QUESTION 118
A Cisco ISE engineer is creating certificate authentication profile to be used with machine authentication for the network. The engineer wants to be able to compare the user-presented certificate with a certificate stored in Active Directory. What must be done to accomplish this?

QUESTION 119
An administrator is configuring TACACS+ on a Cisco switch but cannot authenticate users with Cisco ISE. The configuration contains the correct key of Cisc039712287. but the switch is not receiving a response from the Cisco ISE instance What must be done to validate the AAA configuration and identify the problem with the TACACS+ servers?

QUESTION 120

Refer to the exhibit. In which scenario does this switch configuration apply?

QUESTION 121
An adminitrator is migrating device administration access to Cisco ISE from the legacy TACACS+ solution that used only privilege 1 and 15 access levels. The organization requires more granular controls of the privileges and wants to customize access levels 2-5 to correspond with different roles and access needs. Besides defining a new shell profile in Cisco ISE. what must be done to accomplish this configuration?

QUESTION 122
A network engineer responsible for the switching environment must provision a new switch to properly propagate security group tags within the TrustSec inline method. Which CLI command must the network engineer enter on the switch to globally enable the tagging of SGTs?

QUESTION 123
Which personas can a Cisco ISE node assume’?

QUESTION 124
A company is attempting to improve their BYOD policies and restrict access based on certain criteri a. The company’s subnets are organized by building. Which attribute should be used in order to gain access based on location?

QUESTION 125
An administrator is attempting to replace the built-in self-signed certificates on a Cisco ISE appliance. The CA is requesting some information about the appliance in order to sign the new certificate. What must be done in order to provide the CA this information?

QUESTION 126
Select and Place

QUESTION 127
A customer wants to set up the Sponsor portal and delegate the authentication flow to a third party for added security while using Kerberos Which database should be used to accomplish this goal?

QUESTION 128
What service can be enabled on the Cisco ISE node to identity the types of devices connecting to a network?

QUESTION 129
Which two external identity stores are supported by Cisco ISE for password types? (Choose two.)

QUESTION 130
Which supplicant(s) and server(s) are capable of supporting EAR-CHAINING?

QUESTION 131
In a Cisco ISE split deployment model, which load is split between the nodes?

QUESTION 132
What is a difference between TACACS+ compared to RADIUS? (Choose two.)

QUESTION 133
Refer to the exhibit. Which command is typed within the CU of a switch to view the troubleshooting output?