page allows you to force a Change of Authorization when an endpoint transitions from unknown to known for the first time?
• Which technology allows for Cisco ISE to share endpoint contextual information with other security and network platforms?
• How does VPN Integration work with Cisco ISE?
• Which posture agent provides a temporal client matching assessment?
• Which protocol is primarily used in Cisco ISE for secure communications and authentication?
• What is the role of 'RADIUS Accounting' in Cisco ISE?
• Which two of the following types of SMS gateways can be configured in Cisco ISE to communicate with guest users via SMS text messages?
• Which report type would you expect to find in Cisco ISE summarizing user authentication attempts?
• Which three authentication protocols allow clients to use certificates for authentication? (Choose three.)
• Which one of the following can be used to configure an authorization rule that applies to all Policy Sets in Cisco ISE?
• Where does Cisco ISE store the MAC address of the guest endpoint once the guest has signed the Acceptable Use Policy?
• Which probe collects attributes from a network device's ARP table, Cisco Discovery Protocol table, LLDP table, and interface?
• Which Cisco ISE guest service use case is described correctly?
• What defines the parameters that Cisco ISE provisioning applies to the supplicant during provisioning?
• Which three of the following are sections of the Posture Work Center to help guide you through the posture deployment?
• Which three of the following posture conditions are defined in the list of attributes in compliance module 4.x or later?
• What do Service Profiles in Cisco ISE help to streamline?
• What are three common items that can be assigned as part of an authorization profile?
• Which command can be used at the Cisco ISE CLI to verify the state of running processes?
• What is the order of operation for matching a RADIUS request to a policy set?
• What is the primary function of the RADIUS accounting messages in Cisco environments?
• Which portal is hosted on the Cisco ISE Policy Service node and allows clients to download a posture agent from it?
• In what way does Network Device Profiling contribute to security in Cisco ISE?
• What advantage does a self-service portal provide in Cisco ISE?
• Which feature of Cisco ISE helps in analyzing traffic patterns for better security?
• Which Cisco TrustSec feature allows for a staging and approval process for policy changes?
• Which Cisco ISE portal can be used to automatically configure the client supplicant and install appropriate certificates for endpoint authentication to a corporate WLAN?
• What is the primary function of the downloadable access control list in a Cisco ISE policy?
• What is the method to manage API Access Control in Cisco ISE?
• Which three statements correctly describe Cisco ISE functioning as a CA?
• What is 'Sponsorship' in the context of Cisco ISE?
• Which is not a function of the Cisco ISE profiling service?
• How does Cisco ISE support the implementation of Zero Trust architectures?
• Which AAA protocol combines authentication and authorization processes?
• What does 'Mab' stand for in Cisco ISE?
• Which protocol is primarily used for managing network devices securely within Cisco ISE?
• What is the effect of software updates on Cisco ISE functionality?
• In Cisco ISE, what does the term 'profiler' refer to?
• In which scenario is using HTTP redirects most beneficial?
• Which statement accurately describes your CA services options for implementing a BYOD solution?
• What is the primary function of the Cisco ISE authentication policy?
• What feature allows Cisco ISE to identify and provide visibility of devices on the network?
• What are Policy Conditions in Cisco ISE policies?
• What are 'Security Group Tags' (SGTs) used for in Cisco ISE?
• Which is used to organize authentication and authorization rules into manageable sections?
• What action does Cisco ISE perform when a device is marked as "stolen" in the My Devices portal?
• How does Cisco ISE facilitate onboarding for first-time users?
• Which of the following provides a standards-based process to help identify IoT device capabilities?
• Why is data encryption important in Cisco ISE?
• Which three statements describe valid functions of the Cisco ISE profiling service?
• Which of the following probes can create excessive overhead and should only be used in rare situations?
• How does Cisco ISE integrate with firewall services?
• Which two options are the main configuration categories when customizing a sponsor or guest portal?
• What feature of a Cisco ISE deployment allows you to validate and maintain security capability for endpoints?
