Question 1

When creating a policy within Cisco ISE for network access control, the administrator wants to allow different access restrictions based upon the wireless SSID to which the device is connecting. Which policy condition must be used in order to accomplish this?

Options :

A : Network Access NetworkDeviceName CONTAINS < SSID Name >

B : DEVICE Device Type CONTAINS < SSID Name >

C : Radius Called-Station-ID CONTAINS < SSID Name >

D : Airespace Airespace-Wlan-ld CONTAINS < SSID Name >

Answer: C

Question 2

An administrator is configuring a switch port for use with 802 1X What must be done so that the port will allow voice and multiple data endpoints?

Options :

A : Configure the port with the authentication host-mode multi-auth command

B : Connect the data devices to the port, then attach the phone behind them.

C : Use the command authentication host-mode multi-domain on the port

D : Connect a hub to the switch port to allow multiple devices access after authentication

Answer: A

Question 3

When configuring an authorization policy, an administrator cannot see specific Active Directory groups present in their domain to be used as a policy condition. However, other groups that are in the same domain are seen What is causing this issue?

Options :

A : Cisco ISE only sees the built-in groups, not user created ones

B : The groups are present but need to be manually typed as conditions

C : Cisco ISE-s connection to the AD join point is failing

D : The groups are not added to Cisco ISE under the AD join point

Answer: D

Question 4

Which RADIUS attribute is used to dynamically assign the inactivity active timer for MAB users from the Cisco ISE node'?

Options :

A : radius-server timeout

B : session-timeout

C : idle-timeout

D : termination-action

Answer: C

Question 5

In a standalone Cisco ISE deployment, which two personas are configured on a node? (Choose two )

Options :

A : publisher

B : administration

C : primary

D : policy service

E : subscriber

Answer: B,D