Question 1

What allows an endpoint to obtain a digital certificate from Cisco ISE during a BYOD flow?

Accepted Answer

A)   Application Visibility and Control
B)   Supplicant Provisioning Wizard
C)   My Devices Portal
D)   Network Access ControlE) All of the above
F) None of the above

Question 2

What sends the redirect ACL that is configured in the authorization profile back to the Cisco WLC?

Accepted Answer

A)   State attribute
B)   Class attribute
C)   Event
D)   Cisco-av-pairE) A) and C)
F) All of the above

Question 3

An engineer is configuring a guest password policy and needs to ensure that the password complexity requirements are set to mitigate brute force attacks. Which two requirements should be included in this policy? (Choose two.)

Accepted Answer

A)   active username limit
B)   password expiration period
C)   access code control
D)   username expiration date
E)   minimum password lengthF) A) and E)
G) All of the above

Question 4

If a user reports a device lost or stolen, which portal should be used to prevent the device from accessing the network while still providing information about why the device is blocked?

Accepted Answer

A)   Client Provisioning
B)   BYOD
C)   Guest
D)   Block listE) B) and C)
F) A) and C)

Question 5

Which two ports must be open between Cisco ISE and the client when you configure posture on Cisco ISE? (Choose two.)

Accepted Answer

A)   TCP 80
B)   TCP 8905
C)   TCP 8443
D)   TCP 8906
E)   TCP 443F) B) and E)
G) A) and E)

Question 6

Which profiling probe collects the user-agent string?

Accepted Answer

A)   DHCP
B)   HTTP
C)   NMAP
D)   ADE) None of the above
F) A) and B)

Question 7

Which two responses from the RADIUS server to NAS are valid during the authentication process? (Choose two.)

Accepted Answer

A)   access-challenge
B)   access-accept
C)   access-request
D)   access-reserved
E)   access-responseF) B) and E)
G) B) and C)

Question 8

During BYOD flow, from where does a Microsoft Windows PC download the Network Setup Assistant?

Accepted Answer

A)   Microsoft App Store
B)   Cisco App Store
C)   Cisco ISE directly
D)   Native OTA functionalityE) C) and D)
F) A) and B)

Question 9

What is needed to configure wireless guest access on the network?

Accepted Answer

A)   endpoint already profiled in ISE
B)   WEBAUTH ACL for redirection
C)   Captive Portal Bypass turned on
D)   valid user account in Active DirectoryE) C) and D)
F) All of the above

Question 10

In which two ways can users and endpoints be classified for TrustSec? (Choose two.)

Accepted Answer

A)   VLAN
B)   dynamic
C)   QoS
D)   SGACL
E)   SXPF) A) and E)
G) A) and D)

Question 11

Which are two characteristics of TACACS+? (Choose two.)

Accepted Answer

A)   It separates authorization and authentication functions.
B)   It combines authorization and authentication functions.
C)   It uses UDP port 49.
D)   It encrypts the password only.
E)   It uses TCP port 49.F) None of the above
G) A) and C)

Question 12

Which Cisco ISE service allows an engineer to check the compliance of endpoints before connecting to the network?

Accepted Answer

A)   qualys
B)   posture
C)   personas
D)   nexposeE) None of the above
F) All of the above

Question 13

Which two task types are included in the Cisco ISE common tasks support for TACACS+ profiles? (Choose two.)

Accepted Answer

A)   ASA
B)   Firepower
C)   Shell
D)   WLC
E)   IOSF) A) and C)
G) All of the above

Question 14

Which permission is common to the Active Directory Join and Leave operations?

Accepted Answer

A)   Remove the Cisco ISE machine account from the domain.
B)   Search Active Directory to see if a Cisco ISE machine account already exists.
C)   Set attributes on the Cisco ISE machine account.
D)   Create a Cisco ISE machine account in the domain if the machine account does not already exist.E) B) and C)
F) A) and C)

Question 15

Which personas can a Cisco ISE node assume?

Accepted Answer

A)   policy service, gatekeeping, and monitoring
B)   administration, monitoring, and gatekeeping
C)   administration, policy service, and monitoring
D)   administration, policy service, gatekeepingE) A) and B)
F) A) and C)

Question 16

What are two components of the posture requirement when configuring Cisco ISE posture? (Choose two.)

