Question 1

An engineer is unable to use SSH to connect to a switch after adding the required CLI commands to the device to enable TACACS+. The device administration license has been added to Cisco ISE, and the required policies have been created. Which action is needed to enable access to the switch?

AThe ip ssh source-interface command needs to be set on the switch

B802.1X authentication needs to be configured on the switch.

CThe RSA keypair used for SSH must be regenerated after enabling TACACS+.

DThe switch needs to be added as a network device in Cisco ISE and set to use TACACS+.

Answer : D

Question 2

The IT manager wants to provide different levels of access to network devices when users authenticate using TACACS+. The company needs specific commands to be allowed based on the Active Directory group membership of the different roles within the IT department. The solution must minimize the number of objects created in Cisco ISE. What must be created to accomplish this task?

Aone shell profile and one command set

Bmultiple shell profiles and one command set

Cone shell profile and multiple command sets

Dmultiple shell profiles and multiple command sets

Answer : C

Question 3

What are two differences of TACACS+ compared to RADIUS? (Choose two.)

ATACACS+ uses a connectionless transport protocol, whereas RADIUS uses a connection-oriented transport protocol.

BTACACS+ encrypts the full packet payload, whereas RADIUS only encrypts the password.

CTACACS+ only encrypts the password, whereas RADIUS encrypts the full packet payload.

DTACACS+ uses a connection-oriented transport protocol, whereas RADIUS uses a connectionless transport protocol.

ETACACS+ supports multiple sessions per user, whereas RADIUS supports one session per user.

Answer : B, D

Question 4

What is a valid status of an endpoint attribute during the device registration process?

Ablock listed

Bpending

Cunknown

DDenyAccess

Answer : B

Question 5

An administrator is configuring cisco ISE lo authenticate users logging into network devices using TACACS+ The administrator is not seeing any o the authentication in the TACACS+ live logs. Which action ensures the users are able to log into the network devices?

AEnable the device administration service in the Administration persona

BEnable the session services in the administration persona

CEnable the service sessions in the PSN persona.

DEnable the device administration service in the PSN persona.