SISE Implementing and Configuring Cisco Identity Services Engine Practice Test

These questions are part of the practice quiz. Start practicing

• Which option is not a valid description of guest access configuration settings?
• Which Cisco ISE admin GUI page allows for Security Group ACLs (SGACLs) to be defined between source and destination security groups?
• Which portal is hosted on the Cisco ISE Policy Service node and allows clients to download a posture agent from it?
• How are 'Custom Attributes' created in Cisco ISE?
• How does Cisco ISE facilitate policy enforcement?
• In Cisco ISE, what does the term 'MAB' stand for?
• Why is data encryption important in Cisco ISE?
• If one command is listed in multiple command sets, which permission takes precedence?
• What effect does dynamic adjustment of access permissions have in Cisco ISE?
• What is the significance of the 'Endpoints' menu in Cisco ISE?
• In Cisco ISE, what does TACACS+ primarily provide?
• Which of the following BYOD deployment options uses an open SSID for provisioning employee devices and a secure SSID for already provisioned employee device access?
• Which posture agent provides a temporal client matching assessment?
• What role does the endpoint classification play in Cisco ISE?
• Which type of authentication would a printer most likely use?
• When creating a Cisco ISE policy rule, which button applies a condition to a policy rule once it has been created?
• Which AAA protocol combines authentication and authorization processes?
• Which feature in the Guest Access Work Center allows for detailed information about guest and sponsor access to be exported for inspection outside of Cisco ISE admin portal?
• Which option helps determine the access policy assigned to the endpoint in Cisco ISE?
• Which Cisco ISE guest service use case is described correctly?
• In which column of the Cisco ISE Posture Policy page do you choose the Active Directory identity group condition?
• How does Cisco ISE categorize devices for policy enforcement?
• When deploying a BYOD deployment with Cisco ISE as a standalone CA, which component performs the role of root CA?
• What is the purpose of a 'Quarantine VLAN' in Cisco ISE?
• What defines the parameters that Cisco ISE provisioning applies to the supplicant during provisioning?
• Which Cisco ISE deployment model allows for up to 50 PSNs?
• Which migration element is supported when moving from Cisco Secure ACS to Cisco ISE?
• Which of the following is a key consideration when configuring Guest Access in Cisco ISE?
• What advantage does Contextual Information provide in policy enforcement in Cisco ISE?
• Which protocol is primarily used in Cisco ISE for secure communications and authentication?
• What is a common use case for using identity-based access control in Cisco ISE?
• Which three of the following posture conditions are defined in the list of attributes in compliance module 4.x or later?
• Which guest type is valid for up to 14 days, with a default period of 5 days?
• How does Cisco ISE categorize users for access control?
• What does the term "BYOD" stand for in the context of network access solutions?
• Which three authentication protocols allow clients to use certificates for authentication? (Choose three.)
• What is the primary function of the RADIUS accounting messages in Cisco environments?
• What does 'Device Posture Assessment' in Cisco ISE verify?
• How does VPN Integration work with Cisco ISE?
• Under which part of the Cisco ISE administration GUI is TACACS+ configured?
• What is the purpose of an External Identity Source in Cisco ISE?
• How does Cisco ISE utilize the concept of 'TrustSec'?
• What type of authentication protocol does Cisco ISE natively support for device administration?
• What does RADIUS stand for?
• What is the purpose of 'Authorization Profiles' in Cisco ISE?
• What is the purpose of using a prefix in the naming convention for TACACS command sets and profiles?
• In Cisco ISE, what does the term 'policy set' refer to?
• What is the primary function of 'Authorization Rules' in Cisco ISE?
• How does Cisco ISE support the implementation of Zero Trust architectures?
• When defining extensible attributes in Cisco ISE, which option is required?
• Which menu path will display a table to inspect RADIUS events in real time from the Cisco ISE GUI?
• Which of the following is NOT a benefit of using Cisco ISE for network security?
• Which Cisco IOS feature allows devices to add Cisco Discovery Protocol, LLDP, and DHCP snooping attributes to RADIUS accounting messages?
• Which of the following checks for the existence of a registry key or the value of the registry key on the client?
• What are 'Security Group Tags' (SGTs) used for in Cisco ISE?
• What is 'Sponsorship' in the context of Cisco ISE?
• In the context of Cisco ISE, what does 'SE-Server' reference?
• What is a significant benefit of using 'Single Sign-On' with Cisco ISE?
• Why might an organization use Cisco ISE for managing endpoints?
• Which command can be used at the Cisco ISE CLI to verify the state of running processes?
• What is the purpose of 'Network Segmentation' in Cisco ISE?
• How is Device Trust established in Cisco ISE?
• How does Cisco ISE support BYOD (Bring Your Own Device) policies?
• What is the primary purpose of a TACACS+ profile?
• Describe the two types of deployment models supported by Cisco ISE.
• What is the significance of the Policy Evaluation Order in Cisco ISE?
• What is the function of a 'Network Access Device' (NAD) in Cisco ISE?
• In which Cisco ISE GUI section is the posture policy configured?
• In which task of configuring the Cisco ISE Posture Service do you assign the posture agent type based on the endpoint operating system?
• What is the method used to integrate Active Directory with Cisco ISE?
• What are the two logical components of the Profiler service that collect attributes and correlate attribute data?
• What role does the endpoint profiling feature play in Cisco ISE?
• In Cisco ISE, what does the term 'profiler' refer to?
• What are three common items that can be assigned as part of an authorization profile?
• Which posture assessment uses the AnyConnect agent?
• Which protocol does Cisco ISE primarily use for communication in a network environment?
• Which ISE Admin portal page allows you to force a Change of Authorization when an endpoint transitions from unknown to known for the first time?
• What is a critical aspect of the Zero Trust security model supported by Cisco ISE?
• What does 'See-Through Authentication' allow users to do in Cisco ISE?
• Which of the following provides a standards-based process to help identify IoT device capabilities?
• What is the role of 'RADIUS Accounting' in Cisco ISE?
• Which one of the following can be used to configure an authorization rule that applies to all Policy Sets in Cisco ISE?
• Which of the following can be used to define a subnet that will be permanently associated with a security group?
• What does Cisco ISE's real-time monitoring enable administrators to do?
• What type of policies can be created in Cisco ISE?
• What does the Device Sensor feature help with in Cisco IOS devices?
• Under which section in the RADIUS live log details report would you find the permissions that were applied to an endpoint with a successful authentication access request?
• How can remediation be configured for non-compliant devices in Cisco ISE?
• Which option can be configured to associate a time zone with a guest user account?
• What are three available license options for Cisco ISE 3.X?
• Which of the following contains properties common to all certificates issued by the Cisco ISE CA service?
• Which portal can an employee directly access with a friendly URL to manage registered devices?
• What role does 'Packet Capture' play in troubleshooting with Cisco ISE?
• Which feature allows administrators to monitor and control devices connected to the network in real-time?
• From which section of the Cisco ISE GUI would you set parameters such as remediation timer and default posture status?
• Which three Cisco ISE features were added in release 3.X?
• Which is not a function of the Cisco ISE profiling service?
• What type of access does a guest portal typically provide in Cisco ISE?
• What is the purpose of network device groups?
• Which Cisco TrustSec feature allows for a staging and approval process for policy changes?
• What is the purpose of an 'SSL Certificate' in Cisco ISE?
• Which protocol is primarily used for managing network devices securely within Cisco ISE?
• Which of the following can be applied in a Cisco ISE network device configuration to define the features and communication standards that the network device supports?
• What feature of a Cisco ISE deployment allows you to validate and maintain security capability for endpoints?
• Which three of the following are steps that should be taken as part of planning for Profiler usage?
• Which of the following guest access options allows a guest to create their own account but requires a sponsor for approval?
• What is the purpose of profiling in Cisco ISE?
• How does Cisco ISE implement 'Multi-Factor Authentication' (MFA)?
• How does Cisco ISE differentiate between different types of endpoints?
• Which of the following contains files, agents, or installation packages that can be uploaded to Cisco ISE to provision endpoint posture?
• Which probe is best suited for obtaining near real-time profiling data from endpoints?
• Which Active Directory feature allows Cisco ISE to modify the username for an incoming request and send it to Active Directory in the required format?
• In which posture operational mode is the client notified of failure results and given the option to continue to bypass the posture assessment policy?
• Which two of the following types of SMS gateways can be configured in Cisco ISE to communicate with guest users via SMS text messages?
• What does the Cisco ISE system primarily focus on regarding network security?
• What is 'Continuous Monitoring' in Cisco ISE primarily aimed at?
• What is the role of Compliance Checks in Cisco ISE?
• How does Cisco ISE protect sensitive information during transmission?
• What does 'Mab' stand for in Cisco ISE?
• Which of the following is a key feature of Cisco ISE regarding endpoint visibility?
• How can Cisco ISE enhance visibility into network activities?
• What protocols are commonly used in Cisco ISE for authentication?
• In which MAC Authentication Bypass phase does the switch accept a single packet to learn the MAC address of the endpoint?
• Which technology allows for Cisco ISE to share endpoint contextual information with other security and network platforms?
• When implementing Cisco ISE, which functionality allows for real-time updates of endpoint status and visibility?
• What can be used to ensure that only guests who have communicated with a company representative can use a hotspot guest access portal?
