VCE-Collection

Question No. 1

Which keying mechanism is used with downlink MACsec?

• A. MACsec Key Agreement (MKA)
• B. Galois Counter Mode
• C. Transport Layer Security
• D. Security Association Protocol

Question No. 2

Which two services are included in the Cisco ISE posture service? (Choose two.)

• A. posture administration
• B. posture run-time
• C. posture monitoring
• D. posture policing
• E. posture catalog

Question No. 3

Which two EAP types require server side certificates? (Choose two.)

• A. EAP-TLS
• B. EAP-FAST/TLS
• C. EAP-MD5
• D. EAP-PEAP
• E. EAP-FAST/GTC

Question No. 4

Which option is the correct format of username in MAB authentication?

• A. host/LSB67.cisco.com
• B. [email protected]
• C. 10:41:7F:46:9F:89
• D. CISCOchris

Question No. 5

How long are sessions kept in the ISE Monitoring and Troubleshooting node If there is authentication but no accounting?

• A. 5 hours
• B. 5 days
• C. 1 hour
• D. 1 day

Question No. 6

Which two options enable security group tags to the assigned to a session?

• A. Firewall
• B. DHCP
• C. ACL
• D. Source VLAN
• E. ISE

Question No. 7

You discover that the Cisco ISE is failing to connect to the Active Directory server. Which option is a possible cause of the problem?

• A. NTP server time synchronization is configured incorrectly.
• B. There is a certificate mismatch between Cisco ISE and Active Directory.
• C. NAT statements required for Active Directory are configured incorrectly.
• D. The RADIUS authentication ports are being blocked by the firewall.

Question No. 8

Which two protocols does Cisco Prime Infrastructure use for device discovery? (Choose two.)

• A. SNAP
• B. LLDP
• C. RARP
• D. DNS
• E. LACP

Question No. 9

What is the purpose of the Cisco ISE Guest Service Sponsor Portal?

• A. It tracks and stores user activity while connected to the Cisco ISE.
• B. It securely authenticates guest users for the Cisco ISE Guest Service.
• C. It filters guest users from account holders to the Cisco ISE.
• D. It creates and manages Guest User accounts.

Question No. 10

Which two additional fields are added to an Ethernet frame when implementing MACsec? (Choose two.)

• A. encapsulating security payload
• B. authentication header
• C. message authentication code
• D. authentication host mode
• E. security tag