QUESTION 76
An engineer is configuring a virtual Cisco ISE deployment and needs each persona to be on a different node. Which persona should be configured with the largest amount of storage in this environment?

QUESTION 77
Which two values are compared by the binary comparison (unction in authentication that is based on Active Directory?

QUESTION 78
When configuring Active Directory groups, what does the Cisco ISE use to resolve ambiguous group names?

QUESTION 79
Which advanced option within a WLAN must be enabled to trigger Central Web Authentication for Wireless users on AireOS controller?

QUESTION 80
What are two components of the posture requirement when configuring Cisco ISE posture? (Choose two)

QUESTION 81
Which of these is not a method to obtain Cisco ISE profiling data?

QUESTION 82
What does the dot1x system-auth-control command do?

QUESTION 83
An organization wants to improve their BYOD processes to have Cisco ISE issue certificates to the BYOD endpoints. Currently, they have an active certificate authority and do not want to replace it with Cisco ISE. What must be configured within Cisco ISE to accomplish this goal?

QUESTION 84
Refer to the exhibit:

Which command is typed within the CU of a switch to view the troubleshooting output?

QUESTION 85
Which Cisco ISE node does not support automatic failover?

QUESTION 86
What is a function of client provisioning?

QUESTION 87
Which term refers to an endpoint agent that tries to join an 802 1X-enabled network?

QUESTION 88
What must be configured on the Cisco ISE authentication policy for unknown MAC addresses/identities for successful authentication?

QUESTION 89
Drag and drop the description from the left onto the protocol on the right that is used to carry out system authentication, authentication, and accounting.

QUESTION 90
An engineer is configuring 802.1X and wants it to be transparent from the users’ point of view. The implementation should provide open authentication on the switch ports while providing strong levels of security for non-authenticated devices. Which deployment mode should be used to achieve this?

QUESTION 91
What does the dot1x system-auth-control command do?

QUESTION 92
How is policy services node redundancy achieved in a deployment?

QUESTION 93
Which two roles are taken on by the administration person within a Cisco ISE distributed environment?
(Choose two.)

QUESTION 94
A network engineer is configuring guest access and notices that when a guest user registers a second device for access, the first device loses access What must be done to ensure that both devices for a particular user are able to access the guest network simultaneously?

QUESTION 95
Which two ports do network devices typically use for CoA? (Choose two )

QUESTION 96
What gives Cisco ISE an option to scan endpoints for vulnerabilities?