• Which three protocols are supported for an endpoint in the Device Profile configuration?
• What does an access policy in Cisco ISE define?
• How does Cisco ISE integrate with firewall services?
• What is the primary function of the Cisco ISE Policy Service?
• What are the two ways to reduce overhead when using DHCP attributes for profiling?
• Which identity source could be used to query the Active Directory if Cisco ISE were to get disconnected from the domain?
• What is the order of operation for matching a RADIUS request to a policy set?
• What type of authentication method can be implemented in Cisco ISE for network devices?
• Which of the following allows you to create authorization rules that will apply to all policy sets?
• Which of the following allows Cisco TrustSec a faster and more secure delivery of environment updates from Cisco ISE to the NADs?
• Which deployment method reduces inter-PSN communications and the need to replicate endpoint changes?
• Which authentication protocol enables the exchange of security authentication information between an IdP and a Cisco ISE?
• What information is primarily collected during the device profiling process?
• What is the primary function of the downloadable access control list in a Cisco ISE policy?
• Which three of the following are globally available Change of Authorization (CoA) options when an endpoint is profiled?
• Which type of Reports can Cisco ISE generate?
• What defines a 'Group Policy' in the Cisco ISE environment?
• How can Security Policies be enforced across multiple endpoints in Cisco ISE?
• What is the primary focus of Identity-based Networking in relation to Cisco ISE?
• Which section of the RADIUS live log details report shows all events processed by Cisco ISE during the endpoint session lookup?
• The Profiling server resides in which ISE persona?
• Which three of the following are configuration steps that must be completed on a NAD before Cisco ISE can send the device Cisco TrustSec environment data?
• Which method allows Cisco ISE to apply policies based on the context of the endpoint?
• What role does the Cisco ISE API serve?
• What is the primary function of the Cisco ISE authentication policy?
• Where does Cisco ISE store the MAC address of the guest endpoint once the guest has signed the Acceptable Use Policy?
• How does Cisco ISE accommodate IPv6 environments?
• How can administrators ensure minimal disruption during ISE updates?
• Why is User Lifecycle Management important in Cisco ISE?
• Which of the following describes the purpose of the Admission Control feature in Cisco ISE?
• How does Cisco ISE streamline 'Access Requests' from users?
• What is the default value for the "Default Posture Status" setting within Cisco ISE?
• Which statement accurately describes your CA services options for implementing a BYOD solution?
• What is a primary benefit of using Cisco ISE for network segmentation?
• Which type of assessment is conducted by Cisco ISE to ensure endpoints meet security compliance before being granted network access?
• Which policy selects the agent that should be used for the posture check on the connecting endpoint?
• Which of the following is an authentication method that requires an external database to be implemented with Cisco ISE?
• Which three of the following are valid posture states of an endpoint?
• What feature allows Cisco ISE to identify and provide visibility of devices on the network?
• In what way does Network Device Profiling contribute to security in Cisco ISE?
• What is the purpose of device onboarding in a Cisco ISE deployment?
• Which protocol is primarily used for authentication, authorization, and accounting in Cisco ISE?
• What functionality does 'Time-based Access Control' provide in Cisco ISE?
• In Cisco ISE, what does the term "Endpoint" refer to?
• Which of the following commands can be used on a Cisco IOS device to verify RADIUS communication and authentication for the user netadmin1@abc.public with the password 1234QWer?
• Which of the following allows you to group multiple endpoint policies into a single group that can be used to match specific authorization policy rules?
• How does Cisco ISE handle 'User Role Changes'?
• Which of the following correctly describes the dual SSID BYOD solution?
• In which scenario is using HTTP redirects most beneficial?
• What are Policy Conditions in Cisco ISE policies?
• Which of the following features does Cisco ISE provide to enhance endpoint security?
• What can be used to verify user or endpoint credentials in an authentication policy?
• What action does Cisco ISE perform when a device is marked as "stolen" in the My Devices portal?
• What are 'User Defined Attributes' in Cisco ISE used for?
• What is the method to manage API Access Control in Cisco ISE?
• Which of the following is the endpoint 802.1X-compliant software service that communicates with NAD authenticators to request network access?
• Which of the following probes can create excessive overhead and should only be used in rare situations?
• Which of the following encrypts all traffic between the client agent and the Cisco ISE server for posture assessment and remediation of clients?
• What role do 'User Defined Attributes' play in policy enforcement in Cisco ISE?
• What is the importance of testing policies in a staging environment first?
• Which feature reduces data collection and replication to a subset of profile-specific attributes so that anything that is not used for profiling policy will not be replicated?
• Which identity source allows Cisco ISE to look for a user or MAC address without authentication being performed?
