Question 1

A Cisco ISE administrator needs to ensure that guest endpoint registrations are only valid for 1 day. When testing the guest policy flow, the administrator sees that the Cisco ISE does not delete the endpoint in the Guest Endpoints identity store after one day and allows access to the guest network after that period. Which configuration is causing this problem?

Options :

A : The RADIUS policy set for guest access is set to allow repeated authentication of the same device.

B : The length of access is set to 7 days in the Guest Portal Settings.

C : The Endpoint Purge Policy is set to 30 days for guest devices.

D : The Guest Account Purge Policy is set to 15 days.

Answer: C

Question 2

A customer wants to set up the Sponsor portal and delegate the authentication flow to a third party for added security while using Kerberos Which database should be used to accomplish this goal?

Options :

A : RSA Token Server

B : Active Directory

C : Local Database

D : LDAP

Answer: B

Question 3

What is the deployment mode when two Cisco ISE nodes are configured in an environment?

Options :

A : distributed

B : active

C : standalone

D : standard

Answer: A

Question 4

An administrator needs to connect ISE to Active Directory as an external authentication source and allow the proper ports through the firewall. Which two ports should be opened to accomplish this task? (Choose two)

Options :

A : TELNET 23

B : LDAP 389

C : HTTP 80

D : HTTPS 443

E : MSRPC 445

Answer: B,E

Question 5

What is a difference between RADIUS and TACACS+?

Options :

A : RADIUS uses connection-oriented transport, and TACACS+ uses best-effort delivery.

B : RADIUS offers multiprotocol support, and TACACS+ supports only IP traffic.

C : RADIUS combines authentication and authorization functions, and TACACS+ separates them.

D : RADIUS supports command accounting, and TACACS+ does not.

Answer: C