• What are 'Policy Groups' used for in Cisco ISE?
• What helps in defining the specific actions that can be performed via API in Cisco ISE?
• Which of the following is a key benefit of device profiling in Cisco ISE?
• How does Cisco ISE differentiate between different types of endpoints?
• Under which section in the RADIUS live log details report would you find the permissions that were applied to an endpoint with a successful authentication access request?
• Which of the following is an authentication method that requires an external database to be implemented with Cisco ISE?
• How does Cisco ISE handle 'User Role Changes'?
• Which three of the following are configuration steps that must be completed on a NAD before Cisco ISE can send the device Cisco TrustSec environment data?
• How does Cisco ISE facilitate policy enforcement?
• How does Cisco ISE protect sensitive information during transmission?
• Which of the following enables SGT-capable devices to propagate IP-to-SGT mappings across network devices that do not have SGT-capable hardware?
• What does 'See-Through Authentication' allow users to do in Cisco ISE?
• Which of the following commands can be used on a Cisco IOS device to verify RADIUS communication and authentication for the user netadmin1@abc.public with the password 1234QWer?
• What is the significance of the 'Endpoints' menu in Cisco ISE?
• Which of the following represents an independent connection to a specific Active Directory server?
• What is the required action for devices that fail to meet security compliance in Cisco ISE?
• What is the purpose of network device groups?
• What is the purpose of 'Network Segmentation' in Cisco ISE?
• Which feature in Cisco ISE allows for guest access management?
• Which guest type is valid for up to 14 days, with a default period of 5 days?
• Which three protocols are supported for an endpoint in the Device Profile configuration?
• Which Cisco ISE deployment model allows for up to 50 PSNs?
• What type of policies can be created in Cisco ISE?
• Which Cisco ISE feature allows for a learned endpoint inventory?
• What role do 'User Defined Attributes' play in policy enforcement in Cisco ISE?
• What can be used to ensure that only guests who have communicated with a company representative can use a hotspot guest access portal?
• What is the primary function of the Policy Service Node in a Cisco ISE deployment?
• What does 'Trusted Device' provisioning mean in Cisco ISE?
• Which of the following allows you to group multiple endpoint policies into a single group that can be used to match specific authorization policy rules?
• Which feature in the Guest Access Work Center allows for detailed information about guest and sponsor access to be exported for inspection outside of Cisco ISE admin portal?
• What role does the Policy Set play in Cisco ISE?
• In Cisco ISE, what does the term "Endpoint" refer to?
• Which of the following BYOD deployment options uses an open SSID for provisioning employee devices and a secure SSID for already provisioned employee device access?
• What is the role of Compliance Checks in Cisco ISE?
• Which of the following can be used to define a subnet that will be permanently associated with a security group?
• Why is User Lifecycle Management important in Cisco ISE?
• Which three of the following are valid posture states of an endpoint?
• What is the purpose of an External Identity Source in Cisco ISE?
• How does Cisco ISE accommodate IPv6 environments?
• Why might an organization use Cisco ISE for managing endpoints?
• What protocols are commonly used in Cisco ISE for authentication?
• Which of the following allows you to create authorization rules that will apply to all policy sets?
• Which type of Reports can Cisco ISE generate?
• Which Cisco IOS feature allows devices to add Cisco Discovery Protocol, LLDP, and DHCP snooping attributes to RADIUS accounting messages?
• In which Cisco ISE GUI section is the posture policy configured?
• Which of the following checks for the existence of a registry key or the value of the registry key on the client?
• How can remediation be configured for non-compliant devices in Cisco ISE?
• What is the function of a 'Network Access Device' (NAD) in Cisco ISE?
• What is the purpose of using a prefix in the naming convention for TACACS command sets and profiles?
• Which three of the following are globally available Change of Authorization (CoA) options when an endpoint is profiled?
• Which three probes should be avoided due to excessive overhead?
• Which of the following features does Cisco ISE provide to enhance endpoint security?