Accepted Answer

A)   Client Provisioning portal
B)   remediation actions
C)   updates
D)   access policy
E)   conditionsF) A) and E)
G) None of the above

Question 17

If a user reports a device lost or stolen, which portal should be used to prevent the device from accessing the network while still providing information about why the device is blocked?

Accepted Answer

A)   Client Provisioning
B)   BYOD
C)   Guest
D)   BlacklistE) A) and C)
F) B) and C)

Question 18

During BYOD flow, where does a Microsoft Windows PC download the Network Setup Assistant?

Accepted Answer

A)   Microsoft App Store
B)   Cisco App Store
C)   Cisco ISE directly
D)   Native OTA functionalityE) A) and B)
F) A) and C)

Question 19

What are two requirements of generating a single certificate in Cisco ISE by using a certificate provisioning portal, without generating a certificate signing request? (Choose two.)

Accepted Answer

A)   Enter the IP address of the device.
B)   Enter the common name.
C)   Choose the hashing method.
D)   Locate the CSV file for the device MAC.
E)   Select the certificate template.F) C) and E)
G) A) and B)

Question 20

An engineer is configuring web authentication using non-standard ports and needs the switch to redirect traffic to the correct port. Which command should be used to accomplish this task?

Accepted Answer

A) permit tcp any any eq B) ip http port C) aaa group server radius D) aaa group server radius proxyE) A) and B) F) A) and C)

Exam 24: Securing Email with Cisco Email Security Appliance (300-720 SESA)

In which two ways can users and endpoints be classified for TrustSec? (Choose two.)

Correct AnswerverifiedShow Answer

Which Cisco ISE service allows an engineer to check the compliance of endpoints before connecting to the network?

Correct AnswerverifiedShow Answer

Which profiling probe collects the user-agent string?

Correct AnswerverifiedShow Answer

If a user reports a device lost or stolen, which portal should be used to prevent the device from accessing the network while still providing information about why the device is blocked?

Correct AnswerverifiedShow Answer

Which personas can a Cisco ISE node assume?

Correct AnswerverifiedShow Answer

What are two requirements of generating a single certificate in Cisco ISE by using a certificate provisioning portal, without generating a certificate signing request? (Choose two.)

Correct AnswerverifiedShow Answer

Which two ports must be open between Cisco ISE and the client when you configure posture on Cisco ISE? (Choose two.)

Correct AnswerverifiedShow Answer

If a user reports a device lost or stolen, which portal should be used to prevent the device from accessing the network while still providing information about why the device is blocked?

Correct AnswerverifiedShow Answer

What allows an endpoint to obtain a digital certificate from Cisco ISE during a BYOD flow?

Correct AnswerverifiedShow Answer

An engineer is configuring web authentication using non-standard ports and needs the switch to redirect traffic to the correct port. Which command should be used to accomplish this task?

Correct AnswerverifiedShow Answer

An engineer is configuring a guest password policy and needs to ensure that the password complexity requirements are set to mitigate brute force attacks. Which two requirements should be included in this policy? (Choose two.)

Correct AnswerverifiedShow Answer

What are two components of the posture requirement when configuring Cisco ISE posture? (Choose two.)

Correct AnswerverifiedShow Answer

Which are two characteristics of TACACS+? (Choose two.)

Correct AnswerverifiedShow Answer

During BYOD flow, where does a Microsoft Windows PC download the Network Setup Assistant?

Correct AnswerverifiedShow Answer

During BYOD flow, from where does a Microsoft Windows PC download the Network Setup Assistant?

Correct AnswerverifiedShow Answer

What is needed to configure wireless guest access on the network?

Correct AnswerverifiedShow Answer

Which two task types are included in the Cisco ISE common tasks support for TACACS+ profiles? (Choose two.)

Correct AnswerverifiedShow Answer

Which two responses from the RADIUS server to NAS are valid during the authentication process? (Choose two.)

Correct AnswerverifiedShow Answer

What sends the redirect ACL that is configured in the authorization profile back to the Cisco WLC?

Correct AnswerverifiedShow Answer

Which permission is common to the Active Directory Join and Leave operations?

Correct AnswerverifiedShow Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified