Question 1

An engineer needs to configure a new certificate template in the Cisco ISE Internal Certificate Authority to prevent BYOD devices from needing to re-enroll when their MAC address changes. Which option must be selected in the Subject Alternative Name field?

ACommon Name and GUID

BMAC Address and GUID

CDistinguished Name

DCommon Name

Answer : B

The engineer needs to select the option of MAC Address and GUID in the Subject Alternative Name field when configuring a new certificate template in the Cisco ISE Internal Certificate Authority to prevent BYOD devices from needing to re-enroll when their MAC address changes.

Question 2

A security administrator is using Cisco ISE to create a BYOD onboarding solution for all employees who use personal devices on the corporate network. The administrator generates a Certificate Signing Request and signs the request using an external Certificate Authority server. Which certificate usage option must be selected when importing the certificate into ISE?

ARADIUS

BDLTS

CPortal

DAdmin

Answer : C

Question 3

An engineer must configure Cisco ISE to provide internet access for guests in which guests are required to enter a code to gain network access. Which action accomplishes the goal?

AConfigure the hotspot portal for guest access and require an access code.

BConfigure the sponsor portal with a single account and use the access code as the password.

CConfigure the self-registered guest portal to allow guests to create a personal access code.

DCreate a BYOD policy that bypasses the authentication of the user and authorizes access codes.

Answer : A

Question 4

An engineer wants to learn more about Cisco ISE and deployed a new lab with two nodes. Which two persona configurations allow the engineer to successfully test redundancy of a failed node? (Choose two.)

AConfigure one of the Cisco ISE nodes as the Health Check node.

BConfigure both nodes with the PAN and MnT personas only.

CConfigure one of the Cisco ISE nodes as the primary PAN and MnT personas and the other as the secondary.

DConfigure both nodes with the PAN, MnT, and PSN personas.

EConfigure one of the Cisco ISE nodes as the primary PAN and PSN personas and the other as the secondary.

Answer : C, E

Question 5

Which Cisco ISE deployment model is recommended for an enterprise that has over 50,000 concurrent active endpoints?

Alarge deployment with fully distributed nodes running all personas

Bmedium deployment with primary and secondary PAN/MnT/pxGrid nodes with shared PSNs

Cmedium deployment with primary and secondary PAN/MnT/pxGrid nodes with dedicated PSNs

Dsmall deployment with one primary and one secondary node running all personas