• What measures does Cisco ISE take to mitigate unauthorized access attempts?
• Which feature in the Guest Access Work Center allows for detailed information about guest and sponsor access to be exported for inspection outside of the ISE Admin portal?
• Which Cisco ISE portal can be used to automatically configure the client supplicant and install appropriate certificates for endpoint authentication to a corporate WLAN?
• Which component in Cisco ISE acts as the central point for managing access policies and authorizations?
• Which feature in Cisco ISE allows for guest access management?
• What is considered a major advantage of using Cisco TrustSec?
• Which three statements correctly describe Cisco ISE functioning as a CA?
• What advantage does a self-service portal provide in Cisco ISE?
• What is the primary function of the Policy Service Node in a Cisco ISE deployment?
• Which of these web authentication scenarios uses the Cisco ISE Policy Node to authenticate users based on username and password?
• Which Cisco ISE feature allows for a learned endpoint inventory?
• Which of the following device template options defines different Vendor-Specific Attributes (VSAs) that are used to represent common concepts?
• What is the effect of software updates on Cisco ISE functionality?
• What is the significance of enabling pxGrid services globally in ISE?
• What is the required action for devices that fail to meet security compliance in Cisco ISE?
• What role does the Policy Set play in Cisco ISE?
• How does Cisco ISE support a Zero Trust security model?
• Which of the following types of users can create, modify, suspend, and delete guest user accounts in the Cisco ISE guest database?
• Which component of Cisco ISE allows administrators to generate reports?
• Which of the following is a key benefit of device profiling in Cisco ISE?
• Which Cisco TrustSec feature uses EAP-FAST to authenticate devices and negotiates IEEE 802.1AE encryption?
• What applies a security group tag to an authenticating RADIUS user or endpoint?
• What role does Logging play in Cisco ISE?
• When a request is matched to an authentication policy, which of the following is NOT a reason that an identity verification might fail?
• Which of the following enables SGT-capable devices to propagate IP-to-SGT mappings across network devices that do not have SGT-capable hardware?
• How does Cisco ISE facilitate device profiling?
• Which three probes should be avoided due to excessive overhead?
• What benefits does Data Segmentation through Cisco ISE offer?
• In which way can 'AI and Machine Learning' improve Cisco ISE functionality?
• Which of the following represents an independent connection to a specific Active Directory server?
• What type of probe includes DHCP SPAN as one of its types?
• Which three statements describe valid functions of the Cisco ISE profiling service?
• What helps in defining the specific actions that can be performed via API in Cisco ISE?
• Which report type would you expect to find in Cisco ISE summarizing user authentication attempts?
• What type of profile is used to specify the radius settings in a Cisco ISE deployment?
• Which feature of Cisco ISE can provide granular control over network access?
• What do Service Profiles in Cisco ISE help to streamline?
• Which probe collects attributes from a network device's ARP table, Cisco Discovery Protocol table, LLDP table, and interface?
• What is the purpose of posture assessment in Cisco ISE?
• Which three of the following are sections of the Posture Work Center to help guide you through the posture deployment?
• What are 'Policy Groups' used for in Cisco ISE?
• What action must be taken to configure a new identity source in Cisco ISE?
• Which two ISE Admin portal pages display profiler statistic graphs and a table of endpoints with their profiler statistics?
• Which of the following organizations supplies the list of fields such as vendor name, product version, product name, and attributes contained in the compliance module used by Cisco ISE posture services?
• Which feature of Cisco ISE helps in analyzing traffic patterns for better security?
• What is the function of Authentication Rules in Cisco ISE?
• What is the default port used by RADIUS for authentication in Cisco ISE?
• Which portal allows employees to both register and provision their device for secure access?
• Which of the new or enhanced features of the Cisco ISE posture service provides posture information to clients, and completely removes itself when finished?
• What component manages the authentication and access control policies in Cisco ISE?
• What does the term 'CoA' stand for in the context of Cisco ISE?
• Which two options are the main configuration categories when customizing a sponsor or guest portal?
• How does Cisco ISE facilitate onboarding for first-time users?
• What is the primary function of the Cisco Identity Services Engine (ISE)?
• Which is used to organize authentication and authorization rules into manageable sections?
• Which license enables TACACS+ device administration for Cisco ISE?
• Which component of the Cisco ISE posture service provides backend support for posture-specific custom conditions and remediation actions?
• Which option is considered a TACACS+ configuration option in Cisco ISE?
• What does 'Trusted Device' provisioning mean in Cisco ISE?
• Which feature allows you to define which events are displayed in the RADIUS live log table?
• What feature facilitates the dynamic assignment of ACLs based on user roles in Cisco ISE?
• What are two main reasons an enterprise might run the Profiler service when deploying Cisco ISE?